Merge pull request #10893 from MicrosoftDocs/danbrown-privacy-freshness

Freshness updates to Windows privacy articles (endpoints)
This commit is contained in:
Dan Brown 2025-05-23 15:32:25 -07:00 committed by GitHub
commit db1a3ad41b
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
5 changed files with 23 additions and 18 deletions

View File

@ -7,8 +7,9 @@ ms.localizationpriority: high
author: DHB-MSFT author: DHB-MSFT
ms.author: danbrown ms.author: danbrown
manager: dansimp manager: dansimp
ms.date: 06/13/2024 ms.date: 05/23/2025
ms.topic: reference ms.topic: reference
hideEdit: true
ms.collection: ms.collection:
- privacy-windows - privacy-windows
- must-keep - must-keep
@ -80,7 +81,7 @@ Although enterprise admins can turn off most essential services, we recommend, w
Windows ships with Microsoft Edge on Windows devices. Microsoft Edge is the default browser and is recommended for the best web browsing experience. Windows ships with Microsoft Edge on Windows devices. Microsoft Edge is the default browser and is recommended for the best web browsing experience.
You can find details on all of Microsoft Edge's connected experiences and essential services [here](/microsoft-edge/privacy-whitepaper). To turn off specific Microsoft Edge features, see [Microsoft Edge](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#13-microsoft-edge). You can find details on all of Microsoft Edge's connected experiences and essential services in the [Microsoft Edge Privacy Whitepaper](/microsoft-edge/privacy-whitepaper). To turn off specific Microsoft Edge features, see [Microsoft Edge](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#13-microsoft-edge).
## IE essential services and connected experiences ## IE essential services and connected experiences
@ -105,8 +106,8 @@ Internet Explorer shares many of the Windows essential services listed above. Th
## Related articles ## Related articles
- [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md) - [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md)
- [Connected experiences in Office](/deployoffice/privacy/connected-experiences) - [Connected experiences in Office](/microsoft-365-apps/privacy/connected-experiences)
- [Essential services for Office](/deployoffice/privacy/essential-services) - [Essential services for Office](/microsoft-365-apps/privacy/essential-services)
To view endpoints for Windows Enterprise, see: To view endpoints for Windows Enterprise, see:

View File

@ -7,8 +7,9 @@ ms.localizationpriority: high
author: DHB-MSFT author: DHB-MSFT
ms.author: danbrown ms.author: danbrown
manager: dansimp manager: dansimp
ms.date: 10/06/2023 ms.date: 05/23/2025
ms.topic: reference ms.topic: reference
hideEdit: true
ms.collection: ms.collection:
- privacy-windows - privacy-windows
- must-keep - must-keep
@ -185,4 +186,4 @@ To view endpoints for non-Enterprise Windows 11 editions, see [Windows 11 connec
## Related links ## Related links
- [Office 365 URLs and IP address ranges](/microsoft-365/enterprise/urls-and-ip-address-ranges) - [Office 365 URLs and IP address ranges](/microsoft-365/enterprise/urls-and-ip-address-ranges)
- [Network endpoints for Microsoft Intune](/mem/intune/fundamentals/intune-endpoints) - [Network endpoints for Microsoft Intune](/intune/intune-service/fundamentals/intune-endpoints)

View File

@ -7,8 +7,9 @@ ms.localizationpriority: high
author: DHB-MSFT author: DHB-MSFT
ms.author: danbrown ms.author: danbrown
manager: dansimp manager: dansimp
ms.date: 01/18/2018 ms.date: 05/23/2025
ms.topic: reference ms.topic: reference
hideEdit: true
ms.collection: ms.collection:
- privacy-windows - privacy-windows
- must-keep - must-keep
@ -313,7 +314,7 @@ If you [turn off traffic for this endpoint](manage-connections-from-windows-oper
## Office ## Office
The following endpoints are used to connect to the Microsoft 365 admin center's shared infrastructure, including Office. For more info, see [Office 365 URLs and IP address ranges](https://support.office.com/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US#BKMK_Portal-identity). The following endpoints are used to connect to the Microsoft 365 admin center's shared infrastructure, including Office. For more info, see [Office 365 URLs and IP address ranges](/microsoft-365/enterprise/urls-and-ip-address-ranges).
You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps. You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps.
If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents. If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents.
@ -327,7 +328,7 @@ If you turn off traffic for these endpoints, users won't be able to save documen
| | HTTPS | `nexusrules.officeapps.live.com` | | | HTTPS | `nexusrules.officeapps.live.com` |
| | HTTPS | `officeclient.microsoft.com` | | | HTTPS | `officeclient.microsoft.com` |
The following endpoint is used to connect to the Microsoft 365 admin center's shared infrastructure, including Office. For more info, see [Office 365 URLs and IP address ranges](https://support.office.com/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US#BKMK_Portal-identity). The following endpoint is used to connect to the Microsoft 365 admin center's shared infrastructure, including Office. For more info, see [Office 365 URLs and IP address ranges](/microsoft-365/enterprise/urls-and-ip-address-ranges).
You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps. You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps.
If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents. If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents.
@ -357,7 +358,7 @@ If you [turn off traffic for this endpoint](manage-connections-from-windows-oper
|:--------------:|:--------:|:------------| |:--------------:|:--------:|:------------|
| onedrive | HTTP \ HTTPS | `g.live.com/1rewlive5skydrive/ODSUProduction` | | onedrive | HTTP \ HTTPS | `g.live.com/1rewlive5skydrive/ODSUProduction` |
The following endpoint is used by OneDrive for Business to download and verify app updates. For more info, see [Office 365 URLs and IP address ranges](https://support.office.com/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US). The following endpoint is used by OneDrive for Business to download and verify app updates. For more info, see [Office 365 URLs and IP address ranges](/microsoft-365/enterprise/urls-and-ip-address-ranges).
To turn off traffic for this endpoint, uninstall OneDrive for Business. In this case, your device won't be able to get OneDrive for Business app updates. To turn off traffic for this endpoint, uninstall OneDrive for Business. In this case, your device won't be able to get OneDrive for Business app updates.
| Source process | Protocol | Destination | | Source process | Protocol | Destination |
@ -400,7 +401,7 @@ The following endpoint is used to retrieve Skype configuration values. To turn o
## Windows Defender ## Windows Defender
The following endpoint is used for Windows Defender when Cloud-based Protection is enabled. The following endpoint is used for Windows Defender when Cloud-based Protection is enabled.
If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-defender), the device won't use Cloud-based Protection. For a detailed list of Microsoft Defender Antivirus cloud service connections, see [Allow connections to the Microsoft Defender Antivirus cloud service](/microsoft-365/security/defender-endpoint/configure-network-connections-microsoft-defender-antivirus#allow-connections-to-the-microsoft-defender-antivirus-cloud-service). If you [turn off traffic for this endpoint](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-defender), the device won't use Cloud-based Protection. For a detailed list of Microsoft Defender Antivirus cloud service connections, see [Allow connections to the Microsoft Defender Antivirus cloud service](/defender-endpoint/configure-network-connections-microsoft-defender-antivirus#allow-connections-to-the-microsoft-defender-antivirus-cloud-service).
| Source process | Protocol | Destination | | Source process | Protocol | Destination |
|:--------------:|:--------:|:------------| |:--------------:|:--------:|:------------|
@ -492,5 +493,5 @@ To view endpoints for other versions of Windows 10 Enterprise, see:
## Related links ## Related links
- [Office 365 URLs and IP address ranges](https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US) - [Office 365 URLs and IP address ranges](/microsoft-365/enterprise/urls-and-ip-address-ranges)
- [Network endpoints for Microsoft Intune](/mem/intune/fundamentals/intune-endpoints) - [Network endpoints for Microsoft Intune](/intune/intune-service/fundamentals/intune-endpoints)

View File

@ -7,8 +7,9 @@ ms.localizationpriority: high
author: DHB-MSFT author: DHB-MSFT
ms.author: danbrown ms.author: danbrown
manager: dansimp manager: dansimp
ms.date: 01/18/2018 ms.date: 05/23/2025
ms.topic: reference ms.topic: reference
hideEdit: true
ms.collection: ms.collection:
- privacy-windows - privacy-windows
- must-keep - must-keep
@ -91,7 +92,7 @@ The following methodology was used to derive these network endpoints:
||The following endpoint is used to get Microsoft Store analytics.|TLSv1.2/HTTPS/HTTP|manage.devcenter.microsoft.com| ||The following endpoint is used to get Microsoft Store analytics.|TLSv1.2/HTTPS/HTTP|manage.devcenter.microsoft.com|
|Network Connection Status Indicator (NCSI)|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-ncsi)| |Network Connection Status Indicator (NCSI)|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-ncsi)|
||Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to this endpoint to determine if the device can communicate with the Internet. If you turn off traffic for this endpoint, NCSI won't be able to determine if the device is connected to the Internet and the network status tray icon will show a warning.|HTTPS|`www.msftconnecttest.com`| ||Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to this endpoint to determine if the device can communicate with the Internet. If you turn off traffic for this endpoint, NCSI won't be able to determine if the device is connected to the Internet and the network status tray icon will show a warning.|HTTPS|`www.msftconnecttest.com`|
|Office|The following endpoints are used to connect to the Office 365 portal's shared infrastructure, including Office in a browser. For more info, see Office 365 URLs and IP address ranges. You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps. If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| |Office|The following endpoints are used to connect to the Office 365 portal's shared infrastructure, including Office in a browser. For more info, see [Office 365 URLs and IP address ranges](/microsoft-365/enterprise/urls-and-ip-address-ranges). You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps. If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)|
|||HTTPS|www.office.com| |||HTTPS|www.office.com|
|||HTTPS|blobs.officehome.msocdn.com| |||HTTPS|blobs.officehome.msocdn.com|
|||HTTPS|officehomeblobs.blob.core.windows.net| |||HTTPS|officehomeblobs.blob.core.windows.net|
@ -138,4 +139,4 @@ To view endpoints for other versions of Windows 10 Enterprise, see:
## Related links ## Related links
- [Office 365 URLs and IP address ranges](/microsoft-365/enterprise/urls-and-ip-address-ranges) - [Office 365 URLs and IP address ranges](/microsoft-365/enterprise/urls-and-ip-address-ranges)
- [Network infrastructure requirements for Microsoft Intune](/mem/intune/fundamentals/intune-endpoints) - [Network endpoints for Microsoft Intune](/intune/intune-service/fundamentals/intune-endpoints)

View File

@ -7,8 +7,9 @@ ms.localizationpriority: high
author: DHB-MSFT author: DHB-MSFT
ms.author: danbrown ms.author: danbrown
manager: dansimp manager: dansimp
ms.date: 10/06/2023 ms.date: 05/23/2025
ms.topic: reference ms.topic: reference
hideEdit: true
ms.collection: ms.collection:
- privacy-windows - privacy-windows
- must-keep - must-keep