Used for updates for Cortana, apps, and Live Tiles Used for Windows Defender when Cloud-based Protection is enabled Used to download updates to the Weather app Live Tile Used to get images that are used for Microsoft Store suggestions Used to revoke licenses for malicious apps on the Microsoft Store Used to retrieve Windows Spotlight metadata Used by OneDrive for Business to download and verify app updates netĬRL and OCSP checks to the issuing certificate authorities Windows Update, Microsoft Update, and Microsoft Store services Used for the Windows Push Notification Services (WNS)Įnables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store Used for Windows apps to dynamically update their configuration Used for Windows Update downloads of apps and OS updates Used by Microsoft OfficeHub to get the metadata of Microsoft Office apps Microsoft Store or Inbox MSN Apps image download Highwinds Content Delivery Network / Windows updates

Used to download operating system patches and updates Used to check for updates to Maps that have been downloaded for offline use For example, an endpoint for *. might be used to load balance requests to an Azure datacenter, which can change over time. Microsoft uses global load balancers that can appear in network trace-routes.

These tests were conducted for one week, but if you capture traffic for longer you may have different results.

It's possible your results may be different.

These tests were conducted in an approved Microsoft lab.

Therefore, no IPV6 traffic is reported here.

All traffic was captured in our lab using an IPV4 network.

The test virtual machine(s) was logged into using a local account, and was not joined to a domain or Azure Active Directory.

Compile reports on traffic going to public IP addresses.

Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic.

Leave the device(s) running idle for a week ('idle' means a user is not interacting with the system/device).

Set up the latest version of Windows 10 on a test virtual machine using the default settings.

The following methodology was used to derive the network endpoints: In addition to the endpoints listed for Windows 10 Enterprise, the following endpoints are available on other non-Enterprise editions of Windows 10, version 1903.

Team edge witch it