Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Important
This version of Windows 10 has reached its end of servicing date. For more information, see Microsoft Product Lifecyle.
Applies to
- Windows 10 Home, version 2004
- Windows 10 Professional, version 2004
- Windows 10 Education, version 2004
In addition to the endpoints listed for Windows 10 Enterprise, the following endpoints are available on other non-Enterprise editions of Windows 10, version 2004.
The following methodology was used to derive the network endpoints:
- Set up the latest version of Windows 10 on a test virtual machine using the default settings.
- Leave the device(s) running idle for a week ("idle" means a user is not interacting with the system/device).
- Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic.
- Compile reports on traffic going to public IP addresses.
- The test virtual machine(s) was logged into using a local account, and was not joined to a domain or Azure Active Directory.
- All traffic was captured in our lab using a IPV4 network. Therefore, no IPV6 traffic is reported here.
- These tests were conducted in an approved Microsoft lab. It's possible your results may be different.
- These tests were conducted for one week. If you capture traffic for longer you may have different results.
Note
Microsoft uses global load balancers that can appear in network trace-routes. For example, an endpoint for *.akadns.net might be used to load balance requests to an Azure datacenter, which can change over time.
Windows 10 Home
| Destination | Protocol | Description |
|---|---|---|
| *.delivery.mp.microsoft.com | HTTP | Used to download operating system patches, updates, and apps from Microsoft |
| *.prod.do.dsp.mp.microsoft.com | TLSv1.2 | Windows Update |
| *.smartscreen.microsoft.com | HTTPS | Windows Defender SmartScreen |
| *.smartscreen-prod.microsoft.com | HTTPS | Windows Defender SmartScreen |
| *.update.microsoft.com | TLSv1.2 | Enables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store |
| *.windowsupdate.com | HTTP | Used to download operating system patches and updates |
| *dl.delivery.mp.microsoft.com | HTTP | Used to download operating system patches, updates, and apps from Microsoft |
| *storecatalogrevocation.storequality.microsoft.com | TLSv1.2 | Used to revoke licenses for malicious apps on the Microsoft Store |
| arc.msn.com | TLSv1.2 | Windows Spotlight |
| cdn.onenote.net | HTTPS | OneNote |
| config.edge.skype.com | HTTPS | Skype |
| config.teams.microsoft.com | HTTPS | Skype |
| crl.microsoft.com | HTTPS | Skype |
| ctldl.windowsupdate.com | HTTP | Certificate Trust List |
| da.xboxservices.com | HTTPS | Microsoft Edge |
| *displaycatalog.mp.microsoft.com | HTTPS | Microsoft Store |
| dmd.metaservices.microsoft.com | HTTP | Device Authentication |
| evoke-windowsservices-tas.msedge.net | TLSv1.2 | Photos app |
| fs.microsoft.com | TLSv1.2 | Maps application |
| g.live.com | TLSv1.2 | OneDrive |
| go.microsoft.com | HTTPS | Windows Defender |
| img-prod-cms-rt-microsoft-com | TLSv1.2 | This endpoint is related to Microsoft Edge |
| licensing.mp.microsoft.com | HTTPS | Licensing |
| login.live.com | TLSv1.2 | Device Authentication |
| logincdn.msauth.net | TLSv1.2 | Device Authentication |
| manage.devcenter.microsoft.com | TLSv1.2 | Microsoft Store analytics |
| maps.windows.com | TLSv1.2 | Related to Maps application |
| ocsp.digicert.com | HTTPS | CRL and OCSP checks to the issuing certificate authorities |
| oneclient.sfx.ms | HTTPS | Used by OneDrive for Business to download and verify app updates |
| pipe.aria.microsoft.com | HTTPS | Used to retrieve Skype configuration values |
| ris.api.iris.microsoft.com | TLSv1.2 | Windows Telemetry |
| settings-win.data.microsoft.com | TLSv1.2 | Used for Windows apps to dynamically update their configuration |
| storesdk.dsx.mp.microsoft.com | HTTPS | Used to communicate with Microsoft Store |
| telecommand.telemetry.microsoft.com | TLSv1.2 | Used by Windows Error Reporting |
| tile-service.weather.microsoft.com | HTTPS | Used to download updates to the Weather app Live Tile |
| tsfe.trafficshaping.dsp.mp.microsoft.com | TLSv1.2 | Used for content regulation |
| v10.events.data.microsoft.com | TLSv1.2 | Diagnostic Data |
| v20.events.data.microsoft.com | TLSv1.2 | Diagnostic Data |
| watson.telemetry.microsoft.com | HTTPS | Diagnostic Data |
| wdcp.microsoft.com | TLSv1.2 | Used for Windows Defender when Cloud-based Protection is enabled |
| www.bing.com | TLSv1.2 | Used for updates for Cortana, apps, and Live Tiles |
| www.msftconnecttest.com | HTTP | Network Connection (NCSI) |
| www.office.com | HTTPS | Microsoft Office |
Windows 10 Pro
| Destination | Protocol | Description |
|---|---|---|
| *.delivery.mp.microsoft.com | HTTP | Used to download operating system patches, updates, and apps from Microsoft |
| *.prod.do.dsp.mp.microsoft.com | TLSv1.2 | Windows Update |
| *.smartscreen.microsoft.com | HTTPS | Windows Defender SmartScreen |
| *.smartscreen-prod.microsoft.com | HTTPS | Windows Defender SmartScreen |
| *.update.microsoft.com | TLSv1.2 | Enables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store |
| *.windowsupdate.com | HTTP | Used to download operating system patches and updates |
| *.wns.windows.com | TLSv1.2 | Used for the Windows Push Notification Services (WNS) |
| *dl.delivery.mp.microsoft.com | HTTP | Used to download operating system patches, updates, and apps from Microsoft |
| *msn-com.akamaized.net | HTTPS | This endpoint is related to Microsoft Edge |
| *ring.msedge.net | HTTPS | Used by Microsoft OfficeHub to get the metadata of Microsoft Office apps |
| *storecatalogrevocation.storequality.microsoft.com | TLSv1.2 | Used to revoke licenses for malicious apps on the Microsoft Store |
| arc.msn.com | TLSv1.2 | Windows Spotlight |
| blobs.officehome.msocdn.com | HTTPS | OneNote |
| cdn.onenote.net | HTTPS | OneNote |
| checkappexec.microsoft.com | HTTPS | OneNote |
| config.edge.skype.com | HTTPS | Skype |
| config.teams.microsoft.com | HTTPS | Skype |
| crl.microsoft.com | HTTPS | Skype |
| ctldl.windowsupdate.com | HTTP | Certificate Trust List |
| d2i2wahzwrm1n5.cloudfront.net | HTTPS | Microsoft Edge |
| da.xboxservices.com | HTTPS | Microsoft Edge |
| *displaycatalog.mp.microsoft.com | HTTPS | Microsoft Store |
| dlassets-ssl.xboxlive.com | HTTPS | Xbox Live |
| dmd.metaservices.microsoft.com | HTTP | Device Authentication |
| evoke-windowsservices-tas.msedge.net | TLSv1.2 | Photos app |
| fp.msedge.net | HTTPS | Cortana and Live Tiles |
| fs.microsoft.com | TLSv1.2 | Maps application |
| g.live.com | TLSv1.2 | OneDrive |
| go.microsoft.com | HTTPS | Windows Defender |
| img-prod-cms-rt-microsoft-com* | TLSv1.2 | This endpoint is related to Microsoft Edge |
| licensing.mp.microsoft.com | HTTPS | Licensing |
| login.live.com | TLSv1.2 | Device Authentication |
| manage.devcenter.microsoft.com | TLSv1.2 | Microsoft Store analytics |
| maps.windows.com | TLSv1.2 | Related to Maps application |
| ocsp.digicert.com | HTTPS | CRL and OCSP checks to the issuing certificate authorities |
| oneclient.sfx.ms | HTTPS | Used by OneDrive for Business to download and verify app updates |
| pipe.aria.microsoft.com | HTTPS | Used to retrieve Skype configuration values |
| ris.api.iris.microsoft.com | TLSv1.2 | Windows Telemetry |
| s1325.t.eloqua.com | HTTPS | Microsoft Edge |
| self.events.data.microsoft.com | HTTPS | Microsoft Office |
| settings-win.data.microsoft.com | TLSv1.2 | Used for Windows apps to dynamically update their configuration |
| store-images.*microsoft.com | HTTPS | Used to get images that are used for Microsoft Store suggestions |
| storesdk.dsx.mp.microsoft.com | HTTPS | Microsoft Store |
| telecommand.telemetry.microsoft.com | TLSv1.2 | Used by Windows Error Reporting |
| tile-service.weather.microsoft.com | HTTPS | Used to download updates to the Weather app Live Tile |
| time.windows.com | HTTPS | Fetch the time |
| tsfe.trafficshaping.dsp.mp.microsoft.com | HTTPS | The following endpoint is used for content regulation |
| v10.events.data.microsoft.com | TLSv1.2 | Diagnostic Data |
| watson.telemetry.microsoft.com | HTTPS | Diagnostic Data |
| wdcp.microsoft.com | TLSv1.2 | Used for Windows Defender when Cloud-based Protection is enabled |
| www.bing.com | TLSv1.2 | Used for updates for Cortana, apps, and Live Tiles |
| www.msftconnecttest.com | HTTP | Network Connection (NCSI) |
| www.msn.com | HTTPS | Network Connection (NCSI) |
| www.office.com | HTTPS | Microsoft Office |
Windows 10 Education
| Destination | Protocol | Description |
|---|---|---|
| *.delivery.mp.microsoft.com | HTTP | Used to download operating system patches, updates, and apps from Microsoft |
| *.prod.do.dsp.mp.microsoft.com | TLSv1.2 | Windows Update |
| *.smartscreen.microsoft.com | HTTPS | Windows Defender SmartScreen |
| *.smartscreen-prod.microsoft.com | HTTPS | Windows Defender SmartScreen |
| *.update.microsoft.com | TLSv1.2 | Enables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store |
| *.windowsupdate.com | HTTP | Used to download operating system patches and updates |
| *.wns.windows.com | TLSv1.2 | Used for the Windows Push Notification Services (WNS) |
| *dl.delivery.mp.microsoft.com | HTTP | Used to download operating system patches, updates, and apps from Microsoft |
| *ring.msedge.net | HTTPS | Used by Microsoft OfficeHub to get the metadata of Microsoft Office apps |
| *storecatalogrevocation.storequality.microsoft.com | TLSv1.2 | Used to revoke licenses for malicious apps on the Microsoft Store |
| arc.msn.com | TLSv1.2 | Windows Spotlight |
| blobs.officehome.msocdn.com | HTTPS | OneNote |
| cdn.onenote.net | HTTPS | OneNote |
| checkappexec.microsoft.com | HTTPS | OneNote |
| config.edge.skype.com | HTTPS | Skype |
| config.teams.microsoft.com | HTTPS | Skype |
| crl.microsoft.com | HTTPS | Skype |
| ctldl.windowsupdate.com | HTTP | Certificate Trust List |
| da.xboxservices.com | HTTPS | Microsoft Edge |
| dmd.metaservices.microsoft.com | HTTP | Device Authentication |
| evoke-windowsservices-tas.msedge.net | TLSv1.2 | Photos app |
| fp.msedge.net | HTTPS | Cortana and Live Tiles |
| fs.microsoft.com | TLSv1.2 | Maps application |
| g.live.com | TLSv1.2 | OneDrive |
| go.microsoft.com | HTTPS | Windows Defender |
| licensing.mp.microsoft.com | HTTPS | Licensing |
| login.live.com | TLSv1.2 | Device Authentication |
| logincdn.msauth.net | HTTPS | Device Authentication |
| manage.devcenter.microsoft.com | TLSv1.2 | Microsoft Store analytics |
| ocsp.digicert.com | HTTPS | CRL and OCSP checks to the issuing certificate authorities |
| ocsp.msocsp.com | HTTPS | CRL and OCSP checks to the issuing certificate authorities |
| ow1.res.office365.com | HTTPS | Microsoft Office |
| pipe.aria.microsoft.com | HTTPS | Used to retrieve Skype configuration values |
| ris.api.iris.microsoft.com | TLSv1.2 | Windows Telemetry |
| s1325.t.eloqua.com | HTTPS | Microsoft Edge |
| settings-win.data.microsoft.com | TLSv1.2 | Used for Windows apps to dynamically update their configuration |
| telecommand.telemetry.microsoft.com | TLSv1.2 | Used by Windows Error Reporting |
| tile-service.weather.microsoft.com | HTTPS | Used to download updates to the Weather app Live Tile |
| v10.events.data.microsoft.com | TLSv1.2 | Diagnostic Data |
| v20.events.data.microsoft.com | HTTPS | Diagnostic Data |
| watson.telemetry.microsoft.com | HTTPS | Diagnostic Data |
| wdcp.microsoft.com | TLSv1.2 | Used for Windows Defender when Cloud-based Protection is enabled |
| www.bing.com | TLSv1.2 | Used for updates for Cortana, apps, and Live Tiles |
| www.microsoft.com | HTTP | Connected User Experiences and Telemetry, Microsoft Data Management service |
| www.msftconnecttest.com | HTTP | Network Connection (NCSI) |
| www.office.com | HTTPS | Microsoft Office |