Windows 10, version 1909, connection endpoints for non-Enterprise editions
Important
This version of Windows 10 has reached its end of servicing date. For more information, see Microsoft Product Lifecyle.
Applies to
- Windows 10 Home, version 1909
- Windows 10 Professional, version 1909
- Windows 10 Education, version 1909
In addition to the endpoints listed for Windows 10 Enterprise, the following endpoints are available on other non-Enterprise editions of Windows 10, version 1909.
The following methodology was used to derive the network endpoints:
- Set up the latest version of Windows 10 on a test virtual machine using the default settings.
- Leave the device(s) running idle for a week ("idle" means a user is not interacting with the system/device).
- Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic.
- Compile reports on traffic going to public IP addresses.
- The test virtual machine(s) was logged into using a local account, and was not joined to a domain or Azure Active Directory.
- All traffic was captured in our lab using a IPV4 network. Therefore, no IPV6 traffic is reported here.
- These tests were conducted in an approved Microsoft lab. It's possible your results may be different.
- These tests were conducted for one week. If you capture traffic for longer you may have different results.
Note
Microsoft uses global load balancers that can appear in network trace-routes. For example, an endpoint for *.akadns.net might be used to load balance requests to an Azure datacenter, which can change over time.
Windows 10 Home
Destination | Protocol | Description |
---|---|---|
arc.msn.com | HTTP/TLS v1.2 | Windows Spotlight |
api.asm.skype.com | TLS v1.2 | Used to retrieve Skype configuration values |
browser.pipe.aria.microsoft.com | HTTPS | Used to retrieve Skype configuration values |
ctldl.windowsupdate.com/* | HTTP | Certificate Trust List |
client.wns.windows.com | HTTP | Used for the Windows Push Notification Service(WNS) |
config.edge.skype.com | HTTP/TLS v1.2 | Used to retrieve Skype configuration values |
dmd.metaservices.microsoft.com | HTTP | Device metadata |
config.teams.microsoft.com | HTTPS | Used for Microsoft Teams application |
*dl.delivery.mp.microsoft.com | HTTP | Used to download operating system patches, updates, and apps from Microsoft Store |
*.tlu.dl.delivery.mp.microsoft.com | HTTP | Used to download operating system patches, updates, and apps from Microsoft Store |
*displaycatalog.mp.microsoft.com | HTTP/TLS v1.2 | Used to communicate with Microsoft Store |
evoke-windowsservices-tas.msedge.net | HTTP/TLS v1.2 | Used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser |
fe2cr.update.microsoft.com | HTTPS/TLS v1.2 | Enables connections to Windows Update, Microsoft Update, and the online services of the Store |
fe3cr.delivery.mp.microsoft.com | HTTPS/TLS v1.2 | Used to download operating system patches, updates, and apps from Microsoft Store |
go.microsoft.com | HTTP | Windows Defender and/or Microsoft forward link redirection service (FWLink) |
g.live.com | HTTP | OneDrive |
checkappexec.microsoft.com | HTTPS | Used for Windows Defender Smartscreen reporting and notifications |
*.prod.do.dsp.mp.microsoft.com | HTTP/TLS v1.2 | Windows Update |
*.au.download.windowsupdate.com | HTTP | Windows Update |
download.windowsupdate.com | HTTP | Windows Update |
inference.location.live.net | TLS v1.2 | Used for Location Data |
iecvlist.microsoft.com | HTTP | This endpoint is related to Microsoft Edge |
login.live.com | HTTPS/TLS v1.2 | Device Authentication |
logincdn.msauth.net | HTTPS | OneDrive |
licensing.mp.microsoft.com | HTTP/TLS v1.2 | Licensing |
maps.windows.com | TLS v1.2 | Used to check for updates to maps that have been downloaded for offline use |
mobile.pipe.aria.microsoft.com | HTTP | Office Telemetry |
nav.smartscreen.microsoft.com | HTTP | Used for Windows Defender SmartScreen reporting and notifications |
outlook.office365.com | HTTP | Used to connect to the Microsoft 365 admin center's shared infrastructure, including Office in a browser |
ocsp.digicert.com | HTTP | Used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available |
oneclient.sfx.ms | HTTPS | Used by OneDrive for Business to download and verify app updates |
img-prod-cms-rt-microsoft-com.akamaized.net | HTTP | Used to communicate with Microsoft Store |
manage.devcenter.microsoft.com | HTTP/TLS v1.2 | Used to get Microsoft Store analytics |
ris.api.iris.microsoft.com | HTTPS | Used to retrieve Windows Spotlight metadata that describes content |
settings-win.data.microsoft.com | HTTPS/TLS v1.2 | Used for Windows apps to dynamically update their configuration |
smartscreen-prod.microsoft.com | HTTP | Used for Windows Defender SmartScreen reporting and notifications |
*.blob.core.windows.net | HTTP/TLS v1.2 | Windows Telemetry |
storage.live.com | HTTP/TLS v1.2 | OneDrive |
skydrivesync.policies.live.net | TLS v1.2 | OneDrive |
dm2302.settings.live.net | HTTP | OneDrive |
slscr.update.microsoft.com | HTTPS/TLS V1.2 | Windows Update |
tile-service.weather.microsoft.com | HTTP | Used for the Weather app |
tsfe.trafficshaping.dsp.mp.microsoft.com | HTTP | This endpoint is used for content regulation |
watson.telemetry.microsoft.com* | HTTPS/TLS v1.2 | Diagnostic Data |
v10.events.data.microsoft.com/onecollector/1.0/ | HTTPS | Microsoft Office |
v10.events.data.microsoft.com | HTTPS/TLS v1.2 | Used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service |
www.bing.com | HTTPS/TLS v1.2 | Cortana and Live Tiles |
www.msftconnecttest.com | HTTP | Network Connection Status Indicator (NCSI) |
wdcp.microsoft.com | HTTPS | Used for Windows Defender when Cloud-based Protection is enabled |
activity.windows.com | TLSV1.2 | Used by Activity Feed Service which enables multiple cross-device data roaming scenarios on Windows |
adl.windows.com | HTTP | Used for compatibility database updates for Windows |
spclient.wg.spotify.com | TLSV1.2 | Used for Spotify Live Tile |
cs.dds.microsoft.com | TLSV1.2 | Used by Device Directory Service to keep track of user-device associations and storing metadata about the devices. |
Windows 10 Pro
Destination | Protocol | Description |
---|---|---|
*.prod.do.dsp.mp.microsoft.com | HTTP/TLS v1.2 | Windows Update |
api.onedrive.com | HTTP | OneDrive |
smartscreen-prod.microsoft.com | HTTP | Used for Windows Defender SmartScreen reporting and notifications |
nav.smartscreen.microsoft.com | HTTPS/TLS v1.2 | Windows Defender |
*.update.microsoft.com | HTTP | Enables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store |
browser.pipe.aria.microsoft.com | HTTPS | Used to retrieve Skype configuration values |
*.windowsupdate.com | HTTP | Used to download operating system patches and updates |
*.wns.windows.com | TLS v1.2 | Used for the Windows Push Notification Services (WNS) |
*dl.delivery.mp.microsoft.com | HTTP | Used to download operating system patches, updates, and apps from Microsoft Store |
c-ring.msedge.net | TLS v1.2 | Cortana and Live Tiles |
a-ring.msedge.net | TLS v1.2 | Cortana and Live Tiles |
*storecatalogrevocation.storequality.microsoft.com | HTTP/TLS v1.2 | Used to revoke licenses for malicious apps on the Microsoft Store |
arc.msn.com | HTTP/TLS v1.2 | Windows Spotlight |
*.blob.core.windows.net | HTTP/TLS v1.2 | Windows Telemetry |
cdn.onenote.net | HTTPS/TLS v1.2 | OneNote Live Tile |
checkappexec.microsoft.com | HTTPS | Used for Windows Defender SmartScreen reporting and notifications |
config.edge.skype.com | HTTP/TLS v1.2 | Used to retrieve Skype configuration values |
config.teams.microsoft.com | HTTPS | Used for Microsoft Teams application |
ctldl.windowsupdate.com | HTTP | Used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available |
*displaycatalog.mp.microsoft.com | HTTP/TLS v1.2 | Microsoft Store |
fe2cr.update.microsoft.com | HTTPS/TLS v1.2 | Windows Update |
fe3cr.delivery.mp.microsoft.com | HTTPS/TLS v1.2 | Windows Update |
slscr.update.microsoft.com | HTTPS/TLS v1.2 | Windows Update |
evoke-windowsservices-tas.msedge.net | HTTPS/TLS v1.2 | Used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser |
fp.msedge.net | HTTPS/TLS v1.2 | Cortana and Live Tiles |
fp-vp.azureedge.net | TLS v1.2 | Cortana and Live Tiles |
g.live.com | TLS v1.2 | OneDrive |
go.microsoft.com | HTTP | Windows Defender and/or Microsoft forward link redirection service (FWLink) |
iecvlist.microsoft.com | HTTP | Microsoft Edge |
inference.location.live.net | TLS v1.2 | Used for Location Data |
img-prod-cms-rt-microsoft-com.akamaized.net | HTTP | Used to communicate with Microsoft Store |
licensing.mp.microsoft.com* | HTTP/TLS v1.2 | Licensing |
login.live.com | HTTPS/TLS v1.2 | Device Authentication |
logincdn.msauth.net | HTTPS | Used for Microsoft accounts to sign in |
manage.devcenter.microsoft.com | HTTP/TLS v1.2 | Microsoft Store analytics |
maps.windows.com | TLS v1.2 | Related to Maps application |
ocsp.digicert.com | HTTP | Used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available |
ocsp.msocsp.com | HTTP | Used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available |
oneclient.sfx.ms | HTTPS | Used by OneDrive for Business to download and verify app updates |
mobile.pipe.aria.microsoft.com | HTTP | Office Telemetry |
ris.api.iris.microsoft.com | TLS v1.2 | Windows Spotlight |
settings-win.data.microsoft.com | HTTPS/TLS v1.2 | Used for Windows apps to dynamically update their configuration |
spo-ring.msedge.net | TLSv1.2 | Cortana and Live Tiles |
telecommand.telemetry.microsoft.com | TLS v1.2 | Used by Windows Error Reporting |
tile-service.weather.microsoft.com | HTTP | Used for the Weather app |
tsfe.trafficshaping.dsp.mp.microsoft.com | HTTPS | Used for content regulation |
v10.events.data.microsoft.com/onecollector/1.0/ | HTTPS/TLS v1.2 | Diagnostic Data |
v10.events.data.microsoft.com | HTTPS/TLS v1.2 | Used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service |
watson.telemetry.microsoft.com* | HTTPS/TLS v1.2 | Used by Windows Error Reporting |
wdcp.microsoft.com | HTTPS | Used for Windows Defender when Cloud-based Protection is enabled |
www.bing.com | HTTPS/TLS v1.2 | Cortana and Live Tiles |
www.msftconnecttest.com | HTTP | Network Connection Status Indicator (NCSI) |
outlook.office365.com | HTTP | Microsoft Office |
storage.live.com | HTTP/TLS v1.2 | OneDrive |
skydrivesync.policies.live.net | TLS v1.2 | OneDrive |
windows.policies.live.net | HTTP | OneDrive |
activity.windows.com | TLSV1.2 | Used by Activity Feed Service which enables multiple cross-device data roaming scenarios on Windows |
adl.windows.com | HTTP | Used for compatibility database updates for Windows |
spclient.wg.spotify.com | TLSV1.2 | Used for Spotify Live Tile |
cs.dds.microsoft.com | TLSV1.2 | Used by Device Directory Service to keep track of user-device associations and storing metadata about the devices. |
Windows 10 Education
Destination | Protocol | Description |
---|---|---|
arc.msn.com | HTTPS/TLS v1.2 | Windows Spotlight |
*.dl.delivery.mp.microsoft.com | HTTP | Used to download operating system patches, updates, and apps from Microsoft |
client.wns.windows.com | TLS v1.2 | Used for the Windows Push Notification Services (WNS) |
*storecatalogrevocation.storequality.microsoft.com | TLS v1.2 | Used to revoke licenses for malicious apps on the Microsoft Store |
ctldl.windowsupdate.com | HTTP | Certificate Trust List |
dmd.metaservices.microsoft.com | HTTP | Device metadata |
Inference.location.live.net | TLS v1.2 | Location |
oneclient.sfx.ms | HTTPS | OneDrive |
storage.live.com | HTTP/TLS v1.2 | OneDrive |
skydrivesync.policies.live.net | TLS v1.2 | OneDrive |
slscr.update.microsoft.com | HTTPS/TLS v1.2 | Windows Update |
fe2cr.update.microsoft.com | HTTPS/TLS v1.2 | Windows Update |
fe3cr.delivery.mp.microsoft.com | HTTPS/TLS v1.2 | Windows Update |
tsfe.trafficshaping.dsp.mp.microsoft.com | HTTP/TLS v1.2 | Windows Update |
officehomeblobs.blob.core.windows.net | HTTP | Windows Telemetry |
*displaycatalog.mp.microsoft.com | HTTP/TLS v1.2 | Microsoft Store |
img-prod-cms-rt-microsoft-com.akamaized.net | HTTP | Used to communicate with Microsoft Store |
config.teams.microsoft.com | HTTPS | Teams |
api.asm.skype.com | TLS v1.2 | Used to retrieve Skype configuration values |
config.edge.skype.com | HTTP/TLS v1.2 | Used to retrieve Skype configuration values |
logincdn.msauth.net | HTTPS | OneDrive |
iecvlist.microsoft.com | HTTP | Microsoft Edge |
download.windowsupdate.com | HTTP | Windows Update |
checkappexec.microsoft.com | HTTPS | Windows Defender |
evoke-windowsservices-tas.msedge.net | HTTPS/TLS v1.2 | Photos app |
g.live.com | TLS v1.2 | OneDrive |
go.microsoft.com | HTTP | Windows Defender |
licensing.mp.microsoft.com | HTTP/TLS v1.2 | Licensing |
login.live.com | HTTPS/TLS v1.2 | Device Authentication |
manage.devcenter.microsoft.com | TLS v1.2 | Microsoft Store analytics |
ocsp.digicert.com | HTTP | CRL and OCSP checks to the issuing certificate authorities |
ris.api.iris.microsoft.com | TLS v1.2 | Windows spotlight |
telecommand.telemetry.microsoft.com | TLS v1.2 | Used by Windows Error Reporting |
tile-service.weather.microsoft.com | HTTP | Used to download updates to the Weather app Live Tile |
v10.events.data.microsoft.com | HTTPS/TLS v1.2 | Diagnostic Data |
V10.events.data.microsoft.com/onecollector/1.0/ | HTTPS | Diagnostic Data |
Watson.telemetry.microsoft.com/telemetry.request | HTTPS | Diagnostic Data |
watson.telemetry.microsoft.com | HTTPS | Diagnostic Data |
outlook.office365.com | HTTP | Microsoft Office |
www.bing.com | TLS v1.2 | Used for updates for Cortana, apps, and Live Tiles |
www.msftconnecttest.com | HTTP | Network Connection (NCSI) |
adl.windows.com | HTTP | Used for compatibility database updates for Windows |