Windows 10, version 1909, connection endpoints for non-Enterprise editions
Applies to
- Windows 10 Home, version 1909
- Windows 10 Professional, version 1909
- Windows 10 Education, version 1909
In addition to the endpoints listed for Windows 10 Enterprise, the following endpoints are available on other non-Enterprise editions of Windows 10, version 1909.
The following methodology was used to derive the network endpoints:
- Set up the latest version of Windows 10 on a test virtual machine using the default settings.
- Leave the device(s) running idle for a week ("idle" means a user is not interacting with the system/device).
- Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic.
- Compile reports on traffic going to public IP addresses.
- The test virtual machine(s) was logged into using a local account, and was not joined to a domain or Azure Active Directory.
- All traffic was captured in our lab using a IPV4 network. Therefore, no IPV6 traffic is reported here.
- These tests were conducted in an approved Microsoft lab. It's possible your results may be different.
- These tests were conducted for one week. If you capture traffic for longer you may have different results.
Note
Microsoft uses global load balancers that can appear in network trace-routes. For example, an endpoint for *.akadns.net might be used to load balance requests to an Azure datacenter, which can change over time.
Windows 10 Home
| Destination | Protocol | Description |
|---|---|---|
| arc.msn.com | HTTP/TLS v1.2 | Windows Spotlight |
| api.asm.skype.com | TLS v1.2 | Used to retrieve Skype configuration values |
| browser.pipe.aria.microsoft.com | HTTPS | Used to retrieve Skype configuration values |
| ctldl.windowsupdate.com/* | HTTP | Certificate Trust List |
| client.wns.windows.com | HTTP | Used for the Windows Push Notification Service(WNS) |
| config.edge.skype.com | HTTP/TLS v1.2 | Used to retrieve Skype configuration values |
| dmd.metaservices.microsoft.com | HTTP | Device metadata |
| config.teams.microsoft.com | HTTPS | Used for Microsoft Teams application |
| *dl.delivery.mp.microsoft.com | HTTP | Used to download operating system patches, updates, and apps from Microsoft Store |
| *.tlu.dl.delivery.mp.microsoft.com | HTTP | Used to download operating system patches, updates, and apps from Microsoft Store |
| displaycatalog.mp.microsoft.com/* | HTTP/TLS v1.2 | Used to communicate with Microsoft Store |
| evoke-windowsservices-tas.msedge.net | HTTP/TLS v1.2 | Used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser |
| fe2cr.update.microsoft.com | HTTPS/TLS v1.2 | Enables connections to Windows Update, Microsoft Update, and the online services of the Store |
| fe3cr.delivery.mp.microsoft.com | HTTPS/TLS v1.2 | Used to download operating system patches, updates, and apps from Microsoft Store |
| go.microsoft.com | HTTP | Windows Defender and/or Microsoft forward link redirection service (FWLink) |
| g.live.com | HTTP | OneDrive |
| checkappexec.microsoft.com | HTTPS | Used for Windows Defender Smartscreen reporting and notifications |
| emdl.ws.microsoft.com | HTTP | Windows Update |
| *.prod.do.dsp.mp.microsoft.com | HTTP/TLS v1.2 | Windows Update |
| *.au.download.windowsupdate.com | HTTP | Windows Update |
| download.windowsupdate.com | HTTP | Windows Update |
| inference.location.live.net | TLS v1.2 | Used for Location Data |
| iecvlist.microsoft.com | HTTP | This endpoint is related to Microsoft Edge |
| login.live.com | HTTPS/TLS v1.2 | Device Authentication |
| logincdn.msauth.net | HTTPS | OneDrive |
| licensing.mp.microsoft.com | HTTP/TLS v1.2 | Licensing |
| maps.windows.com | TLS v1.2 | Used to check for updates to maps that have been downloaded for offline use |
| mobile.pipe.aria.microsoft.com | HTTP | Office Telemetry |
| nav.smartscreen.microsoft.com | HTTP | Used for Windows Defender SmartScreen reporting and notifications |
| outlook.office365.com | HTTP | Used to connect to the Microsoft 365 admin center's shared infrastructure, including Office in a browser |
| ocsp.digicert.com | HTTP | Used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available |
| oneclient.sfx.ms | HTTPS | Used by OneDrive for Business to download and verify app updates |
| img-prod-cms-rt-microsoft-com.akamaized.net | HTTP | Used to communicate with Microsoft Store |
| manage.devcenter.microsoft.com | HTTP/TLS v1.2 | Used to get Microsoft Store analytics |
| ris.api.iris.microsoft.com | HTTPS | Used to retrieve Windows Spotlight metadata that describes content |
| settings-win.data.microsoft.com | HTTPS/TLS v1.2 | Used for Windows apps to dynamically update their configuration |
| smartscreen-prod.microsoft.com | HTTP | Used for Windows Defender SmartScreen reporting and notifications |
| *.blob.core.windows.net | HTTP/TLS v1.2 | Windows Telemetry |
| storage.live.com | HTTP/TLS v1.2 | OneDrive |
| skydrivesync.policies.live.net | TLS v1.2 | OneDrive |
| dm2302.settings.live.net | HTTP | OneDrive |
| slscr.update.microsoft.com | HTTPS/TLS V1.2 | Windows Update |
| tile-service.weather.microsoft.com | HTTP | Used for the Weather app |
| tsfe.trafficshaping.dsp.mp.microsoft.com | HTTP | This endpoint is used for content regulation |
| watson.telemetry.microsoft.com* | HTTPS/TLS v1.2 | Diagnostic Data |
| v10.events.data.microsoft.com/onecollector/1.0/ | HTTPS | Microsoft Office |
| v10.events.data.microsoft.com | HTTPS/TLS v1.2 | Used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service |
| www.bing.com | HTTPS/TLS v1.2 | Cortana and Live Tiles |
| www.msftconnecttest.com | HTTP | Network Connection Status Indicator (NCSI) |
| wdcp.microsoft.com | HTTPS | Used for Windows Defender when Cloud-based Protection is enabled |
| activity.windows.com | TLSV1.2 | Used by Activity Feed Service which enables multiple cross-device data roaming scenarios on Windows |
| adl.windows.com | HTTP | Used for compatibility database updates for Windows |
| spclient.wg.spotify.com | TLSV1.2 | Used for Spotify Live Tile |
| cs.dds.microsoft.com | TLSV1.2 | Used by Device Directory Service to keep track of user-device associations and storing metadata about the devices. |
Windows 10 Pro
| Destination | Protocol | Description |
|---|---|---|
| *.prod.do.dsp.mp.microsoft.com | HTTP/TLS v1.2 | Windows Update |
| api.onedrive.com | HTTP | OneDrive |
| smartscreen-prod.microsoft.com | HTTP | Used for Windows Defender SmartScreen reporting and notifications |
| nav.smartscreen.microsoft.com | HTTPS/TLS v1.2 | Windows Defender |
| *.update.microsoft.com | HTTP | Enables connections to Windows Update, Microsoft Update, and the online services of Microsoft Store |
| browser.pipe.aria.microsoft.com | HTTPS | Used to retrieve Skype configuration values |
| *.windowsupdate.com | HTTP | Used to download operating system patches and updates |
| *.wns.windows.com | TLS v1.2 | Used for the Windows Push Notification Services (WNS) |
| *dl.delivery.mp.microsoft.com | HTTP | Used to download operating system patches, updates, and apps from Microsoft Store |
| c-ring.msedge.net | TLS v1.2 | Cortana and Live Tiles |
| a-ring.msedge.net | TLS v1.2 | Cortana and Live Tiles |
| *storecatalogrevocation.storequality.microsoft.com | HTTP/TLS v1.2 | Used to revoke licenses for malicious apps on the Microsoft Store |
| arc.msn.com | HTTP/TLS v1.2 | Windows Spotlight |
| *.blob.core.windows.net | HTTP/TLS v1.2 | Windows Telemetry |
| cdn.onenote.net | HTTPS/TLS v1.2 | OneNote Live Tile |
| checkappexec.microsoft.com | HTTPS | Used for Windows Defender SmartScreen reporting and notifications |
| config.edge.skype.com | HTTP/TLS v1.2 | Used to retrieve Skype configuration values |
| config.teams.microsoft.com | HTTPS | Used for Microsoft Teams application |
| ctldl.windowsupdate.com | HTTP | Used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available |
| displaycatalog.mp.microsoft.com* | HTTP/TLS v1.2 | Microsoft Store |
| emdl.ws.microsoft.com | HTTP | Windows Update |
| fe2cr.update.microsoft.com | HTTPS/TLS v1.2 | Windows Update |
| fe3cr.delivery.mp.microsoft.com | HTTPS/TLS v1.2 | Windows Update |
| slscr.update.microsoft.com | HTTPS/TLS v1.2 | Windows Update |
| evoke-windowsservices-tas.msedge.net | HTTPS/TLS v1.2 | Used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser |
| fp.msedge.net | HTTPS/TLS v1.2 | Cortana and Live Tiles |
| fp-vp.azureedge.net | TLS v1.2 | Cortana and Live Tiles |
| g.live.com | TLS v1.2 | OneDrive |
| go.microsoft.com | HTTP | Windows Defender and/or Microsoft forward link redirection service (FWLink) |
| iecvlist.microsoft.com | HTTP | Microsoft Edge |
| inference.location.live.net | TLS v1.2 | Used for Location Data |
| img-prod-cms-rt-microsoft-com.akamaized.net | HTTP | Used to communicate with Microsoft Store |
| licensing.mp.microsoft.com* | HTTP/TLS v1.2 | Licensing |
| login.live.com | HTTPS/TLS v1.2 | Device Authentication |
| logincdn.msauth.net | HTTPS | Used for Microsoft accounts to sign in |
| manage.devcenter.microsoft.com | HTTP/TLS v1.2 | Microsoft Store analytics |
| maps.windows.com | TLS v1.2 | Related to Maps application |
| ocsp.digicert.com | HTTP | Used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available |
| ocsp.msocsp.com | HTTP | Used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available |
| oneclient.sfx.ms | HTTPS | Used by OneDrive for Business to download and verify app updates |
| mobile.pipe.aria.microsoft.com | HTTP | Office Telemetry |
| ris.api.iris.microsoft.com | TLS v1.2 | Windows Spotlight |
| settings-win.data.microsoft.com | HTTPS/TLS v1.2 | Used for Windows apps to dynamically update their configuration |
| spo-ring.msedge.net | TLSv1.2 | Cortana and Live Tiles |
| telecommand.telemetry.microsoft.com | TLS v1.2 | Used by Windows Error Reporting |
| tile-service.weather.microsoft.com | HTTP | Used for the Weather app |
| tsfe.trafficshaping.dsp.mp.microsoft.com | HTTPS | Used for content regulation |
| v10.events.data.microsoft.com/onecollector/1.0/ | HTTPS/TLS v1.2 | Diagnostic Data |
| v10.events.data.microsoft.com | HTTPS/TLS v1.2 | Used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service |
| watson.telemetry.microsoft.com* | HTTPS/TLS v1.2 | Used by Windows Error Reporting |
| wdcp.microsoft.com | HTTPS | Used for Windows Defender when Cloud-based Protection is enabled |
| www.bing.com | HTTPS/TLS v1.2 | Cortana and Live Tiles |
| www.msftconnecttest.com | HTTP | Network Connection Status Indicator (NCSI) |
| outlook.office365.com | HTTP | Microsoft Office |
| storage.live.com | HTTP/TLS v1.2 | OneDrive |
| skydrivesync.policies.live.net | TLS v1.2 | OneDrive |
| windows.policies.live.net | HTTP | OneDrive |
| activity.windows.com | TLSV1.2 | Used by Activity Feed Service which enables multiple cross-device data roaming scenarios on Windows |
| adl.windows.com | HTTP | Used for compatibility database updates for Windows |
| spclient.wg.spotify.com | TLSV1.2 | Used for Spotify Live Tile |
| cs.dds.microsoft.com | TLSV1.2 | Used by Device Directory Service to keep track of user-device associations and storing metadata about the devices. |
Windows 10 Education
| Destination | Protocol | Description |
|---|---|---|
| arc.msn.com | HTTPS/TLS v1.2 | Windows Spotlight |
| *.dl.delivery.mp.microsoft.com | HTTP | Used to download operating system patches, updates, and apps from Microsoft |
| client.wns.windows.com | TLS v1.2 | Used for the Windows Push Notification Services (WNS) |
| *storecatalogrevocation.storequality.microsoft.com | TLS v1.2 | Used to revoke licenses for malicious apps on the Microsoft Store |
| ctldl.windowsupdate.com | HTTP | Certificate Trust List |
| dmd.metaservices.microsoft.com | HTTP | Device metadata |
| Inference.location.live.net | TLS v1.2 | Location |
| oneclient.sfx.ms | HTTPS | OneDrive |
| storage.live.com | HTTP/TLS v1.2 | OneDrive |
| skydrivesync.policies.live.net | TLS v1.2 | OneDrive |
| slscr.update.microsoft.com | HTTPS/TLS v1.2 | Windows Update |
| fe2cr.update.microsoft.com | HTTPS/TLS v1.2 | Windows Update |
| fe3cr.delivery.mp.microsoft.com | HTTPS/TLS v1.2 | Windows Update |
| tsfe.trafficshaping.dsp.mp.microsoft.com | HTTP/TLS v1.2 | Windows Update |
| officehomeblobs.blob.core.windows.net | HTTP | Windows Telemetry |
| displaycatalog.mp.microsoft.com/* | HTTP/TLS v1.2 | Microsoft Store |
| img-prod-cms-rt-microsoft-com.akamaized.net | HTTP | Used to communicate with Microsoft Store |
| config.teams.microsoft.com | HTTPS | Teams |
| api.asm.skype.com | TLS v1.2 | Used to retrieve Skype configuration values |
| config.edge.skype.com | HTTP/TLS v1.2 | Used to retrieve Skype configuration values |
| logincdn.msauth.net | HTTPS | OneDrive |
| iecvlist.microsoft.com | HTTP | Microsoft Edge |
| download.windowsupdate.com | HTTP | Windows Update |
| checkappexec.microsoft.com | HTTPS | Windows Defender |
| emdl.ws.microsoft.com | HTTP | Windows Update |
| evoke-windowsservices-tas.msedge.net | HTTPS/TLS v1.2 | Photos app |
| g.live.com | TLS v1.2 | OneDrive |
| go.microsoft.com | HTTP | Windows Defender |
| licensing.mp.microsoft.com | HTTP/TLS v1.2 | Licensing |
| login.live.com | HTTPS/TLS v1.2 | Device Authentication |
| manage.devcenter.microsoft.com | TLS v1.2 | Microsoft Store analytics |
| ocsp.digicert.com | HTTP | CRL and OCSP checks to the issuing certificate authorities |
| ris.api.iris.microsoft.com | TLS v1.2 | Windows spotlight |
| telecommand.telemetry.microsoft.com | TLS v1.2 | Used by Windows Error Reporting |
| tile-service.weather.microsoft.com | HTTP | Used to download updates to the Weather app Live Tile |
| v10.events.data.microsoft.com | HTTPS/TLS v1.2 | Diagnostic Data |
| V10.events.data.microsoft.com/onecollector/1.0/ | HTTPS | Diagnostic Data |
| Watson.telemetry.microsoft.com/telemetry.request | HTTPS | Diagnostic Data |
| watson.telemetry.microsoft.com | HTTPS | Diagnostic Data |
| outlook.office365.com | HTTP | Microsoft Office |
| www.bing.com | TLS v1.2 | Used for updates for Cortana, apps, and Live Tiles |
| www.msftconnecttest.com | HTTP | Network Connection (NCSI) |
| adl.windows.com | HTTP | Used for compatibility database updates for Windows |
Feedback
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback.
Submit and view feedback for