From 867d241dd4558f90622f5423dfd941112cd1be66 Mon Sep 17 00:00:00 2001 From: tiaraquan Date: Tue, 24 Sep 2024 13:25:10 -0700 Subject: [PATCH 1/2] Updated required endpoints --- ...-autopatch-required-graph-api-endpoints.md | 28 +++++++++++++++++++ ...d-firmware-update-programmatic-controls.md | 7 ++++- ...ws-feature-update-programmatic-controls.md | 7 ++++- ...ws-quality-update-programmatic-controls.md | 7 ++++- .../windows-autopatch-configure-network.md | 4 +-- 5 files changed, 48 insertions(+), 5 deletions(-) create mode 100644 windows/deployment/windows-autopatch/includes/windows-autopatch-required-graph-api-endpoints.md diff --git a/windows/deployment/windows-autopatch/includes/windows-autopatch-required-graph-api-endpoints.md b/windows/deployment/windows-autopatch/includes/windows-autopatch-required-graph-api-endpoints.md new file mode 100644 index 00000000000..ec3fc85cbe9 --- /dev/null +++ b/windows/deployment/windows-autopatch/includes/windows-autopatch-required-graph-api-endpoints.md @@ -0,0 +1,28 @@ +--- +author: tiaraquan +ms.author: tiaraquan +manager: aaroncz +ms.service: windows-client +ms.subservice: autopatch +ms.topic: include +ms.date: 09/24/2024 +ms.localizationpriority: medium +--- + + +You must have access to the following endpoints: + +[Windows Update endpoints](/windows/privacy/manage-windows-1809-endpoints#windows-update) + +- *.prod.do.dsp.mp.microsoft.com +- *.windowsupdate.com +- *.dl.delivery.mp.microsoft.com +- *.update.microsoft.com +- *.delivery.mp.microsoft.com +- tsfe.trafficshaping.dsp.mp.microsoft.com + +Graph API endpoints: + +- devicelistenerprod.microsoft.com +- login.windows.net +- payloadprod*.blob.core.windows.net diff --git a/windows/deployment/windows-autopatch/manage/windows-autopatch-driver-and-firmware-update-programmatic-controls.md b/windows/deployment/windows-autopatch/manage/windows-autopatch-driver-and-firmware-update-programmatic-controls.md index 9557d457c6d..a9fcc86c266 100644 --- a/windows/deployment/windows-autopatch/manage/windows-autopatch-driver-and-firmware-update-programmatic-controls.md +++ b/windows/deployment/windows-autopatch/manage/windows-autopatch-driver-and-firmware-update-programmatic-controls.md @@ -14,7 +14,7 @@ ms.localizationpriority: medium appliesto: - ✅ Windows 11 - ✅ Windows 10 -ms.date: 09/16/2024 +ms.date: 09/24/2024 --- # Programmatic controls for drivers and firmware updates @@ -44,6 +44,11 @@ All of the [Windows Autopatch prerequisites](../prepare/windows-autopatch-fix-is [!INCLUDE [Windows Autopath permissions using Graph Explorer](../includes/windows-autopatch-graph-explorer-permissions.md)] +### Required endpoints + + +[!INCLUDE [windows-autopatch-required-graph-api-endpoints](../includes/windows-autopatch-required-graph-api-endpoints.md)] + ## Open Graph Explorer diff --git a/windows/deployment/windows-autopatch/manage/windows-autopatch-windows-feature-update-programmatic-controls.md b/windows/deployment/windows-autopatch/manage/windows-autopatch-windows-feature-update-programmatic-controls.md index db264d3c4f5..d6c5b41cb3c 100644 --- a/windows/deployment/windows-autopatch/manage/windows-autopatch-windows-feature-update-programmatic-controls.md +++ b/windows/deployment/windows-autopatch/manage/windows-autopatch-windows-feature-update-programmatic-controls.md @@ -14,7 +14,7 @@ ms.localizationpriority: medium appliesto: - ✅ Windows 11 - ✅ Windows 10 -ms.date: 09/16/2024 +ms.date: 09/24/2024 --- # Programmatic controls for Windows feature updates @@ -48,6 +48,11 @@ All of the [Windows Autopatch prerequisites](../prepare/windows-autopatch-prereq [!INCLUDE [Windows Autopatch permissions using Graph Explorer](../includes/windows-autopatch-graph-explorer-permissions.md)] +### Required endpoints + + +[!INCLUDE [windows-autopatch-required-graph-api-endpoints](../includes/windows-autopatch-required-graph-api-endpoints.md)] + ## Open Graph Explorer diff --git a/windows/deployment/windows-autopatch/manage/windows-autopatch-windows-quality-update-programmatic-controls.md b/windows/deployment/windows-autopatch/manage/windows-autopatch-windows-quality-update-programmatic-controls.md index 87af926fae7..77acf64924d 100644 --- a/windows/deployment/windows-autopatch/manage/windows-autopatch-windows-quality-update-programmatic-controls.md +++ b/windows/deployment/windows-autopatch/manage/windows-autopatch-windows-quality-update-programmatic-controls.md @@ -14,7 +14,7 @@ ms.localizationpriority: medium appliesto: - ✅ Windows 11 - ✅ Windows 10 -ms.date: 09/16/2024 +ms.date: 09/24/2024 --- # Programmatic controls for expedited Windows quality updates @@ -44,6 +44,11 @@ All of the [Windows Autopatch prerequisites](../prepare/windows-autopatch-prereq [!INCLUDE [Windows Autopatch permissions using Graph Explorer](../includes/windows-autopatch-graph-explorer-permissions.md)] +### Required endpoints + + +[!INCLUDE [windows-autopatch-required-graph-api-endpoints](../includes/windows-autopatch-required-graph-api-endpoints.md)] + ## Open Graph Explorer diff --git a/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md b/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md index 77fb2d0c6b5..d9470148fda 100644 --- a/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md +++ b/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md @@ -1,7 +1,7 @@ --- title: Configure your network description: This article details the network configurations needed for Windows Autopatch -ms.date: 09/16/2024 +ms.date: 09/24/2024 ms.service: windows-client ms.subservice: autopatch ms.topic: how-to @@ -63,7 +63,7 @@ The following URLs must be on the allowed list of your proxy and firewall so tha | Microsoft service | URLs required on allowlist | | ----- | ----- | -| Windows Autopatch | | +| Windows Autopatch | | ## Delivery Optimization From de733e228824c29268cd9e31021fa2ad4688fd86 Mon Sep 17 00:00:00 2001 From: tiaraquan Date: Tue, 24 Sep 2024 13:30:35 -0700 Subject: [PATCH 2/2] Fixed broken link --- .../prepare/windows-autopatch-configure-network.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md b/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md index d9470148fda..6666b1fe358 100644 --- a/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md +++ b/windows/deployment/windows-autopatch/prepare/windows-autopatch-configure-network.md @@ -33,7 +33,7 @@ There are URLs from several Microsoft products that must be in the allowed list | Microsoft service | URLs required on Allowlist | | ----- | ----- | | Microsoft Entra ID | [Hybrid identity required ports and protocols](/azure/active-directory/hybrid/reference-connect-ports)

[Active Directory and Active Directory Domain Services Port Requirements](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd772723(v=ws.10))

| -| Microsoft Intune | [Intune network configuration requirements](/intune/network-bandwidth-use)

[Network endpoints for Microsoft Intune](/mem/intune/fundamentals/intune-endpoints)

| +| Microsoft Intune | [Intune network configuration requirements](/mem/intune/fundamentals/network-bandwidth-use)

[Network endpoints for Microsoft Intune](/mem/intune/fundamentals/intune-endpoints)

| | Windows Update for Business (WUfB) | [Windows Update for Business firewall and proxy requirements](https://support.microsoft.com/help/3084568/can-t-download-updates-from-windows-update-from-behind-a-firewall-or-p) | #### [Windows Enterprise E3+ and F3](#tab/windows-enterprise-e3-and-f3-licenses-required-microsoft-endpoints)