====== Blocklists - Microsoft - Microsoft Windows ======

<code>
www.msftncsi.com # Windows uses this to verify connectivity to Internet.
</code>

----

Windows often trys to connect to these domains:

  * tlu.dl.delivery.mp.microsoft.com - Used to download operating system patches, updates, and apps from Microsoft Store.
  * fe3cr.delivery.mp.microsoft.com - Used to download operating system patches, updates, and apps from Microsoft Store.
  * settings-win.data.microsoft.com - Used for Windows apps to dynamically update their configuration.
  * ctldl.windowsupdate.com - Certificate Trust List.
  * slscr.update.microsoft.com - Windows update.
  * client.wns.windows.com - Used for the Windows Push Notification Service (WNS).
  * dns.msftncsi.com - Used to check if Windows is online.
  * ris.api.iris.microsoft.com - Used to retrieve Windows Spotlight metadata that describes content.
  * cxcs.microsoft.net - Microsoft customer experience center.
  * cdn.onenote.net - Microsoft OneNote.
  * arc.msn.com - Windows Spotlight.

----

===== Windows Update =====

<code>
update.microsoft.com
update.microsoft.com.akadns.net 
download.windowsupdate.com
download.microsoft.com
</code>

----

<code>
sls.update.microsoft.com.akadns.net
fe3.delivery.dsp.mp.microsoft.com.nsatc.net
</code>

----

===== Windows 10 Updates =====

<code>
settings-win.data.microsoft.com 401
v10.vortex-win.data.microsoft.com 
</code>

===== References =====

https://docs.microsoft.com/en-us/windows/privacy/windows-endpoints-20h2-non-enterprise-editions

https://docs.microsoft.com/en-us/windows/privacy/windows-endpoints-1909-non-enterprise-editions

https://docs.microsoft.com/en-us/windows/privacy/windows-endpoints-1809-non-enterprise-editions