Microsoft Intune
FundamentalsEndpoints
In brief
The endpoint documentation now lists `mmcswdc01.blob.core.windows.net` and `mmcswdc02.blob.core.windows.net` for MEM-Win32Apps, alongside the existing hosts.
What Intune admins need to know
Review network allowlists that support Win32 app delivery and add the new hostnames if required.
This summary was assembled from the tracked documentation change. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
| --- | --- | --- | --- | --- | --- |
| 163 | Intune client and host service | AllowRequired | False | *.manage.microsoft.com``manage.microsoft.com``*.dm.microsoft.com``EnterpriseEnrollment.manage.microsoft.com``104.46.162.96/27, 13.67.13.176/28, 13.67.15.128/27, 13.69.231.128/28, 13.69.67.224/28, 13.70.78.128/28, 13.70.79.128/27, 13.74.111.192/27, 13.77.53.176/28, 13.86.221.176/28,13.89.174.240/28, 13.89.175.192/28, 20.189.229.0/25, 20.191.167.0/25, 20.37.153.0/24, 20.37.192.128/25, 20.38.81.0/24, 20.41.1.0/24, 20.42.1.0/24, 20.42.130.0/24, 20.42.224.128/25, 20.43.129.0/24, 20.44.19.224/27, 40.119.8.128/25, 40.67.121.224/27, 40.70.151.32/28, 40.71.14.96/28, 40.74.25.0/24, 40.78.245.240/28, 40.78.247.128/27, 40.79.197.64/27, 40.79.197.96/28, 40.80.180.208/28, 40.80.180.224/27, 40.80.184.128/25, 40.82.248.224/28, 40.82.249.128/25, 52.150.137.0/25, 52.162.111.96/28, 52.168.116.128/27, 52.182.141.192/27, 52.236.189.96/27, 52.240.244.160/27, 20.204.193.12/30, 20.204.193.10/31, 20.192.174.216/29, 20.192.159.40/29, 104.208.197.64/27, 172.160.217.160/27, 172.201.237.160/27, 172.202.86.192/27, 172.205.63.0/25, 172.212.214.0/25, 172.215.131.0/27, 20.168.189.128/27, 20.199.207.192/28, 20.204.194.128/31, 20.208.149.192/27, 20.208.157.128/27, 20.214.131.176/29, 20.43.129.0/24, 20.91.147.72/29, 4.145.74.224/27, 4.150.254.64/27, 4.154.145.224/27, 4.200.254.32/27, 4.207.244.0/27, 4.213.25.64/27, 4.213.86.128/25, 4.216.205.32/27, 4.237.143.128/25, 40.84.70.128/25, 48.218.252.128/25, 57.151.0.192/27, 57.153.235.0/25, 57.154.140.128/25, 57.154.195.0/25, 57.155.45.128/25, 68.218.134.96/27, 74.224.214.64/27, 74.242.35.0/25, 172.208.170.0/25, 74.241.231.0/25, 74.242.184.128/25``Azure Front Door Endpoints:`` 13.107.219.0/24, 13.107.227.0/24, 13.107.228.0/23, 150.171.97.0/24, 2620:1ec:40::/48, 2620:1ec:49::/48, 2620:1ec:4a::/47 | TCP: 80, 443 |
| 172 | MDM Delivery Optimization | DefaultRequired | False | *.do.dsp.mp.microsoft.com``*.dl.delivery.mp.microsoft.com | TCP: 80, 443 |
| 170 | MEM - Win32Apps | DefaultRequired | False | mmcswdc01.blob.core.windows.net``mmcswdc02.blob.core.windows.net``swda01-mscdn.manage.microsoft.com``swda02-mscdn.manage.microsoft.com``swdb01-mscdn.manage.microsoft.com``swdb02-mscdn.manage.microsoft.com``swdc01-mscdn.manage.microsoft.com``swdc02-mscdn.manage.microsoft<.com``swdd01-mscdn.manage.microsoft.com``swdd02-mscdn.manage.microsoft.com``swdin01-mscdn.manage.microsoft.com``swdin02-mscdn.manage.microsoft.com``aam-content-cdn.manage.microsoft.com(this endpoint is only for Enterprise App Catalog apps) | TCP: 80, 443 |
| 97 | Consumer Outlook.com, OneDrive, Device authentication, and Microsoft account | DefaultRequired | False | account.live.com``login.live.com | TCP: 443 |
| 190 | Endpoint discovery | DefaultRequired | False | go.microsoft.com | TCP: 80, 443 |
| 189 | Dependency - Feature Deployment | DefaultRequired | False | config.edge.skype.com``ecs.office.com | TCP: 443 |
@@ -97,7 +97,7 @@ Intune endpoints also use *Azure Front Door* for communicating with the Intune s | --- | --- | --- | --- | --- | --- |
| 163 | Intune client and host service | AllowRequired | False | `*.manage.microsoft.com``manage.microsoft.com``*.dm.microsoft.com``EnterpriseEnrollment.manage.microsoft.com``104.46.162.96/27, 13.67.13.176/28, 13.67.15.128/27, 13.69.231.128/28, 13.69.67.224/28, 13.70.78.128/28, 13.70.79.128/27, 13.74.111.192/27, 13.77.53.176/28, 13.86.221.176/28,13.89.174.240/28, 13.89.175.192/28, 20.189.229.0/25, 20.191.167.0/25, 20.37.153.0/24, 20.37.192.128/25, 20.38.81.0/24, 20.41.1.0/24, 20.42.1.0/24, 20.42.130.0/24, 20.42.224.128/25, 20.43.129.0/24, 20.44.19.224/27, 40.119.8.128/25, 40.67.121.224/27, 40.70.151.32/28, 40.71.14.96/28, 40.74.25.0/24, 40.78.245.240/28, 40.78.247.128/27, 40.79.197.64/27, 40.79.197.96/28, 40.80.180.208/28, 40.80.180.224/27, 40.80.184.128/25, 40.82.248.224/28, 40.82.249.128/25, 52.150.137.0/25, 52.162.111.96/28, 52.168.116.128/27, 52.182.141.192/27, 52.236.189.96/27, 52.240.244.160/27, 20.204.193.12/30, 20.204.193.10/31, 20.192.174.216/29, 20.192.159.40/29, 104.208.197.64/27, 172.160.217.160/27, 172.201.237.160/27, 172.202.86.192/27, 172.205.63.0/25, 172.212.214.0/25, 172.215.131.0/27, 20.168.189.128/27, 20.199.207.192/28, 20.204.194.128/31, 20.208.149.192/27, 20.208.157.128/27, 20.214.131.176/29, 20.43.129.0/24, 20.91.147.72/29, 4.145.74.224/27, 4.150.254.64/27, 4.154.145.224/27, 4.200.254.32/27, 4.207.244.0/27, 4.213.25.64/27, 4.213.86.128/25, 4.216.205.32/27, 4.237.143.128/25, 40.84.70.128/25, 48.218.252.128/25, 57.151.0.192/27, 57.153.235.0/25, 57.154.140.128/25, 57.154.195.0/25, 57.155.45.128/25, 68.218.134.96/27, 74.224.214.64/27, 74.242.35.0/25, 172.208.170.0/25, 74.241.231.0/25, 74.242.184.128/25``Azure Front Door Endpoints:`` 13.107.219.0/24, 13.107.227.0/24, 13.107.228.0/23, 150.171.97.0/24, 2620:1ec:40::/48, 2620:1ec:49::/48, 2620:1ec:4a::/47` | **TCP:** 80, 443 |
| 172 | MDM Delivery Optimization | DefaultRequired | False | `*.do.dsp.mp.microsoft.com``*.dl.delivery.mp.microsoft.com` | **TCP:** 80, 443 |
-| 170 | MEM - Win32Apps | DefaultRequired | False | `swda01-mscdn.manage.microsoft.com``swda02-mscdn.manage.microsoft.com``swdb01-mscdn.manage.microsoft.com``swdb02-mscdn.manage.microsoft.com``swdc01-mscdn.manage.microsoft.com``swdc02-mscdn.manage.microsoft<.com``swdd01-mscdn.manage.microsoft.com``swdd02-mscdn.manage.microsoft.com``swdin01-mscdn.manage.microsoft.com``swdin02-mscdn.manage.microsoft.com``aam-content-cdn.manage.microsoft.com`(this endpoint is only for Enterprise App Catalog apps) | **TCP:** 80, 443 |
+| 170 | MEM - Win32Apps | DefaultRequired | False | `mmcswdc01.blob.core.windows.net``mmcswdc02.blob.core.windows.net``swda01-mscdn.manage.microsoft.com``swda02-mscdn.manage.microsoft.com``swdb01-mscdn.manage.microsoft.com``swdb02-mscdn.manage.microsoft.com``swdc01-mscdn.manage.microsoft.com``swdc02-mscdn.manage.microsoft<.com``swdd01-mscdn.manage.microsoft.com``swdd02-mscdn.manage.microsoft.com``swdin01-mscdn.manage.microsoft.com``swdin02-mscdn.manage.microsoft.com``aam-content-cdn.manage.microsoft.com`(this endpoint is only for Enterprise App Catalog apps) | **TCP:** 80, 443 |
| 97 | Consumer Outlook.com, OneDrive, Device authentication, and Microsoft account | DefaultRequired | False | `account.live.com``login.live.com` | **TCP:** 443 |
| 190 | Endpoint discovery | DefaultRequired | False | `go.microsoft.com` | **TCP:** 80, 443 |
| 189 | Dependency - Feature Deployment | DefaultRequired | False | `config.edge.skype.com``ecs.office.com` | **TCP:** 443 |