====== Blocklists - Microsoft - Desktop Analytics ======

===== Server connectivity endpoints =====

The service connection point needs to communicate with the following endpoints:

^Endpoint^Function^
|https://aka.ms|Used to locate the service.|
|https://graph.windows.net|Used to automatically retrieve settings like CommercialId when attaching your hierarchy to Desktop Analytics (on Configuration Manager Server role). For more information, see [[https://docs.microsoft.com/en-us/mem/configmgr/core/plan-design/network/proxy-server-support#configure-the-proxy-for-a-site-system-server|Configure the proxy for a site system server]].|
|[[https://*.manage.microsoft.com]]|Used to synch device collection memberships, deployment plans, and device readiness status with Desktop Analytics (on Configuration Manager Server role only). For more information, see [[https://docs.microsoft.com/en-us/mem/configmgr/core/plan-design/network/proxy-server-support#configure-the-proxy-for-a-site-system-server|Configure the proxy for a site system server]].|
|https://dc.services.visualstudio.com|For diagnostic data from on-premises service connector to gain insights about the health of cloud-connected services.|

----

===== User experience and diagnostic component endpoints =====

Client devices need to communicate with the following endpoints:

^Endpoint^Function^
|https://v10c.events.data.microsoft.com|Connected user experience and diagnostic component endpoint. Used by devices running Windows 10, version 1809 or later, or version 1803 with the 2018-09 cumulative update or later installed.|
|https://v10.events.data.microsoft.com|Connected user experience and diagnostic component endpoint. Used by devices running Windows 10, version 1803 without the 2018-09 cumulative update installed.|
|https://v10.vortex-win.data.microsoft.com|Connected user experience and diagnostic component endpoint. Used by devices running Windows 10, version 1709 or earlier.|
|https://vortex-win.data.microsoft.com|Connected user experience and diagnostic component endpoint. Used by devices running Windows 7 and Windows 8.1.|

----

===== Client connectivity endpoints =====

Client devices need to communicate with the following endpoints:

^Endpoint^Function^
|https://settings-win.data.microsoft.com|Enables the compatibility update to send data to Microsoft.|
|http://adl.windows.com|Allows the compatibility update to receive the latest compatibility data from Microsoft.|
|https://watson.telemetry.microsoft.com|Windows Error Reporting (WER). Required to monitor deployment health in Windows 10, version 1803 or earlier.|
|https://umwatsonc.events.data.microsoft.com|Windows Error Reporting (WER). Required for device health reports in Windows 10, version 1809 or later.|
|https://ceuswatcab01.blob.core.windows.net|Windows Error Reporting (WER). Required to monitor deployment health in Windows 10, version 1809 or later.|
|https://ceuswatcab02.blob.core.windows.net|Windows Error Reporting (WER). Required to monitor deployment health in Windows 10, version 1809 or later.|
|https://eaus2watcab01.blob.core.windows.net|Windows Error Reporting (WER). Required to monitor deployment health in Windows 10, version 1809 or later.|
|https://eaus2watcab02.blob.core.windows.net|Windows Error Reporting (WER). Required to monitor deployment health in Windows 10, version 1809 or later.|
|https://weus2watcab01.blob.core.windows.net|Windows Error Reporting (WER). Required to monitor deployment health in Windows 10, version 1809 or later.|
|https://weus2watcab02.blob.core.windows.net|Windows Error Reporting (WER). Required to monitor deployment health in Windows 10, version 1809 or later.|
|https://kmwatsonc.events.data.microsoft.com|Online Crash Analysis (OCA). Required for device health reports in Windows 10, version 1809 or later.|
|https://oca.telemetry.microsoft.com|Online Crash Analysis (OCA). Required to monitor deployment health in Windows 10, version 1803 or earlier.|
|https://login.live.com|Required to provide a more reliable device identity for Desktop Analytics.|
|:::|To disable end-user Microsoft account access, use policy settings instead of blocking this endpoint. For more information, see [[https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/microsoft-accounts#block-all-consumer-microsoft-account-user-authentication|The Microsoft account in the enterprise]].|
|https://v20.events.data.microsoft.com|Connected user experience and diagnostic component endpoint.|

----

===== References =====

https://docs.microsoft.com/en-us/mem/configmgr/desktop-analytics/enable-data-sharing