Export (0) Print
Expand All

Firewall and Proxy Server Settings for Managed Computers in Windows Intune

Updated: November 1, 2013

Applies To: Windows Intune

If you want to use Windows Intune to manage client computers that exist behind firewalls or proxy servers, you must configure the firewall or proxy server to allow Windows Intune to communicate with the client computers.

If the client computers exist behind a firewall, you must configure the firewall to allow communications with the domains through the specified ports that are listed in the following tables for All Users.

 

Domain Ports

*.livemeeting.com

80 and 443

*.microsoftonline.com

80 and 443

onlinehelp.microsoft.com

80

*.social.technet.microsoft.com

80

blogs.technet.com

80

go.microsoft.com

80

www.microsoft.com

80

 

Domain Ports

*.update.microsoft.com

80 and 443

download.microsoft.com

80 and 443

update.microsoft.com

80 and 443

Depending on the firewall and how it processes DNS lookup requests, you might also need to allow access to the domain manage.microsoft.com.nsatc.net on port 80.

 

Domain Ports

*.manage.microsoft.com

80 and 443

*manage.microsoft.com

80 and 443

*.spynet2.microsoft.com

443

manage.microsoft.com

80 and 443

wustat.microsoft.com

80 and 443

*manage.microsoft.com

80 and 443

*.googleapis.com

80 and 443

*.microsoftonline-p.com

80 and 443

*.microsoftonline-p.net

80 and 443

c.microsoft.com

80 and 443

c1.microsoft.com

80 and 443

noteNote
The *.googleapis.com domain is required for JQuery support when using the Company Portal website.

 

Domain Ports

*.download.windowsupdate.com

80 and 443

*.windowsupdate.com

80 and 443

download.windowsupdate.com

80 and 443

ntservicepack.microsoft.com

80 and 443

windowsupdate.microsoft.com

80 and 443

If the client computers exist behind a proxy server, you must configure the proxy server as follows:

  • Windows Intune communicates with client computers by using both the HTTP and HTTPS protocols. Confirm that the proxy server supports HTTP and HTTPS.

  • Windows Intune supports unauthenticated proxy servers.

You can modify proxy server settings on individual client computers, or you can use Group Policy to change settings for all client computers that exist behind a specified proxy server.

See Also

 
Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft