Here’s a handy list of URLs Windows-based MTRs access.
This list was captured using a Pi-hole, from the moment the MTR was turned on, registering with Intune and Azure AD, and signing in to Teams. Making calls and joining a meeting are also included. My test device is also registered with the Teams Meeting Room Premium service.
Note: The list only includes URLs and does not include IP addresses that are listed here: Office 365 URLs and IP address ranges – Microsoft 365 Enterprise | Microsoft Docs
| A | pipe.skype.com |
| A | devicemgmt.teams.microsoft.com |
| A | teams.events.data.microsoft.com |
| A | ctldl.windowsupdate.com |
| A | presence.teams.microsoft.com |
| A | settings-win.data.microsoft.com |
| A | cdn.aiinfrastructure.teams.microsoft.com |
| AAAA | api.flightproxy.teams.microsoft.com |
| A | statics.teams.cdn.office.net |
| A | worldaz.relay.teams.microsoft.com |
| A | au.ng.msg.teams.microsoft.com |
| A | wpad.localdomain |
| A | outlook.office.com |
| A | login.microsoftonline.com |
| A | api.userstore.skype.com |
| AAAA | api3.cc.skype.com |
| A | teams.microsoft.com |
| AAAA | ic3.events.data.microsoft.com |
| A | config.teams.microsoft.com |
| A | au-v10.events.data.microsoft.com |
| A | fef.msud01.manage.microsoft.com |
| A | manage.microsoft.com |
| A | x1.c.lencr.org |
| A | au-prod.asyncgw.teams.microsoft.com |
| A | login.live.com |
| A | dc.services.visualstudio.com |
| A | japanwest-prod.notifications.teams.microsoft.com |
| A | trouter2-azsc-ince-1-b.trouter.teams.microsoft.com |
| A | fe3cr.delivery.mp.microsoft.com |
| A | fe2cr.update.microsoft.com |
| AAAA | 9.tlu.dl.delivery.mp.microsoft.com |
| AAAA | emdl.ws.microsoft.com |
| AAAA | download.windowsupdate.com |
| A | agent.rooms.microsoft.com |
| A | gj3ftstorage.blob.core.windows.net |
| A | slscr.update.microsoft.com |
| A | teams.nel.measure.office.net |
| A | licensing.mp.microsoft.com |
| A | client.wns.windows.com |
| A | dns.msftncsi.com |
| AAAA | go.trouter.teams.microsoft.com |
| A | mmrprodnoamiot.azure-devices.net |
| A | autologon.microsoftazuread-sso.com |
| A | trouter2-azsc-asse-3-a.trouter.teams.microsoft.com |
| A | au-v20.events.data.microsoft.com |
| A | r.manage.microsoft.com |
| A | au.download.windowsupdate.com |
| A | cp601.prod.do.dsp.mp.microsoft.com |
| A | kv601.prod.do.dsp.mp.microsoft.com |
| A | geo.prod.do.dsp.mp.microsoft.com |
| A | onegetcdn.azureedge.net |
| A | go.microsoft.com |
| A | browser.pipe.aria.microsoft.com |
| A | pti.store.microsoft.com |
| A | southeastasia-prod-2.notifications.teams.microsoft.com |
| A | time.windows.com |
| A | gameplayapi.intel.com |
| A | s-ring.msedge.net |
| A | csp.microsoft.com |
| A | substrate.office.com |
| A | fpc.msedge.net |
| A | graph.microsoft.com |
| A | mobile.pipe.aria.microsoft.com |
| A | outlook.office365.com |
| A | wdcp.microsoft.com |
| A | nexusrules.officeapps.live.com |
| A | ecs.office.com |
| A | has.spserv.microsoft.com |
| A | cdn.onenote.net |
| A | df.trap.teams.microsoft.com |
hi, what to unblock only for web Teams and 0 other microsoft apps?
Hey,
That scenario isn’t supported, and I’d strongly recommend against attempting to achieve this.