List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: [ActiveDir] restricting access for Windows Update?

Prev Next

You are not authorized to post a reply.

Author

Messages

MThommes

Posts:73

07/22/2008 8:00 AM
If I want to lock down domain controllers to the outside for Windows Update only, would restricting the outbound traffic to "*.microsoft.com" be enough? I have been told that Microsoft uses third party providers as part of the Windows Update process but I question this. TIA, Mike Thommes List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx

gaurhoth

Posts:2

07/22/2008 9:33 AM
In ISA, there is a domain name set for allowing access to Windows Update that includes the following domains: .download.windowsupdate.com .update.microsoft.com .windowsupdate.com .windowsupdate.microsoft.com download.microsoft.com download.windowsupdate.com ntservicepack.microsoft.com windowsupdate.microsoft.com wustat.windows.com I believe they do use some third party capacity to serve the updates, but any DNS lookups by windows update should be for a domain name included in the list above. Gaurhoth Thommes, Michael M. wrote: > If I want to lock down domain controllers to the outside for Windows > Update only, would restricting the outbound traffic to "*.microsoft.com" > be enough? I have been told that Microsoft uses third party providers > as part of the Windows Update process but I question this. > > TIA, > Mike Thommes > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.activedir.org/ma/default.aspx > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > [ActiveDir] restricting access for Windows Update?

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads