Tag Archives: “Microsoft Windows”

Microsoft Services FQDN and IP Address List

This list includes some of the FQDNs and IP Addresses used by Microsoft Services, this may be useful for identifying outgoing traffic and creating web filtering exceptions.

*.aadrm.com
*.acompli.net
*.adl.windows.com
*.appex.bing.com
*.appex-rf.msn.com
*.aria.microsoft.com
*.azure-apim.net
*.azureedge.net
*.azurerms.com
*.blob.core.windows.net
*.broadcast.skype.com
*.cdn.office.net
*.cloudapp.net
*.compliance.microsoft.com
*.config.office.net
*.events.data.microsoft.com
*.flow.microsoft.com
*.helpshift.com
*.hip.live.com
*.hockeyapp.net
*.informationprotection.azure.com
*.itunes.apple.com
*.keydelivery.mediaservices.windows.net
*.localytics.com
*.lync.com
*.manage.microsoft.com
*.manage.office.com
*.media.azure.net
*.microsoft.com
*.microsoftonline.com
*.microsoftonline-p.com
*.microsoftstream.com
*.microsoftusercontent.com
*.msauth.net
*.msauthimages.net
*.msecnd.net
*.msedge.net
*.msftauth.net
*.msftauthimages.net
*.msftidentity.com
*.msidentity.com
*.msocdn.com
*.mstea.ms
*.o365weve.com
*.office.com
*.office.net
*.office365.com
*.officeapps.live.com
*.onenote.com
*.online.office.com
*.onmicrosoft.com
*.outlook.com
*.outlookmobile.com
*.portal.cloudappsecurity.com
*.powerapps.com
*.protection.office.com
*.protection.outlook.com
*.secure.skypeassets.com
*.security.microsoft.com
*.sfbassets.com
*.sharepointonline.com
*.skype.com
*.skypeforbusiness.com
*.staffhub.office.com
*.streaming.mediaservices.windows.net
*.teams.microsoft.com
*.tenor.com
*.urlp.sfbassets.com
*.users.storage.live.com
*.virtualearth.net
104.208.16.88
104.208.16.89
104.208.16.90
104.208.16.94
104.46.162.224
104.46.162.226
104.47.0.0/17
104.82.250.212
104.86.110.136
104.86.110.153
104.86.110.155
104.86.110.170
104.86.110.171
104.86.110.186
104.86.110.233
104.86.110.250
104.86.111.10
104.86.111.147
104.86.111.48
13.107.128.0/22
13.107.136.9
13.107.140.6/32
13.107.18.10/31
13.107.18.15/32
13.107.22.200
13.107.22.239
13.107.5.80
13.107.6.152/31
13.107.6.171/32
13.107.64.0/18
13.107.9.158
13.69.109.130
13.69.116.104
13.69.239.74
13.71.55.58
13.78.111.198
13.78.111.199
13.85.23.206
13.89.178.26
13.89.178.27
13.89.179.10
13.89.179.12
13.89.179.8
13.89.179.9
131.253.33.200
131.253.33.215/32
131.253.33.239
132.245.0.0/16
150.171.32.0/22
184.31.15.195
2.18.66.224
2.18.66.241
2.20.38.10
2.21.202.71
2.tlu.dl.delivery.mp.microsoft.com
20.106.86.13
20.119.174.243
20.123.141.233
20.126.21.36
20.140.147.201
20.166.126.56
20.166.2.191
20.189.173.1
20.189.173.11
20.189.173.12
20.189.173.13
20.189.173.14
20.189.173.15
20.189.173.20
20.189.173.22
20.189.173.3
20.189.173.4
20.189.173.5
20.189.173.6
20.189.173.7
20.189.173.9
20.190.128.0/18
20.231.213.110
20.254.138.227
20.254.144.98
20.42.65.84
20.42.65.85
20.42.65.89
20.42.65.90
20.42.65.92
20.42.72.131
20.42.73.24
20.42.73.25
20.42.73.26
20.42.73.27
20.44.10.123
20.44.239.154
20.49.150.241
20.50.201.195
20.50.201.200
20.50.201.201
20.50.73.10
20.50.73.11
20.50.73.9
20.50.80.209
20.50.80.210
20.54.103.203
20.58.112.2
20.72.205.209
20.73.59.29
20.90.202.62
20.90.205.241
204.79.197.215/32
209.197.3.8
23.103.160.0/20
23.214.150.57
23.215.181.185
23.56.184.209
23.97.153.169
2603:1006::/40
2603:1006:1400::/40
2603:1006:2000::/48
2603:1007:200::/48
2603:1016::/36
2603:1016:1400::/48
2603:1016:2400::/40
2603:1017::/48
2603:1026::/36
2603:1026:2400::/40
2603:1026:3000::/48
2603:1027::/48
2603:1027:1::/48
2603:1036::/36
2603:1036:2400::/40
2603:1036:3000::/48
2603:1037::/48
2603:1037:1::/48
2603:1046::/36
2603:1046:1400::/40
2603:1046:2000::/48
2603:1047::/48
2603:1047:1::/48
2603:1056::/36
2603:1056:1400::/40
2603:1056:2000::/48
2603:1057::/48
2603:1057:2::/48
2603:1096::/38
2603:1096:400::/40
2603:1096:600::/40
2603:1096:a00::/39
2603:1096:c00::/40
2603:10a6:200::/40
2603:10a6:400::/40
2603:10a6:600::/40
2603:10a6:800::/40
2603:10d6:200::/40
2620:1ec:40::/42
2620:1ec:6::/48
2620:1ec:8f0::/46
2620:1ec:900::/46
2a01:111:200a:a::/64
2a01:111:2035:8::/64
2a01:111:f400::/48
2a01:111:f403::/48
2a01:111:f406:1::/64
2a01:111:f406:1004::/64
2a01:111:f406:1805::/64
2a01:111:f406:3404::/64
2a01:111:f406:8000::/64
2a01:111:f406:8801::/64
2a01:111:f406:a003::/64
2a01:111:f406:c00::/64
3.tlu.dl.delivery.mp.microsoft.com
40.104.0.0/15
40.107.0.0/16
40.119.249.228
40.125.120.53
40.125.122.151
40.126.0.0/18
40.127.169.103
40.127.240.158
40.68.123.157
40.74.108.123
40.74.98.192
40.74.98.193
40.74.98.194
40.74.98.195
40.77.2.164
40.79.141.153
40.79.141.154
40.79.189.58
40.79.189.59
40.79.197.35
40.92.0.0/15
40.96.0.0/13
40.99.205.114
51.104.136.2
51.104.15.252
51.104.167.48
51.105.71.136
51.11.122.226
51.11.168.232
51.11.192.49
51.124.23.43
51.132.193.105
51.137.182.175
51.137.183.100
52.100.0.0/14
52.108.0.0/14
52.112.0.0/14
52.113.194.132
52.114.76.233
52.120.0.0/14
52.137.102.105
52.137.106.217
52.140.118.28
52.152.110.14
52.161.30.69
52.167.17.97
52.167.249.196
52.168.112.67
52.168.117.170
52.178.17.2
52.178.17.3
52.182.141.63
52.182.143.208
52.182.143.210
52.182.143.211
52.183.220.149
52.184.216.174
52.185.211.133
52.191.219.104
52.238.106.116/32
52.238.119.141/32
52.238.78.88/32
52.244.160.207/32
52.244.203.72/32
52.244.207.172/32
52.244.223.198/32
52.244.37.168/32
52.247.150.191/32
52.254.114.65
52.96.0.0/14
52.97.129.242
52.97.208.18
52.97.211.114
52.97.212.82
52.97.241.178
65.55.44.109
8.238.7.254
8.238.9.254
8.250.5.254
87.248.204.0
88.221.134.64
88.221.135.81
88.221.135.90
92.122.149.175
92.122.150.71
92.122.154.63
92.122.154.80
92.123.128.135
92.123.128.143
92.123.128.185
92.123.128.188
92.123.140.43
95.101.143.17
95.101.143.227
96.17.178.173
96.17.178.180
a.clarity.ms
a.config.skype.com
account.activedirectory.windowsazure.com
account.live.com
account.office.net
accounts.accesscontrol.windows.net
acdc-direct.office.com
activation.sls.microsoft.com
activity.windows.com
admin.microsoft.com
adminwebservice.microsoftonline.com
agave.myanalytics.cdn.office.net
ajax.aspnetcdn.com
aka.ms
amp.azure.net
apc.delve.office.com
api.cdp.microsoft.com
api.diagnostics.office.com
api.office.com
api.passwordreset.microsoftonline.com
apibasic.diagnostics.office.com
apis.live.net
appsforoffice.microsoft.com
array501.prod.do.dsp.mp.microsoft.com
array502.prod.do.dsp.mp.microsoft.com
array505.prod.do.dsp.mp.microsoft.com
array507.prod.do.dsp.mp.microsoft.com
array508.prod.do.dsp.mp.microsoft.com
array511.prod.do.dsp.mp.microsoft.com
array512.prod.do.dsp.mp.microsoft.com
array513.prod.do.dsp.mp.microsoft.com
array603.prod.do.dsp.mp.microsoft.com
array604.prod.do.dsp.mp.microsoft.com
array605.prod.do.dsp.mp.microsoft.com
array609.prod.do.dsp.mp.microsoft.com
array611.prod.do.dsp.mp.microsoft.com
ars.smartscreen.microsoft.com
assets.onestore.ms
atm-fp-direct.office.com
attachments.office.net
augloop.office.com
aus.delve.office.com
auth.gfx.ms
autodiscover.outlook.com
autodiscover-s.outlook.com
autologon.microsoftazuread-sso.com
az416426.vo.msecnd.net
az826701.vo.msecnd.net
becws.microsoftonline.com
bing.com
broadcast.skype.com
browser.events.data.microsoft.com
browser.events.data.msn.com
browser.pipe.aria.microsoft.com
business.bing.com
c.bing.com
c.bing.net
c.live.com
c1.microsoft.com
can.delve.office.com
cdn.odc.officeapps.live.com
cdn.onenote.net
cdn.uci.officeapps.live.com
cdnprod.myanalytics.microsoft.com
checkappexec.microsoft.com
cl2.apple.com
client.wns.windows.com
clientconfig.microsoftonline-p.net
clients.config.office.net
cloudcheckenabler.azurewebsites.net
companymanager.microsoftonline.com
compass-ssl.microsoft.com
compliance.microsoft.com
config.edge.skype.com
config.office.com
connect.facebook.net
contentstorage.osi.office.net
cp501-prod.do.dsp.mp.microsoft.com
cp601-prod.do.dsp.mp.microsoft.com
crl.microsoft.com
ctldl.windowsupdate.com
cxcs.microsoft.net
d.docs.live.net
dc.services.visualstudio.com
delve.office.com
delve-gcc.office.com
device.login.microsoftonline.com
dgps.support.microsoft.com
directory.services.live.com
disc501.prod.do.dsp.mp.microsoft.com
disc601.prod.do.dsp.mp.microsoft.com
dmd.metaservices.microsoft.com
docs.live.net
docs.microsoft.com
eas.outlook.com
ecn.dev.virtualearth.net
ecs.office.com
edge.activity.windows.com
edge.microsoft.com
edge-enterprise.activity.windows.com
edgeservices.bing.com
enterprise-eudb.activity.windows.com
enterpriseregistration.windows.net
eu-office.events.data.microsoft.com
eur.delve.office.com
eu-teams.events.data.microsoft.com
excelbingmap.firstpartyapps.oaspapps.com
excelcs.officeapps.live.com
exo.nel.measure.office.net
fe2cr.update.microsoft.com
fe3cr.delivery.mp.microsoft.com
firstpartyapps.oaspapps.com
forms.office.com
fp-afd.azurefd.us
francecentral-prod.notifications.teams.microsoft.com
fs.microsoft.com
functional.events.data.microsoft.com
gbr.delve.office.com
geo.prod.do.dsp.mp.microsoft.com
go.microsoft.com
graph.microsoft.com
graph.windows.net
home.office.com
i.s-microsoft.com
ic3.events.data.microsoft.com
ieonlinews.microsoft.com
img-prod-cms-rt-microsoft-com.akamaized.net
in.applicationinsights.azure.com
ind.delve.office.com
informationprotection.hosting.portal.azure.net
insertmedia.bing.office.net
jpn.delve.office.com
kor.delve.office.com
kv501.prod.do.dsp.mp.microsoft.com
kv601.prod.do.dsp.mp.microsoft.com
lam.delve.office.com
licensing.md.mp.microsoft.com
licensing.mp.microsoft.com
livetileedge.dsx.mp.microsoft.com
login.live.com
login.microsoft.com
login.microsoftonline.com
login.microsoftonline-p.com
login.windows.net
login.windows-ppe.net
logincert.microsoftonline.com
loginex.microsoftonline.com
login-us.microsoftonline.com
loki.delve.office.com
manage.office.com
management.azure.com
mem.gfx.ms
messaging.office.com
mlccdn.blob.core.windows.net
mlccdnprod.azureedge.net
mscrl.microsoft.com
msdn.microsoft.com
msedge.api.cdp.microsoft.com
msedge.b.tlu.dl.delivery.mp.microsoft.com
msgapi.teams.microsoft.com
myanalytics.microsoft.com
myanalytics-gcc.microsoft.com
nam.delve.office.com
nexus.microsoftonline-p.com
nexusrules.officeapps.live.com
nleditor.osi.office.net
nps.onyx.azure.net
o15.officeredir.microsoft.com
o365diagtelemetry.trafficmanager.net
ocos-office365-s2s.msedge.net
ocps.manage.microsoft.com
ocsredir.officeapps.live.com
odc.officeapps.live.com
odcsm.officeapps.live.com
offcatedge.azureedge.net
office.live.com
office15client.microsoft.com
officeapps.live.com
officecdn.microsoft.com
officecdn.microsoft.com.edgesuite.net
officeclient.microsoft.com
officeimg.vo.msecnd.net
officepreviewredir.microsoft.com
officeredir.microsoft.com
oneclient.sfx.ms
onedriveclubproddm20043.blob.core.windows.net
outlook.office.com
outlook.office365.com
outlook.uservoice.com
outlookdiagnostics.azureedge.net
partnerservices.getmicrosoftkey.com
passwordreset.microsoftonline.com
peoplegraph.firstpartyapps.oaspapps.com
platform.linkedin.com
policykeyservice.dc.ad.msft.net
portal.microsoftonline.com
portal.office.com
pptcs.officeapps.live.com
presence.teams.microsoft.com
prod.firstpartyapps.oaspapps.com.akadns.net
prod.msocdn.com
products.office.com
protection.office.com
provisioningapi.microsoftonline.com
r.bing.com
r.clarity.ms
r.office.microsoft.com
r1.res.office365.com
r3.res.office365.com
r3.res.outlook.com
r4.res.office365.com
res.delve.office.com
roaming.officeapps.live.com
sara.api.support.microsoft.com
searchhighlights.bing.com
secure.aadcdn.microsoftonline-p.com
securescore.office.com
security.microsoft.com
self.events.data.microsoft.com
services.bingapis.com
settings-win.data.microsoft.com
sfdataservice.microsoft.com
sfgbr.loki.delve.office.com
shellprod.msocdn.com
shredder-eu.osi.office.net
signup.live.com
slscr.update.microsoft.com
smartscreen.microsoft.com
smartscreen-prod.microsoft.com
staffhub.ms
staffhub.office.com
staffhub.uservoice.com
stamp2.login.microsoftonline.com
statics.teams.cdn.office.net
storage.live.com
store.office.com
storecatalogrevocation.storequality.microsoft.com
substrate.office.com
suite.office.net
support.content.office.net
support.microsoft.com
support.office.com
tasks.office.com
tasks.teams.microsoft.com
teams.events.data.microsoft.com
teams.microsoft.com
technet.microsoft.com
telemetryservice.firstpartyapps.oaspapps.com
tellmeservice.osi.office.net
templates.office.com
templateservice.office.com
th.bing.com
trouter2-azsc-euno-4-b.trouter.teams.microsoft.com
tse1.mm.bing.net
tsfe.trafficshaping.dsp.mp.microsoft.com
uci.cdn.office.net
uci.officeapps.live.com
uk.ng.msg.teams.microsoft.com
uk-api.asm.skype.com
ukc-excel.officeapps.live.com
uk-prod.asyncgw.teams.microsoft.com
upload.fp.measure.office.com
v10.events.data.microsoft.com
v10.vortex-win.data.microsoft.com
videocontent.osi.office.net
videoplayercdn.osi.office.net
view.atdmt.com
vortex.data.microsoft.com
watson.events.data.microsoft.com
webshell.suite.office.com
wikipedia.firstpartyapps.oaspapps.com
wordcs.officeapps.live.com
workplaceanalytics.cdn.office.net
workplaceanalytics.office.com
world.ces.microsoftcloud.com
wus-firstpartyapps.oaspapps.com
www.bing.com
www.microsoft.com
www.office.com
www.onedrive.com
www.outlook.com

[RESOLVED] Your computer may stop responding when you run an application, Software Firewall or anti-virus package that uses the Windows Filtering Platform API

Your computer may stop responding when you run an application, Software Firewall or anti-virus package that uses the Windows Filtering Platform API

This issue affects the following operating systems:

  • Windows 7 – Service Pack 1
  • Windows Small Business Server 2011 – Service Pack 1
  • Windows SBS 2011 – Service Pack 1
  • Windows Server 2008 R2 – Service Pack 1
  • Windows Small Business Server 2008 – Service Pack 2
  • Windows SBS 2008 – Service Pack 2
  • Windows Server 2008 – Service Pack 2
  • Windows Vista – Service Pack 2

In this situation, the computer may perform slowly or stop responding and network activity may be affected.  You find that a system restart may resolve this issue in some instances.

This issue occurs because the FwpsStreamInjectAsync0 function causes the interrupt request level (IRQL) to leak.  You can resolve the issue by updating to the latest Netio.sys driver.  The download link can be found within Microsoft KB 2664888 http://support.microsoft.com/kb/2664888

 

Windows Filtering Platform (WFP) General Description

Windows Filtering Platform (WFP) is a set of API and system services that provide a platform for creating network filtering applications. The WFP API allows developers to write code that interacts with the packet processing that takes place at several layers in the networking stack of the operating system. Network data can be filtered and also modified before it reaches its destination.

By providing a simpler development platform, WFP is designed to replace  previous packet filtering technologies such as Transport Driver Interface (TDI)  filters, Network Driver Interface Specification (NDIS) filters, and Winsock Layered Service Providers (LSP). Starting in Windows Server 2008 and Windows Vista, the firewall hook and the filter hook drivers  are not available; applications that were using these drivers should use WFP instead.

With the WFP API, developers can implement firewalls, intrusion detection systems, antivirus programs, network monitoring tools, and parental controls. WFP integrates with and provides support for firewall features such as authenticated communication and dynamic firewall configuration based on applications’ use of sockets API (application-based policy). WFP also provides infrastructure for  IPsec policy management, change notifications, network diagnostics, and stateful filtering.

More info can be found here http://msdn.microsoft.com/en-us/library/windows/desktop/aa366510(v=vs.85).aspx

 

Troubleshoot a Blue Screen of Death BSOD or Crash Dump on a Microsoft Windows Operating System

It’s probably the thing we all dread most, evereything has been working great for weeks/months/years and then suddenly your machine starts randomly crashing to a Blue Screen of Death or BSOD

All is not lost though as Windows will often generate its own crash dump a report of what happened to cause the crash, this is often invaluable when it comes to finding the cause and fixing it.

A company called Nirsoft offer a great little utility called Blue Screen View, you can download it from here ttp://www.nirsoft.net/utils/blue_screen_view.html

This program will automatically analyse the default Mini Dump and Crash Dump locations and then pull back a summary of the driver or system file that was most likley the cause of your crash.  In many cases it’s then just a simple case of removing the offending software, updating/downgrading the device driver or installing a software patch/hotfix.

Microsoft Windows – Network Printer/s Unexpectedly Show Offline

When using Microsoft Windows (various editions and versions) you may find that your Network Printer Unexpectedly Shows Offline.  This can occur for a number of reasons and todays blog will try and help get you printing again.

First you should verify that you can ping the printer you are trying to print to, you can usually find the hostname or the IP address of the printer from the “Ports” tab of the printers “properties” page.

It should look something like this:

Printer Name or IP Address is where we can see which port the printer is trying to print to, we can then enter a “command prompt” by typing “cmd” into the “run” box and then type the ping command and the ip address or hostname of our printer.  Example is “ping 192.168.1.230” or “ping hpinkjetprinter”

If we do not get a response from the address or hostname then it could indicate that the printer has been assigned a different IP address (DHCP) by the server or your Router.  It could also indicate that the printer is turned off, the network cable is unplugged or damaged, if the printer is wireless it may be that the signal is no longer in range or that the wireless credentials it was setup with have been changed (WEP or WPA Key, SSID).  Many Servers or Routers support reservations so that you can ensure your printer always gets the same ip address, alternatively you can find the hostname of your printer and set the printer port to the hostname, if the ip address changes the computer should then still be able to resolve the hostname to the current and valid ip address of the device.

If your printer is responding to a ping command but you still cannot print then it may be an issue with the configuration of the printers “Standard TCP/IP Port” you will several options on the port configuration page that can effect your ability to submit a print job to the network printer, it may also cause the printer to incorrectly report that it is offline.

One particular issues that I have witnessed first hand is an HP OfficeJet Printer showing offline when the “SNMP Status Enabled” is ticked under the  “Standard TCP/IP Port” printer port configuration tab.  You may be able to ping the printer and access its web configuration but the printer will continue to show offline in Windows and print jobs will remian in the print queue.  Once the “SNMP Status Enabled” is unchecked the printer will appear online again and print correctly.

You amy also find that your printer only supports RAW or LPR mode, you can usually find further information on the “Protocol” that your printer supports via the technical manual or sometimes via the printers web configuration page.

Last but not least please remeber to check that you have the latest printer drivers from the manufacturers website, any firmware updates or software updates should also be installed to ensure the optimum performance and reliability of your product.  It is also important to remember that you should ensure the printer you are accessing is compatbile with your operating system and that driver support is either providd natively within Windows or the manufcaturer supply drivers via their website.