If I want to lock down domain controllers to the outside for Windows Update only, would restricting the outbound traffic to “*.microsoft.com” be enough? I have been told that Microsoft uses third party providers as part of the Windows Update process but I question this. TIA, Mike Thommes List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx

More here: [ActiveDir] restricting access for Windows Update?

Related posts

• [ActiveDir] Samba PDC in AD (0)
• [ActiveDir] OT: watch out for the DNS patch and impact on MaxUserPort value (0)
• Re: [ActiveDir] [ActiveDir] DC reboot / Java connection errors (0)
• [ActiveDir] MS08-67 where can I find a tool to check a hotfix presence? (0)
• [ActiveDir] DNS GUI now fails to connect to DNS service on DC (0)