Event banner
Windows Office Hours: December 21, 2023
Event Ended
Thursday, Dec 21, 2023, 08:00 AM PSTEvent details
Get answers to your questions about adopting Windows 11 and managing the Windows devices used by remote, onsite, and hybrid workers across your organization. Get tips on keeping devices up to date ef...
Heather_Poulsen
Updated Dec 21, 2023
ENMRSH
Dec 21, 2023Copper Contributor
Thank you for this forum. This might not be the place but, we have about 100 PCs fetching Windows Updates from some server in [edited]. I've investigated this and found this IP belongs to: name: "Pittsburgh Internet Exchange", domain: "pit-ix.net" and Microsoft rents space on this server. Should I be concerned?
Jason_Sandys
Microsoft
Dec 21, 2023Hi Roy,
Thank you for the question. Most Windows Update content is not actually served up by Microsoft and is instead fronted or served up by one of multiple global CDNs. I don't know what all of these CDNs are offhand (and not sure if we publish what they are either). The IPs for these CDNs rotate regularly as well so there is no static list of the IPs either to my knowledge. Ultimately, Windows Update content can come from peers as well as multiple other Internet sources. All Windows Update content is cryptographically signed by Microsoft and validated by the OS before any action is taken using that content. This essentially guarantees that the content is "genuine" and produced by Microsoft regardless of the last mile download source.
- ENMRSHDec 21, 2023Copper ContributorThis makes me feel better. The HTTP request had me living in fear. KNowing it's at least signed puts me at ease. Tyvm