Windows 365 IP range for Azure Conditional Access

%3CLINGO-SUB%20id%3D%22lingo-sub-2835799%22%20slang%3D%22en-US%22%3EWindows%20365%20IP%20range%20for%20Azure%20Conditional%20Access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2835799%22%20slang%3D%22en-US%22%3E%3CP%3EHey%20everyone%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20getting%20blocked%20by%20an%20Azure%20Conditional%20access%20rule%20for%20IP%20addresses%20whitelisting.%20I%20can%20whitelist%20the%20IP%20I%20am%20currently%20getting%20on%20Windows%20365%20but%20I%20was%20hoping%20there%20was%20a%20range%20I%20could%20whitelist%20so%20that%20I%20don't%20have%20to%20add%20each%20machine%20to%20the%20whitelisting%20individually%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2835799%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Ebusiness%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2838662%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20365%20IP%20range%20for%20Azure%20Conditional%20Access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2838662%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1182508%22%20target%3D%22_blank%22%3E%40HenryWarner%3C%2FA%3E%26nbsp%3B%3A%20Can%20you%20clarify%20the%20scenario%3F%20If%20I'm%20understanding%20correctly%2C%20I%20believe%20you're%20saying%3A%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EYour%20organization%20is%20restricting%20access%20to%20specific%20AAD%20apps%20with%20a%20Conditional%20Access%20policy%20that%20requires%20the%20request%20comes%20from%20a%20set%20of%20IP%20address%20ranges.%3C%2FLI%3E%0A%3CLI%3EYou%20are%20logged%20in%20to%20your%20Windows%20365%20Cloud%20PC%20and%20can't%20access.%3C%2FLI%3E%0A%3CLI%3EYou're%20looking%20for%20a%20common%20IP%20address%20(or%20range)%20for%20all%20Cloud%20PCs%20that%20get%20created%20in%20your%20organization%2C%20so%20you%20don't%20have%20to%20add%20a%20lot%20of%20single%20IP%20addresses.%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3EIs%20this%20all%20correct%3F%20Also%2C%20I%20see%20the%20tag%20for%26nbsp%3B%3CSTRONG%3EBusiness%3C%2FSTRONG%3E.%20Can%20you%20confirm%20if%20you're%20using%20Windows%20365%20Business%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2838694%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20365%20IP%20range%20for%20Azure%20Conditional%20Access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2838694%22%20slang%3D%22en-US%22%3EChristian%2C%20thanks%20for%20clarifying!%3CBR%20%2F%3EWe%20are%20trying%20to%20access%20an%20organization%20(%231)%20that%20has%20restricted%20apps%20with%20an%20AAD%20CAP.%20We%20are%20looking%20for%20(%233)%20a%20common%20IP%20address%20range%20for%20all%20Cloud%20PCs%20that%20get%20created%20in%20your%20organization.%20For%20example.%20One%20Windows%20365%20PC%20is%2020.106.244.xx%20and%20the%20other%20is%2020.112.11.xx.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2839673%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20365%20IP%20range%20for%20Azure%20Conditional%20Access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2839673%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1182508%22%20target%3D%22_blank%22%3E%40HenryWarner%3C%2FA%3E%26nbsp%3B-%20Last%20clarifying%20question%2C%20is%20this%26nbsp%3B%3CSTRONG%3EWindows%20365%20Enterprise%3C%2FSTRONG%3E%20Cloud%20PCs%20or%26nbsp%3B%3CSTRONG%3EWindows%20365%20Business%26nbsp%3B%3C%2FSTRONG%3ECloud%20PCs%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2841624%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20365%20IP%20range%20for%20Azure%20Conditional%20Access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2841624%22%20slang%3D%22en-US%22%3EWindows%20365%20Business%20Cloud%20PCs%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2857054%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20365%20IP%20range%20for%20Azure%20Conditional%20Access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2857054%22%20slang%3D%22en-US%22%3EChristian%2C%3CBR%20%2F%3E%3CBR%20%2F%3EAny%20luck%20finding%20out%20the%20IP%20range%20for%20Windows%20365%20Business%20Cloud%20PCs%3F%3CBR%20%2F%3EThanks!%3C%2FLINGO-BODY%3E
Occasional Contributor

Hey everyone, 

 

I am getting blocked by an Azure Conditional access rule for IP addresses whitelisting. I can whitelist the IP I am currently getting on Windows 365 but I was hoping there was a range I could whitelist so that I don't have to add each machine to the whitelisting individually? 

8 Replies

@HenryWarner : Can you clarify the scenario? If I'm understanding correctly, I believe you're saying:

  1. Your organization is restricting access to specific AAD apps with a Conditional Access policy that requires the request comes from a set of IP address ranges.
  2. You are logged in to your Windows 365 Cloud PC and can't access.
  3. You're looking for a common IP address (or range) for all Cloud PCs that get created in your organization, so you don't have to add a lot of single IP addresses.

Is this all correct? Also, I see the tag for Business. Can you confirm if you're using Windows 365 Business?

Christian, thanks for clarifying!
We are trying to access an organization (#1) that has restricted apps with an AAD CAP. We are looking for (#3) a common IP address range for all Cloud PCs that get created in your organization. For example. One Windows 365 PC is 20.106.244.xx and the other is 20.112.11.xx.

@HenryWarner - Last clarifying question, is this Windows 365 Enterprise Cloud PCs or Windows 365 Business Cloud PCs?

Windows 365 Business Cloud PCs
Christian,

Any luck finding out the IP range for Windows 365 Business Cloud PCs?
Thanks!
I have the same issue with the same scenario. Did you find the range of IP addresses for Windows 365 Business?
Unfortunately the only solution was to move to enterprise Windows 365 where the traffic runs through your Azure tenant.
I DM you on some help with Windows 365 Enterprise. I would really grateful for your help!