Windows 10 PCs in our organization are connecting to IP addresses in Asia upon being imaged with a fresh install of Windows 10

[RBish]

Upon installing a clean Windows 10 on a laptop, my firewall shows these machines attempting to connect to several IP addresses located in Asia. We block connections to several external countries in our organization, and need to find out what services are connecting to Hong Kong and Korea, and potentially disable those features/services.

Some examples:

52.114.7.36-37 - located in Hong Kong, and showing to be owned by Microsoft

40.100.20.2 (also .18 and .34) - located in Korea, and also showing to be owned by Microsoft


We need to know what these addresses are used for, and why the services are being routed overseas. Should we make exceptions for these addresses?

Continue reading...