Member Avatar for Ritesh_4

Hello
Anyone knows the URL or IP of the server from which the Media Creation Tool connects to download the ISO of Windows 10? I need this to add it to the exception list of my proxy as currently the latter is denying access to download the ISO file.

  • 2 Contributors
  • 2 Replies
  • 750 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by Ritesh_4

Dani AI

Generated

Short version: there is no single fixed IP to white‑list for the Media Creation Tool. Microsoft serves ISOs and update payloads from multiple hostnames and CDNs, and their published guidance is to allow the service FQDNs (and ports 80/443) instead of trying to pin IP addresses. (learn.microsoft.com)

Practical allowlist to unblock the Media Creation Tool / direct ISO downloads: allow outbound HTTPS/HTTP to the Windows Update and download hostnames that Microsoft documents — for example, .windowsupdate.microsoft.com, .update.microsoft.com, download.windowsupdate.com, download.microsoft.com, dl.delivery.mp.microsoft.com and .delivery.mp.microsoft.com, plus the Delivery Optimization endpoints (.prod.do.dsp.mp.microsoft.com) and the Microsoft download hostnames used for ISOs (software-download.microsoft.com / download.microsoft.com). Delivery Optimization also uses port 7680 for peer traffic; HTTP(S) (80/443) plus these hostnames are what to permit. (learn.microsoft.com)

Proxy notes that matter in practice: Delivery Optimization and many Microsoft downloads use byte‑range requests, so proxies must allow range requests. If a cloud proxy or TLS‑decrypting appliance forces all traffic through a middlebox, peer/cdn behavior can fail — Microsoft recommends bypassing cloud proxies for DO traffic or explicitly allowing the DO hostnames. Direct ISO links generated by the site are tokenized and ephemeral (they commonly expire within about 24 hours), so a one‑time generated link may fail later. (learn.microsoft.com)

Actionable steps: add the Microsoft hostnames above to your proxy/firewall allowlist (use FQDN/wildcards), allow byte‑range requests, and avoid SSL/TLS interception for those hosts where possible. For an immediate workaround, temporarily permit outbound HTTP/HTTPS from the machine that runs the Media Creation Tool, or use the official Microsoft download page to obtain an ISO. For enterprise scale, use WSUS/ConfigMgr/Delivery Optimization configuration so you control distribution. (microsoft.com)

Note: was right to suspect multiple endpoints rather than one IP; ’s workaround (getting the ISO from Microsoft’s download system) is exactly what the official guidance expects when direct MCT runs are blocked. (learn.microsoft.com)

Recommended Answers

All 2 Replies

Member Avatar for Ritesh_4

I managed to get the required ISO finally via a direct link (although it was in German) where I could choose which version to download as well:

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.