How to Find Microsoft 365 Office Activation URLs for Firewall Allowlist
Question details
The user needs the specific URLs, IP addresses, and ports required to allowlist Microsoft 365 and Office 365 product activation through a network firewall.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Configuring a network firewall to allow Microsoft Office to connect to activation and licensing servers without unblocking unnecessary services.
- Observed behavior
- The user is struggling to identify the exact activation endpoints because the official Microsoft endpoint documentation is extensive and comprehensive.
Ensure you have administrative access to your network firewall or proxy settings, and note that Microsoft's service endpoints update frequently.
Locate Activation Endpoints in Microsoft Documentation
Use Microsoft's dynamically updated endpoint list to find the specific URLs and IP addresses required for Office 365 licensing and activation.
Because Microsoft 365 operates as a cloud service, the IP ranges and URLs used for product activation change periodically. Relying on a short static list of IP addresses is highly discouraged as it will lead to future activation failures.
Instead of hardcoding IPs, you should whitelist the domain names associated with Microsoft authentication and licensing.
Navigate to the official Microsoft Learn article titled 'Office 365 URLs and IP address ranges'.
Scroll down to the table labeled 'Microsoft 365 Common and Office Online', which contains the endpoints for authentication and licensing.
Look for the rows detailing 'Authentication and Identity'. You must whitelist URLs such as login.microsoftonline.com, login.windows.net, and login.microsoft.com.
Add these specific URLs and their associated IP subnets to your firewall's allowlist, ensuring that outbound traffic on TCP port 443 (HTTPS) and port 80 (HTTP) is permitted.
Try WPS Office for a Hassle-Free Editing Experience
Tired of managing complex firewall rules and constant online activation checks? WPS Office provides a powerful, highly compatible alternative to Microsoft Office that works seamlessly offline without heavy network management overhead.
- 1. Download WPS Office: Visit the official WPS website and click the download button for your operating system.
- 2. Install the Software: Run the lightweight installer and follow the simple on-screen instructions.
- 3. Open and Edit: Launch WPS Office and immediately start working on your existing Microsoft Office files.
Frequently Asked Questions
Which specific ports need to be open for Microsoft 365 activation?
Microsoft 365 and Office product activation primarily require outbound network connections on TCP port 443 (HTTPS) and port 80 (HTTP).
Can I use a static IP list for Office activation?
It is highly discouraged. Microsoft dynamically changes the IP addresses of its cloud services. Using a static list will eventually cause activation or connectivity failures.
Why does my Office activation fail even after whitelisting login.microsoftonline.com?
Activation relies on multiple endpoints, including certificate revocation lists (CRLs) and specific licensing servers. Ensure all 'Common and Office Online' endpoints specified in Microsoft's official documentation are allowed.
