Windows service proxy settings

Want to experience Defender for Endpoint? Sign up for a free trial. The embedded Defender for Endpoint sensor runs in system context using the LocalSystem account. For organizations that use forward proxies as a gateway to the Internet, you can use network protection to investigate connection events that occur behind forward proxies. WinHTTP and can only discover a proxy server by using the following discovery methods:. If you're using Transparent proxy or WPAD in your network topology, you don't need special configuration settings.

WinHTTP configured using netsh command: Suitable only for desktops in a stable topology for example: a desktop in a corporate network behind the same proxy. Defender antivirus and EDR proxies can be set independently. In the sections that follow, be aware of those distinctions.

Configure a registry-based static proxy for Defender for Endpoint detection and response EDR sensor to report diagnostic data and communicate with Defender for Endpoint services if a computer is not permitted to connect to the Internet.

When using this option on Windows 10, or Windows 11, or Windows Server , or Windows Server , it is recommended to have the following or later build and cumulative update rollup:. The static proxy is also configurable through Group Policy GP , both the settings under group policy values need to be set to configure the proxy server to be used for EDR. The group policy can be found under:. Set it to Enabled and select Disable Authenticated Proxy usage.

Microsoft Defender Antivirus cloud-delivered protection provides near-instant, automated protection against new and emerging threats. Note that connectivity is required for custom indicators when Defender Antivirus is your active antimalware solution; and for EDR in block mode even when using a non-Microsoft solution as the primary antimalware solution.

Set it to Enabled and define the proxy server. For resiliency purposes and the real-time nature of cloud-delivered protection, Microsoft Defender Antivirus will cache the last known working proxy. Ensure your proxy solution does not perform SSL inspection as this will break the secure cloud connection.

Microsoft Defender Antivirus will not use the static proxy to connect to Windows Update or Microsoft Update for downloading updates. Instead, it will use a system-wide proxy if configured to use Windows Update, or the configured internal update source according to the configured fallback order. If a proxy or firewall is blocking all traffic by default and allowing only specific domains through, add the domains listed in the downloadable sheet to the allowed domains list.

The following downloadable spreadsheet lists the services and their associated URLs that your network must be able to connect to. Add a comment. Active Oldest Votes. Improve this answer. This solved my problem, many thanks! I ended up writing a Java class to manipulate the DefaultConnectionSettings hex string, as I needed to set the proxy programmatically. Can this work if authentication is required?

I had to use another ID than S and I retrieved it by issuing: wmic useraccount get name,sid findstr some-user-name. First, run cmd as administrator to open a command prompt. Florian Winter 1 1 gold badge 1 1 silver badge 10 10 bronze badges. TomazZ TomazZ 1 1 silver badge 2 2 bronze badges.

Community Bot 1. Rory Rory 5 5 gold badges 12 12 silver badges 21 21 bronze badges. It's not in Windows 7, for example. Does that actually work now? Alan Jebakumar Alan Jebakumar 11 1 1 bronze badge. The Automatic Updates service does not have access to the user-specific proxy server settings that may be configured in Internet Explorer. WinHTTP has been employed, instead of WinInet in Internet Explorer, as the Automatic Updates service affects system wide level configuration and should require administrator level control.

WinHTTP is considered as more appropriate in this type of usage scenario. The Automatic Updates service can only discover a proxy server by using one of the following methods:. The proxy server is manually configured by using the Proxycfg.

For more information about how to use the Proxycfg. For more information about a related topic, click the following article number to view the article in the Microsoft Knowledge Base:.

If you use Internet Explorer to access the Windows Update Web site, the Windows Update client program discovers a proxy server by using the following methods in the order that they appear in.

To view the Automatically detect settings check box, follow these steps:. On the Tools menu, click Internet Options. If you connect to the Internet by using a proxy server on the local area network, click LAN Settings. If you connect to the Internet by using a proxy server for a dial-up connection or a VPN connection, click that connection, and then click Settings.

If the following conditions are true, the Windows Update client locates the proxy server by processing the automatic configuration script:. The Use automatic configuration script check box is selected in Internet Explorer.

To view the Use automatic configuration script check box, follow these steps:. If you connect to the Internet by using a proxy server for a dial-up or VPN connection, click that connection, and then click Settings. If the following conditions are true, the Windows Update client uses the user-defined proxy server to connect to the Internet:. The Windows Update client cannot locate a proxy server by using automatic detection or by using an automatic configuration script.

Note the value that appears in the Address box under Proxy server. If no proxy server is defined in Internet Explorer, the Windows Update client uses the proxy server that was configured by using the Proxycfg. If the following conditions are true, the Windows Update client tries to connect to the Windows Update Web site directly:.

In this scenario, if a proxy server is required to connect to the Internet, the Windows Update client cannot successfully connect to the Windows Update Web site. The Proxycfg. Additionally, you can use this tool to help you troubleshoot proxy server discovery problems in the network. In this situation, you can use this tool to help verify that an issue occurs because of a failure to discover a proxy server by using the other discovery methods, such as WPAD.

If you run the proxycfg. In this situation, you receive results that are similar to one of the following results.