SurfProtect Quantum and accessing the Microsoft Store on Windows 10

[Kitkatninja]

Good day,

 

I was wondering if anyone/everyone here uses the SurfProtect Quantum filtering system with Windows 10... How do you access the Microsoft Store?

 

Please do not suggest using the "NoTLS" proxy, enabling the "MicrosoftStore" tickbox, or placing the following sites:

 

login.live.com

login.windows.net

account.live.com

clientconfig.passport.net

windowsphone.com

.wns.windows.com

.microsoft.com

.s-microsoft.com

http://www.msftncsi.com

http://www.msftconnecttest.com

.msftconnecttest.com

 

In the "TLS Bypass" and or the "Allow URLs" portion.

 

As we have done all of that already. If you can successfully access the Microsoft Store on Windows 10 using either the "AD" or "Proxy" proxy, please let us know how you have done it.

 

Thanks

 

-Ken

[DJ-1701]

I hate to say it, but... it just works for me on Quantum using the AD proxy.

 

Willing to test anything or look up settings, but I think the only difference maybe that I don't have the proxy set via reg fragments in GPOs that some Quantum users have as part of the automated install, I removed them and just I use a wpad.dat file I created.

 

function FindProxyForURL(url, host)
{
   if (isPlainHostName(host) || shExpMatch(host,"*.addomain.school.county.sch.uk") || shExpMatch(host,"10.1.0.*"))
   {
       return "DIRECT";
   }
   else
   {
       return "PROXY ad.quantum.exa-networks.co.uk:3128";
   }
}

[Arthur]

I don't use SurfProtect, but there are some URLs missing from your list (one of which is akamaized.net. See thread linked below for more).

 

Do you also have any of the following registry values set...

 

www.edugeek.net/forums/windows-10/201069-broken-microsoft-store-but-unsure-why.html#post1716902

Edited January 24, 2019 by Arthur

[Kitkatninja]

I hate to say it, but... it just works for me on Quantum using the AD proxy.

 

Willing to test anything or look up settings, but I think the only difference maybe that I don't have the proxy set via reg fragments in GPOs that some Quantum users have as part of the automated install, I removed them and just I use a wpad.dat file I created.

 

Thanks... We also use a WPAD file for the AD proxy (but we have also tested it manually set).

 

Sorry to ask, but would you be able to let me know what sites you have in your "bypass" and "allowed" lists please (that relate to Microsoft and the like)? As I'm getting no where... What I may do is set up a totally blank profile in Surfprotect and see if that allows me straight to it as well...

 

Thanks

 

-Ken

[DJ-1701]

The sites I have allowed are:

 

.azurewebsites.net

.officedba.azurewebsites.net

.SCHOOLO365NAMEHERE-my.sharepoint.com

azurewebsites.net

officedba.azurewebsites.net

SCHOOLO365NAMEHERE-my.sharepoint.com

 

 

Also made a reclassification of officedba.azurewebsites.net as 'Computing / Internet'

Edited January 24, 2019 by DJ-1701

[Kitkatninja]

Ok... I have created a brand new profile in Quantum, I have allowed every single category (apart from the 5 behaviourally blocked categories: Adult, intimate Apparel, intolerance & hate, proxies, and Proxy URL Rewriting). I have created a new bypass list and have added the following sites, the ones I knew about plus the ones that Arthur pointed out:

 

login.live.com

login.windows.net

account.live.com

clientconfig.passport.net

windowsphone.com

.wns.windows.com

.microsoft.com

.s-microsoft.com

http://www.msftncsi.com

http://www.msftconnecttest.com

.msftconnecttest.com

storeedgefd.dsx.mp.microsoft.com

store-images.s-microsoft.com

account.xbox.com

assets.onestore.ms

login.live.com

storeedgefd.dsx.mp.microsoft.com

universalstore.streaming.mediaservices.windows.net

 

Still unable to download and install from the Microsoft store (but using the "NoTLS" still works).

 

I have tried using the Environment Variable (the HTTP_Proxy and HTTPS_Proxy) as well as tried the "Netsh winhttp import proxy source=ie" command (just in case it was still the issue of the Microsoft Store not liking proxies).

 

Still nothing...

 

-Ken

[Kitkatninja]

The sites I have allowed are:

 

.azurewebsites.net

.officedba.azurewebsites.net

.SCHOOLO365NAMEHERE-my.sharepoint.com

azurewebsites.net

officedba.azurewebsites.net

SCHOOLO365NAMEHERE-my.sharepoint.com

 

 

Also made a reclassification of officedba.azurewebsites.net as 'Computing / Internet'

 

Thanks, I've included the sites (made mods to the URLs that needed it) and have reclassified the stated one... Still not allowing me

 

Thanks for all your guys help so far, any suggestions would be greatfully accepted