{"id":7123,"date":"2024-07-02T09:02:29","date_gmt":"2024-07-02T00:02:29","guid":{"rendered":"https:\/\/m365jp.net\/?p=7123"},"modified":"2024-07-02T09:15:51","modified_gmt":"2024-07-02T00:15:51","slug":"mc807445-plan-for-change-inbound-access-to-port-3389-closed-by-default-for-windows-365-cloud-pcs","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2024-07-02-mc807445-plan-for-change-inbound-access-to-port-3389-closed-by-default-for-windows-365-cloud-pcs","title":{"rendered":"MC807445 | Plan for Change: Inbound Access to Port 3389 Closed by Default for Windows 365 Cloud PCs"},"content":{"rendered":"
\n
\n
\n\n\n\n
MC807445 | Plan for Change: Inbound Access to Port 3389 Closed by Default for Windows 365 Cloud PCs<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n
\n\n\n\n\n\n\n\n\n
Classification<\/th>\nplanForChange<\/td>\n<\/tr>\n
Last Updated<\/th>\n07\/01\/2024 23:07:39<\/td>\n<\/tr>\n
Start Time<\/th>\n07\/01\/2024 23:07:22<\/td>\n<\/tr>\n
End Time<\/th>\n09\/02\/2024 07:00:00<\/td>\n<\/tr>\n
Message Content<\/th>\n\n

In line with Microsoft’s Secure Future Initiative, we are enhancing the security of Windows 365 Cloud PCs. Starting in July 2024, all newly provisioned Cloud PCs will have Transmission Control Protocol (TCP) and User Datagram Protocol (UDP) port 3389 closed by default via Windows Firewall. This change aims to provide better protection against potential cyber threats, such as man-in-the-middle attacks and ransomware, ensuring a more secure computing environment for our users. Therefore, Microsoft strongly advises keeping port 3389 closed to maintain these heightened security standards. <\/p>\n

[How This Will Affect Your Organization:]<\/p>\n

Starting at the end of July 2024, as part of our security enhancement measures<\/a>, all newly provisioned and reprovisioned Cloud PCs will come with inbound access via port 3389 closed in Windows Firewall by default. This means that any existing Cloud PC with port 3389 open will have it closed during the reprovisioning process. This proactive approach ensures that all newly provisioned Cloud PCs will automatically adhere to the heightened security standard of having inbound access via port 3389 closed by default. <\/p>\n

[What You Need to Prepare:]<\/p>\n

Microsoft strongly recommends keeping port 3389 closed. However, if you need port 3389 to be open for any reprovisioned or newly provisioned Cloud PCs using the Azure Network Connection (ANC) deployment option, you can review the following options. Before making changes, please refer to the documentation for guidance specific to your environment. <\/p>\n

For Microsoft Entra joined<\/a> and Intune-enrolled devices using Azure Network Connection (ANC) deployment option:
<\/b><\/p>\n

Machine Translation<\/th>\n\n

Microsoft \u306e Secure Future Initiative \u306b\u6cbf\u3063\u3066\u3001Windows 365 \u30af\u30e9\u30a6\u30c9 PC \u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3092\u5f37\u5316\u3057\u3066\u3044\u307e\u3059\u3002 2024 \u5e74 7 \u6708\u4ee5\u964d\u3001\u65b0\u3057\u304f\u30d7\u30ed\u30d3\u30b8\u30e7\u30cb\u30f3\u30b0\u3055\u308c\u305f\u3059\u3079\u3066\u306e\u30af\u30e9\u30a6\u30c9 PC \u3067\u306f\u3001Windows \u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u3092\u4ecb\u3057\u3066\u4f1d\u9001\u5236\u5fa1\u30d7\u30ed\u30c8\u30b3\u30eb (TCP) \u3068\u30e6\u30fc\u30b6\u30fc \u30c7\u30fc\u30bf\u30b0\u30e9\u30e0 \u30d7\u30ed\u30c8\u30b3\u30eb (UDP) \u306e\u30dd\u30fc\u30c8 3389 \u304c\u65e2\u5b9a\u3067\u9589\u3058\u3089\u308c\u307e\u3059\u3002\u3053\u306e\u5909\u66f4\u306f\u3001\u4e2d\u9593\u8005\u653b\u6483\u3084\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u306a\u3069\u306e\u6f5c\u5728\u7684\u306a\u30b5\u30a4\u30d0\u30fc\u8105\u5a01\u306b\u5bfe\u3059\u308b\u4fdd\u8b77\u3092\u5f37\u5316\u3057\u3001\u30e6\u30fc\u30b6\u30fc\u306b\u3068\u3063\u3066\u3088\u308a\u5b89\u5168\u306a\u30b3\u30f3\u30d4\u30e5\u30fc\u30c6\u30a3\u30f3\u30b0\u74b0\u5883\u3092\u78ba\u4fdd\u3059\u308b\u3053\u3068\u3092\u76ee\u7684\u3068\u3057\u3066\u3044\u307e\u3059\u3002\u305d\u306e\u305f\u3081\u3001Microsoft \u3067\u306f\u3001\u3053\u308c\u3089\u306e\u5f37\u5316\u3055\u308c\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u57fa\u6e96\u3092\u7dad\u6301\u3059\u308b\u305f\u3081\u306b\u3001\u30dd\u30fc\u30c8 3389 \u3092\u9589\u3058\u305f\u307e\u307e\u306b\u3057\u3066\u304a\u304f\u3053\u3068\u3092\u5f37\u304f\u304a\u52e7\u3081\u3057\u307e\u3059\u3002<\/p>\n

[\u3053\u308c\u304c\u7d44\u7e54\u306b\u53ca\u307c\u3059\u5f71\u97ff:]<\/p>\n

2024 \u5e74 7 \u6708\u672b\u4ee5\u964d\u3001 \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5f37\u5316\u5bfe\u7b56<\/a>\u306e\u4e00\u74b0\u3068\u3057\u3066\u3001\u65b0\u3057\u304f\u30d7\u30ed\u30d3\u30b8\u30e7\u30cb\u30f3\u30b0\u304a\u3088\u3073\u518d\u30d7\u30ed\u30d3\u30b8\u30e7\u30cb\u30f3\u30b0\u3055\u308c\u305f\u3059\u3079\u3066\u306e\u30af\u30e9\u30a6\u30c9 PC \u306b\u306f\u3001\u65e2\u5b9a\u3067 Windows \u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u3067\u9589\u3058\u3089\u308c\u305f\u30dd\u30fc\u30c8 3389 \u7d4c\u7531\u306e\u53d7\u4fe1\u30a2\u30af\u30bb\u30b9\u304c\u4ed8\u5c5e\u3057\u307e\u3059\u3002\u3064\u307e\u308a\u3001\u30dd\u30fc\u30c8 3389 \u304c\u958b\u3044\u3066\u3044\u308b\u65e2\u5b58\u306e\u30af\u30e9\u30a6\u30c9 PC \u306f\u3001\u518d\u30d7\u30ed\u30d3\u30b8\u30e7\u30cb\u30f3\u30b0 \u30d7\u30ed\u30bb\u30b9\u4e2d\u306b\u9589\u3058\u3089\u308c\u307e\u3059\u3002\u3053\u306e\u30d7\u30ed\u30a2\u30af\u30c6\u30a3\u30d6\u306a\u30a2\u30d7\u30ed\u30fc\u30c1\u306b\u3088\u308a\u3001\u65b0\u3057\u304f\u30d7\u30ed\u30d3\u30b8\u30e7\u30cb\u30f3\u30b0\u3055\u308c\u305f\u3059\u3079\u3066\u306e\u30af\u30e9\u30a6\u30c9 PC \u306f\u3001\u30dd\u30fc\u30c8 3389 \u7d4c\u7531\u306e\u53d7\u4fe1\u30a2\u30af\u30bb\u30b9\u3092\u65e2\u5b9a\u3067\u9589\u3058\u308b\u3068\u3044\u3046\u5f37\u5316\u3055\u308c\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u6a19\u6e96\u306b\u81ea\u52d5\u7684\u306b\u6e96\u62e0\u3057\u307e\u3059\u3002<\/p>\n

\u3010\u3054\u7528\u610f\u3044\u305f\u3060\u304f\u3082\u306e\u3011<\/p>\n

Microsoft \u3067\u306f\u3001\u30dd\u30fc\u30c8 3389 \u3092\u9589\u3058\u305f\u307e\u307e\u306b\u3057\u3066\u304a\u304f\u3053\u3068\u3092\u5f37\u304f\u304a\u52e7\u3081\u3057\u307e\u3059\u3002\u305f\u3060\u3057\u3001Azure \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u63a5\u7d9a (ANC) \u30c7\u30d7\u30ed\u30a4 \u30aa\u30d7\u30b7\u30e7\u30f3\u3092\u4f7f\u7528\u3057\u3066\u3001\u518d\u30d7\u30ed\u30d3\u30b8\u30e7\u30cb\u30f3\u30b0\u307e\u305f\u306f\u65b0\u3057\u304f\u30d7\u30ed\u30d3\u30b8\u30e7\u30cb\u30f3\u30b0\u3055\u308c\u305f\u30af\u30e9\u30a6\u30c9 PC \u306b\u5bfe\u3057\u3066\u30dd\u30fc\u30c8 3389 \u3092\u958b\u304f\u5fc5\u8981\u304c\u3042\u308b\u5834\u5408\u306f\u3001\u6b21\u306e\u30aa\u30d7\u30b7\u30e7\u30f3\u3092\u78ba\u8a8d\u3067\u304d\u307e\u3059\u3002\u5909\u66f4\u3092\u884c\u3046\u524d\u306b\u3001\u3054\u4f7f\u7528\u306e\u74b0\u5883\u306b\u56fa\u6709\u306e\u30ac\u30a4\u30c0\u30f3\u30b9\u306b\u3064\u3044\u3066\u3001\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n

Azure \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u63a5\u7d9a (ANC) \u30c7\u30d7\u30ed\u30a4 \u30aa\u30d7\u30b7\u30e7\u30f3\u3092\u4f7f\u7528\u3059\u308b Microsoft Entra \u53c2\u52a0\u6e08\u307f<\/a> \u30c7\u30d0\u30a4\u30b9\u3068 Intune \u767b\u9332\u6e08\u307f\u30c7\u30d0\u30a4\u30b9\u306e\u5834\u5408:<\/b><\/p>\n