Why is my computer contacting this URL?

Pascal P 20 Reputation points
2023-10-20T11:43:36.4933333+00:00

Hello,

I've looked at my Event Viewer and I notice an error stating that "Name resolution for the name cs.dds.microsoft.com timed out after none of the configured DNS servers responded. Client PID 9636". I made some searches on Google for cs.dds.microsoft.com and it says: "Microsoft Intune is a cloud-based endpoint management solution. It manages user access to organizational resources and simplifies app and device management across your many devices, including mobile devices, desktop computers, and virtual endpoints." Other search results also stated that the URL mentioned in the Event Viewer is also related to Windows Autopilot.

The thing is, I've had issues with certain individuals who stole my Windows credentials in the past. They used those to sign me up with Azure, which gave them the ability to deploy virtual machines on my computers, as well as using Azure to collect information about me and conduct some general "snooping". So I'm rather convinced that once again, those same people might have used another Microsoft service (Intune Autopilot) to somehow track me or for other malicious and unauthorized purposes.

I've included 2 screenshots of the Event Viewer.

WindowsContactingWindowsAutopilotScreenshot.jpg

WindowsContactingWindowsAutopilotScreenshot2.jpg

Windows Autopilot
Windows Autopilot
A collection of Microsoft technologies used to set up and pre-configure new devices and to reset, repurpose, and recover devices.
430 questions
Microsoft Intune Reporting
Microsoft Intune Reporting
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Reporting: The process of giving an account of something that has been observed, heard, done, or investigated.
66 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,657 questions
0 comments
Accepted answer
  1. Simon Ren-MSFT 31,756 Reputation points Microsoft Vendor
    2023-10-23T09:01:31.54+00:00

    Hi,

    Thank you for posting in Microsoft Q&A forum.
    Firstly, please change your Windows login password, as well as any associated with your Microsoft account. This will help prevent further unauthorized access.

    The URL cs.dds.microsoft.com is used for Intune to contact the Windows Autopilot Deployment Service. It seems that your device is registered in an organization for Intune Windows Autopilot. You could contact your vendor or certain individuals to remove your device from their Intune portal to avoid this warning.

    Thanks for your time. Have a nice day!

    Best regards,

    Simon

    If the response is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Simon Ren-MSFT 31,756 Reputation points Microsoft Vendor
    2023-10-25T07:43:50.0933333+00:00

    Hi,

    Thanks for your reply.

    Given this situation, you can try to contact Microsoft phone support to see if they can help you.

    Global Customer Service phone numbers

    How to get support in the Microsoft Intune admin center

    Thanks for your time. Have a nice day!

    Best regards,

    Simon

    0 comments