Merge pull request #9082 from JoeNoMSFT/docs-editor/troubleshoot-azure-network-con-1749204750

AB#6175: Update troubleshoot-azure-network-connection.md

Author: Deland-Han

support/windows-365/troubleshoot-azure-network-connection.md

@@ -2,9 +2,9 @@
 title: Troubleshoot Azure network connections
 description: Troubleshoot Azure network connections in Windows 365.
 manager: dcscontentpm
-ms.date: 01/20/2025
+ms.date: 06/10/2025
 ms.topic: troubleshooting
-ms.reviewer: ericor, erikje
+ms.reviewer: ericor, erikje, joeno
 ms.custom:
 - pcy:Azure Network Connection\VNET Setup and Config Issues
 - sap:WinComm User Experience
@@ -41,6 +41,14 @@ Successful communication with a domain controller within your organization is es
 > [!NOTE]
 > This section only applies to hybrid environments.
 
+### Windows Remote Management (WinRM) requirements for ANC
+
+WinRM is required to complete an ANC setup.
+
+To ensure successful provisioning, verify that WinRM isn't restricted to specific IP addresses, whether through a Group Policy Object (GPO) or Microsoft Intune configuration service provider (CSP), for the groups used in your provisioning policies. WinRM should be configured to allow network requests from any IP address.
+
+For more information, see [GPO configurations](/windows/win32/winrm/installation-and-configuration-for-windows-remote-management) or [Intune CSP](/windows/client-management/mdm/policy-csp-remotemanagement).
+
 ### ANC Endpoint Access
 
 During ANC configuration, the service needs to download configuration data from various Microsoft endpoints as listed in [Network requirements](/windows-365/enterprise/requirements-network). Failure to reach these endpoints due to misconfigured network settings can lead to a failure. To ensure successful access, Transport Layer Security (TLS) inspection should be avoided on any vNET used for ANC connections. Ensure that you can successfully resolve and reach these endpoints through the Azure vNet used and ensure that any firewall, proxy, or other Network services employed within the network allow access to them.