Terminal Server Agent does not allocate ports for Office 365 / backgroundtaskhost.exe

• Microsoft Office 365 connectivity uses the ports outside of the Terminal Server Agent allocation range.
• This can affect other applications which use backgroundtaskhost.exe for connectivity.
• This can cause user-based policies on a firewall not to match.
• No logs are seen for backgroundtaskhost.exe in the Terminal Server Agent debug log, even with verbose logging enabled.

• Terminal Server Agent
• Windows Server
• Office 365 or other application using backgroundtaskhost.exe

• backgroundtaskhost.exe utilizes the network stack in a way that bypasses visibility of the Terminal Server Agent driver.
• Due to this, the Terminal Server Agent cannot intercept the connection and bind the source port to one within it's own range.

Create a security rule without source users from the Terminal Server IP address to Microsoft Office 365 URL's