FAQ: IT Admin Guide

This guide answers many of the common questions IT Administrators have about deploying and managing Minecraft: Education Edition in their school(s).

Can I still use Minecraft: Education Edition version 1.12 and earlier?

On January 23rd 2021, we will be updating our sign-in servers. After this update, you will need to be on Minecraft: Education Edition 1.14.30 or newer and Classroom Mode version 1.80 or newer to sign in. To continue using Minecraft: Education Edition, please update to the latest version.

Why should I allow students to play Minecraft at school?

Minecraft: Education Edition is a game-based learning platform that offers educators a transformative way to engage students and ignite their passion for learning. The platform contains controls not found in the Consumer editions of Minecraft - which allow instructors oversight into the activities of their students. Educators in grades K-12 are using Minecraft: Education Edition to teach a range of subjects, from history and chemistry to sustainability and foreign languages, and can map lessons directly to specific learning outcomes and curriculum standards.  Through these project-based lessons, students build critical 21st century skills like collaboration, creative problem solving and digital citizenship.

Why do I need to allow network access to URLs?

Minecraft: Education Edition is built on a services-based architecture that requires communication from the application to external services on the internet. This architecture allows students to access new features such as Immersive Reader and new lesson content. In order to allow communication with these external services, your school network will need to allow traffic between Minecraft: Education Edition and a set of service endpoints. Allowing the following set of URLs will allow access to these services that are integrated into the application itself.

What URLs do I need to allow?

• https://*.minecrafteduservices.com (Login/Multiplayer/Coding)
• https://*.xboxlive.com (Library/Demo Lesson)
• https://*.playfabapi.com (Library/Demo Lesson)
• https://education.minecraft.net (Library)
• https://self.events.data.microsoft.com/ (Error Reporting & Logging) 
• http://meedownloads.blob.core.windows.net (Updates & Support files)
• https://contentstorage.onenote.office.net (Immersive Reader)
• https://meedownloads.azureedge.net (Immersive Reader)
• http://cognitiveservices.azure.com (Immersive Reader)
• https://learningtools.onenote.com (Immersive Reader)
• https://minecraft.makecode.com (MakeCode)
• https://makecode.com (MakeCode)
• https://trg-minecraft.userpxt.io (MakeCode)
• https://pxt.azureedge.net (MakeCode)
• https://api.github.com (MakeCode)
• https://www.tynker.com (Tynker)

You will also need to ensure the following processes can run while logging in:

• Minecraft.AdalServer.exe  (Login)

If you are using SSL Decryption on a Chromebook any url that serves up certificates would need to be added to your bypass list. The article from Google has information here.

Can we reduce the number of “game” related domains in the allow-list?

The Minecraft: Education Edition library uses the Microsoft owned services PlayFab and XForge to deliver library content and RTEP to gather error reports and logs. While we recommend allowing all xboxlive.com subdomains to help protect against future architecture changes such as additional authentication calls or the introduction of new CDNs, it is possible to limit the number of xboxlive.com services to just those currently used by XForge:

• https://xforge.xboxlive.com/
• https://xforgeassets001.xboxlive.com/
• https://xforgeassets002.xboxlive.com/

Will allowing these URLs open my network to unwanted activity?

Minecraft: Education Edition only uses services from reputable sources that have been audited for compliance with all relevant security and privacy standards.  The communications between Minecraft: Education Edition and these service endpoints is limited to data sharing between the application and the service and the services we use are generally not available for web traffic.  

The xboxlive.com and playfabapi.com services connect Minecraft: Education Edition to our content hosting service which allows for much quicker access to our instructional content.  Opening your network to these URLs will allow authenticated communication to all Xbox services hosted on xboxlive.com but does not allow access to public websites like xbox.com. If you are concerned about exposing too many services from xboxlive.com, it is possible to only allow XForge by following the previous questions' instructions.

Do I need to forward any Ports for Minecraft: Education Edition?

Minecraft: Education Edition only users one port, and only for multiplayer connectivity. The app communicates to the multiplayer host through port 19132 UDP/TCP. If users are exclusively connecting in a single network, ports are rarely an issue. However, if users are connecting across multiple networks, you'll need to ensure the host's network has port 19132 UDP/TCP forwarded through their network firewall/router. If users fail to connect to other multiplayer sessions, blocked 19132 port is most common cause. For more information about multiplayer, view this article. 

• Note that this means that users hosting from a home environment may need to forward port 19132 UDP/TCP through their home router. 

How do I install Minecraft: Education Edition?

Visit these Help Center pages for information about installation:

• The Minecraft: Education Edition download page contains links to versions for each supported device
• Deploying and Updating Minecraft: Education Edition describes how to deploy the application manually or using system management software
• Use this link to get the Minecraft: Education Edition installer package

How do I update Minecraft: Education Edition?

• You can set Minecraft: Education Edition to update like any other application you are using in your environment. If no outside settings are put into place they will update as follows:

  • Desktop app (Windows): Will look for updates when a user logs into their computer. Automatic updates can be blocked by performing the following:
    1. Search for "Task Scheduler"
    2. Select "Task Scheduler Library" in the left menu
    3. Right-click "Minecraft Education Edition Automatic Updater" in the list that populates
             4. Select "Disable" from the context menu that appears

• • Store app (Windows): Will give a store notification when the update is available. Automatic updates can be configured in store settings
  • iPad app: Will update with iOS update and you will be notified like other iOS apps
  • Mac app: Will need to manually install from our download page
  • Chromebook app: Will update with the rest of your apps from the Google Play store

Does Minecraft: Education Edition collect or store student data?

Minecraft: Education Edition uses Office 365 services for authentication, and does not collect or store any personal information within the application.  The Office 365 platform is in full compliance with COPPA, CIPA, and FERPA.

Visit the Microsoft Trust Center for more information about privacy and security in Microsoft applications.

Can I deploy using Intune to Macs?

Yes you can. The script is located here.