ztd.dds.microsoft.com is required for AutoPilot device enrollment

[rsgabriel]

Behaviour

Microsoft AutoPilot device enrollment reports the following error:

Confirm you are using the correct sign-in information and that your organization users this feature. You can try to do this again or contact your system administrator with the error code 801c03ed

Additional problem information:

Server message: Administrator policy does not allow user ... to device join

Steps to reproduce this issue

1.block dns resolution for domain : ztd.dds.microsoft.com
2.Attempt to use autopilot

Expected behaviour

Autopilot should work

It is required per this documentation:
https://learn.microsoft.com/en-us/autopilot/requirements?tabs=networking#networking-requirements

Actual behaviour

Autopilot does not work

Rules used

0.0.0.0 ztd.dds.microsoft.com