3

Let's assume I'm connecting to a network, and I need absolutely no data sent to any Microsoft servers at any time. Is there a way to do that? For the sake of argument, assume I'm running Enterprise.

3
  • 1
    Do you still want to be able to run (automatic?) updates?
    – tim
    Apr 7, 2017 at 22:15
  • I'll just use WSUS Offline, or Windows Update Minitool.
    – user144227
    Apr 8, 2017 at 1:00
  • Get Spybot Anti-Beacon for telemetry without preventing updates. Also, nearly every single program you run tries to phone home to choice.microsoft.com May 13, 2017 at 3:14

1 Answer 1

1

Set up a proxy/firewall between you and the outside world. Add a white list of good servers to the proxy. This is very restrictive but the only way to guarantee it (except have no network). A black list could work, but there are always ways around.

3
  • @r3muxd I know. I am just expressing that the only way to block it is not subtle. You have no idea what is in the software, so you have to sandbox it. This means isolating it from everything that you do not fully trust. Jun 23, 2017 at 18:22
  • WindowsSpyBlocker can be used for this purpose. It has a great set of rules (spy, update and extra) in many format (OpenWRT, DNSCrypt, P2P, Proxifier...) and is updated frequently.
    – CrazyMax
    Jul 2, 2017 at 16:08
  • Any software running on the untrusted platform, can at best block known telemetry. Even a firewall could be circumvented, if you allow arbitrary web access (by tunnelling data through cooperating web servers). Jul 2, 2017 at 16:40

You must log in to answer this question.