Let's assume I'm connecting to a network, and I need absolutely no data sent to any Microsoft servers at any time. Is there a way to do that? For the sake of argument, assume I'm running Enterprise.

  • 1
    Do you still want to be able to run (automatic?) updates? – tim Apr 7 '17 at 22:15
  • I'll just use WSUS Offline, or Windows Update Minitool. – user144227 Apr 8 '17 at 1:00
  • Get Spybot Anti-Beacon for telemetry without preventing updates. Also, nearly every single program you run tries to phone home to choice.microsoft.com – Mark Buffalo May 13 '17 at 3:14

Set up a proxy/firewall between you and the outside world. Add a white list of good servers to the proxy. This is very restrictive but the only way to guarantee it (except have no network). A black list could work, but there are always ways around.

  • @r3muxd I know. I am just expressing that the only way to block it is not subtle. You have no idea what is in the software, so you have to sandbox it. This means isolating it from everything that you do not fully trust. – ctrl-alt-delor Jun 23 '17 at 18:22
  • WindowsSpyBlocker can be used for this purpose. It has a great set of rules (spy, update and extra) in many format (OpenWRT, DNSCrypt, P2P, Proxifier...) and is updated frequently. – CrazyMax Jul 2 '17 at 16:08
  • Any software running on the untrusted platform, can at best block known telemetry. Even a firewall could be circumvented, if you allow arbitrary web access (by tunnelling data through cooperating web servers). – ctrl-alt-delor Jul 2 '17 at 16:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy