I am trying to block all connections to microsoft ip addresses. I only occasionaly boot windows and don’t want it phoning home. I tried disabling the net interfaces in device manager but windows just re-enables them and send god only knows what back to their servers. I don’t like relying on disconnecting the ethernet cable each time I boot windows because I forget to.
Windows 10 Enterprise + https://www.w10privacy.de/english-home/ + https://learn.microsoft.com/en-us/windows/privacy/manage-windows-21h2-endpoints to disable all spyware.
Don’t that there are some services that require a bit of work, for instance Windows gets time from MS servers, you can change that. There are other calls home for things such as updates, SSL certificate revocations and whatnot.
I found this list on their site. I didn’t verify if the ips match though.
Another way to solve this problem might be to block your MAC address at a router level (then unblock while booting).
Another way to solve this problem might be to block your MAC address at a router level (then unblock while booting).
Windows will eventually retry those calls once it has internet.
Thanks for the list. I will try the mac address block on the router idea for windows and set a non default mac address when linux boots.
Another option would be to run windows in a VM
I do that as well. I just use dual boot windows for samsung disk tools and logitech software. Couldn’t get either to work in a vm.
Ok, so i guess you’re dual boot. So in Windows, Device manager, find your network device and disable it there. It shouldnt ever reenable itself on its own.
Microsoft IPs blocklists exist, though I havent used them. I imagine they update frequently. Adguard home or pihole have good uses but itll need an always on device to run it.
A simpler idea which should be a 20 minute turn around to do, amd will cost you nothing would be either:
- Set a static ip on the windows computer, blank out the dns so it cant reach the internet.
- Set the MAC address on the windows ethernet adapter to something custom, or a static ip. Make sure the static IP is out of DHCP scope or at least not the same as your other OS or devices. Then on your router, block internet access to that Device MAC or IP.
Yes, dual boot. It is a Dell Optiplex. Windows re-enables devices disabled in device manager.
