[qplex]

This script is a good start.

I would also change the default policy in Windows Firewall to drop all outgoing traffic, and then enable access on application basis, and for basic things such as DNS and DHCP.

Windows 10 will still spam the DNS server for telemetry hostnames, and there seems to be nothing that you can do about that.

And really, if you can, you should switch to a better OS that doesnt require you to work against it.

[sixothree]

I seem to remember a tool that would allow you to do this but made it easy to enable specific application access. Does anyone remember this tool?

[sjruckle]

Tinywall?

https://tinywall.pados.hu/