AFAIK setting Windows firewall to deny all outgoing and then manually whitelisting apps you use cuts all(&#x27;) logging. Microsoft would be crazy to punch backdoor holes in its own firewall, it would probably kill enterprise market.<p>&#x27; maybe almost all, you need DNS. I dont know any way of letting applications use DNS selectively, its all or nothing :(. This forces you to let svchost.exe talk outgoing 53 udp.