I use a highly stripped-down version of LTSC for Windows VMs and it still has tons of telemetry. Furthermore, DNS-based blocking is ineffective; it hardcodes f

I use a highly stripped-down version of LTSC for Windows VMs and it still has tons of telemetry. Furthermore, DNS-based blocking is ineffective; it hardcodes fallback IP addresses if it gets an NXDOMAIN for telemetry domains. The only way I've found to permanently kill it is with sniproxy or the like, though I'm sure once they upgrade to TLS 1.3 that will stop working too.