Best way to thoroughly block all telemetry on Windows is actually the built in firewall. Just block all outgoing connections and only enable them for your brows

Best way to thoroughly block all telemetry on Windows is actually the built in firewall. Just block all outgoing connections and only enable them for your browser and whatever else you need. According to a tcpdump running on the host of a Windows VM this blocks absolutely everything, even connections originating from kernel drivers. I tested this with LTSC though, so YMMV.