@nixCraft One option would be to block all traffic from/to Microsoft
https://ipinfo.io/AS8075
But it obviously gets more difficult if MS outsources their business, and different servers come into play...