GPO to Prevent "Phone Home" Windows 10 Apps

Question

I am about to deploy Windows 10 in a disconnected environment (no internet). What's the best way to prevent various apps that will be installed on the Windows 10 Systems from trying to phone home. Eg. Trying to contact websites on the internet. We want to prevent this 'noise' on the network.

Answer 1

Hello @MAS2487 ,

The Windows client operating systems include more features that you and your users can install. These features are called Features on Demand (opens another Microsoft website) and can be installed at any time. On your organization-owned devices, you may want to control access to these other features.

If you want to hide the entire Apps feature in the Settings app, use the User Configuration\Administrative Template\Control Panel\Programs\Hide "Programs and Features" page policy.

To uninstall a feature, open the Settings app. Select the feature, and then select Uninstall.

https://learn.microsoft.com/en-us/windows/application-management/add-apps-and-features

-------------------------------------------------------------------------------------------------------------

Hope this answers all your queries, if not please do repost back.
If an Answer is helpful, please click "Accept Answer" and upvote it : )

Answer 2

You may try to use AppLocker instead and it will prevent application from running, take a look at:
https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/applocker/what-is-applocker
It is easier and recommended approach , so in case you changed your policy, you could just unblock them.
In case you want to remove it, you may use PowerShell script Remove-AppxPackage , take a look at:
https://learn.microsoft.com/en-us/powershell/module/appx/remove-appxpackage