Somewhat surprising that microsoft doesn't implement forced whitelists on their native firewall. Might be smarter to add domains/IPs at the router/pi-hole level to be safe. In any case, thanks for the list! Saved.