Adguard/pihole style blocklist to block microsoft web sites

I am trying to block all connections to microsoft ip addresses. I only occasionaly boot windows and don’t want it phoning home. I tried disabling the net interfaces in device manager but windows just re-enables them and send god only knows what back to their servers. I don’t like relying on disconnecting the ethernet cable each time I boot windows because I forget to.