In the last few months I saw so many new services being added to Win11, connecting to so many new domains… WindowsSpyBlocker, that a lot of people use with the DNS, is awfully outdated, and unless stuff like Sophia Script, Win-Debloat-Tools, winutil, O&O Shutup were updated recently (like 1 or 2 months tops) it’s also outdated.

Microsoft is also constantly changing how stuff works, intertwining stuff so you can’t fully remove without breaking functionality. You used to get media expansion packs (stuff like av1, avif and webp support) through updates or you could download them from their site or use a Powershell command to install them, now you are forced to do it through the MS Store, and guess what happens if you uninstall the MS Store? (at least, a few months ago when I got a new Win11 install, removing MS Store removed the packages). Probably a lot of Edge removing tools are broken by now too, if you watch your network you gonna see Microsoft Edge WebView 2 calling tons of domains all the time, and if you remove it you kill your internet connection entirely (you can, however, block it on the firewall. It used to be just one service, but with some recent update it’s four different services you have to block now).

What I’d recommend is manually uninstalling all the bloat you can, then running Get-AppxPackage on Powershell to find whatever crap is still lurking and removing it with Get-AppxPackage -Name “PackageName” | Remove-AppxPackage (don’t remove what you are not sure what it is for, search or ask AI when in doubt, and some stuff you won’t be able to remove anyway), then execute msconfig to disable other crap you may also find there (again, be careful with that) and lastly get a program like simplewall or Portmaster to block Windows communication at firewall level (Portmaster has a very friendly UI) - the problem is, each update Microsoft includes new services, and you should let stuff like Wuauserv, Do Svc, Crypt Svc and BITS open because they handle updates, but always check what the domains they are connecting to are for… still, even though they may not be for telemetry, they could totally be sending telemetry data through them, so there is no way to use Windows safely.

simplewall/Portmaster can completely cut the communication of Adobe, Nvidia and whatever other program you use, so you’d technically look like you are offline to them - if you need to use their online features, or they need online authentication to even run (evil as fuck), I don’t think you will be able to escape data collection.