I guess that in some cases you can host the service on the tested company's Intranet, so MS servers wont be able to connect to it (but nor would people in home office without VPN).