Hm, yeah, can't really disconnect it, I'm using it for (local) CI purposes as well. I could disconnect it from the internet though, keep the local connection, but maybe actually explicitly blocking anything windows/microsoft for the period I want it to stay online, might work sufficiently.

Regardless, thanks for the ideas!