Put it behind a PiHole that drops all traffic to Microsoft servers?