Windows 10: Windows 10 Firewall rules for Store and Updates

Hello!

I still can't setup Windows 10 Firewall to block all except MS Store and Windows Updates! Those 2 functions works if: allow all outbound; allow all outbound for svchost.exe; allow svchost.exe all outbound to all WindowsUpdates websites. But it still too much because through svchost.exe too many services can freely access to internet, it's not right. I try to set Firewall to "block all in&out" and use default Win10 firewall allow rules + add individual outbound allow rules for services: DoSvc, BITS, InstallService (for MS Store), Wuauserv, WpnService, LicenseManager, SystemSettingsBroker, SystemSettingsAdminFlows... but app install from MS Store and WinUpdates does not work!

Who know what also services/rules must be added to firewall for Store and Updates???

:)

 

Stop Windows 10 Update Assistant from running

This has to be disabled in task scheduler and I go a step further and block it with the firewall also. Here is the script that I used in my environment:

********************************************

@echo off

REM Stop Update Assistant if running

taskkill -f -im UpdateAssistant.exe

taskkill -f -im UpdateAssistantCheck.exe

taskkill -f -im Windows10Upgrade.exe

taskkill -f -im Windows10UpgraderApp.exe

REM Block Update Assistant with Windows Firewall

netsh advfirewall firewall delete rule name="Windows 10 Update Assistant" dir=in

netsh advfirewall firewall delete rule name="Windows 10 Update Assistant" dir=out

netsh advfirewall firewall add rule name="Windows 10 Update Assistant" dir=in action=block program="C:\Windows\UpdateAssistant\UpdateAssistant.exe" enable=yes

netsh advfirewall firewall add rule name="Windows 10 Update Assistant" dir=out action=block program="C:\Windows\UpdateAssistant\UpdateAssistant.exe" enable=yes

netsh advfirewall firewall add rule name="Windows 10 Update Assistant" dir=in action=block program="C:\Windows\UpdateAssistant\UpdateAssistantCheck.exe" enable=yes

netsh advfirewall firewall add rule name="Windows 10 Update Assistant" dir=out action=block program="C:\Windows\UpdateAssistant\UpdateAssistantCheck.exe" enable=yes

netsh advfirewall firewall add rule name="Windows 10 Update Assistant" dir=in action=block program="C:\Windows\UpdateAssistant\Windows10Upgrade.exe" enable=yes

netsh advfirewall firewall add rule name="Windows 10 Update Assistant" dir=out action=block program="C:\Windows\UpdateAssistant\Windows10Upgrade.exe" enable=yes

netsh advfirewall firewall add rule name="Windows 10 Update Assistant" dir=in action=block program="C:\Windows\UpdateAssistantV2\Windows10Upgrade.exe" enable=yes

netsh advfirewall firewall add rule name="Windows 10 Update Assistant" dir=out action=block program="C:\Windows\UpdateAssistantV2\Windows10Upgrade.exe" enable=yes

netsh advfirewall firewall add rule name="Windows 10 Update Assistant" dir=in action=block program="C:\Windows10Upgrade\Windows10UpgraderApp.exe" enable=yes

netsh advfirewall firewall add rule name="Windows 10 Update Assistant" dir=out action=block program="C:\Windows10Upgrade\Windows10UpgraderApp.exe" enable=yes

REM Disable Update Assistant Scheduled Tasks

c:\windows\system32\schtasks.exe /change /tn "Microsoft\Windows\UpdateOrchestrator\UpdateAssistant" /DISABLE

c:\windows\system32\schtasks.exe /change /tn "Microsoft\Windows\UpdateOrchestrator\UpdateAssistantAllUsersRun" /DISABLE

c:\windows\system32\schtasks.exe /change /tn "Microsoft\Windows\UpdateOrchestrator\UpdateAssistantCalendarRun" /DISABLE

c:\windows\system32\schtasks.exe /change /tn "Microsoft\Windows\UpdateOrchestrator\UpdateAssistantWakeupRun" /DISABLE

REM Remove Upgrader Application

IF EXIST "C:\Windows10Upgrade\Windows10UpgraderApp.exe" (

"C:\Windows10Upgrade\Windows10UpgraderApp.exe" /ForceUninstall

timeout /t 30

)

exit

 

Store Windows 10. Error code 0x80240438

Today i had this error too. I temporary disabled Windows firewall. That did the trick! Store was working again. After enabling firewall again it wasn't. I found out I had certain rules added to Windows firewall for outgoing connections blocking the connection
for the Store. I didn't know which one so I deleted all of the blocking rules (red ones). After deleting these rules, Store is working perfectly