Using Windows 10, I have Windows Defender Firewall with Advanced Security configured to block outbound connections. I have my web browser and some other programs working properly to access the internet. Problem is I would like to be able to use "Windows Update" for the recommended security updates from Microsoft, but am not able to get it working unless I provide full access to SVCHOST.EXE. I would prefer to only permit required services for SVCHOST.EXE to allow Windows Update to operate correctly. Is it possible to have Windows Update working without permitting SVCHOST.EXE (and all services) full access to the internet?