Indeed, I have even seen somewhere the list of all domains used for windows updates.
[URL unfurl="true"]https://docs.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services[/URL]
[URL unfurl="true"]https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-configuration-service-provider[/URL]
