>>512258518
If I need Windows, it's Server edition I spin up in a Qube. On my network connected Windows templates, firewall is set to max fascist and ignore local rules in Group Policy and have outbound rules which are all disabled by default in the template Qube (to be enabled on user demand in the application Qube). I don't dare let Windows over the open internet in this setup.