In my cases I wanted to filter outbould traffic from my servers. especially http traffic. But they do need access to the microsoft server. Below is the IP spans i have found being used by Microsoft.com and windowsupdate.com
207.46.0.0/16
213.0.0.0/8
65.52.0.0/14
94.245.64.0/18
