If a user executes the Reset this PC command (Settings -> Update & Security -> Recovery) with the Keep my files option (or the Remove Everything option) the Windows Restricted Traffic Limited Functionality Baseline settings will need to be re-applied in order to re-restrict the device. Egress traffic may occur prior to the re-application of the Restricted Traffic Limited Functionality Baseline settings. To restrict a device effectively (first time or subsequently), it is recommended to apply the Restricted Traffic Limited Functionality Baseline settings package in offline mode. During update or upgrade of Windows, egress traffic may occur.
This guide just helped me realize why I don’t use windows. The fact that you need to remove and not add is why I like Linux.