Restrict Internet Access to Apps in Windows 11 [Easy Steps]

There are many situations where you may want to prevent a specific application from accessing the internet on your Windows 11 PC. For example, you might want to stop a game from downloading updates, prevent software from sending data online, reduce bandwidth usage, or block an app that constantly displays advertisements.

Using Windows Defender Firewall, you can control how apps communicate with the internet by creating a firewall rule. You can block incoming and outgoing network connections for a specific program without uninstalling it.

In this guide, I have mentioned the easiest way to restrict internet access to apps in Windows 11.

Let’s learn it in detail!

Restrict Internet Access to Apps in Windows 11 [Easy Steps]

To restrict internet access to an app in Windows 11, open Windows Defender Firewall with Advanced Security, create a new Outbound Rule, choose Program, select the application’s executable (.exe) file, choose Block the Connection, apply the rule to all network profiles, and save it. The selected app will no longer be able to access the internet on your computer.

Step 1: Open Windows Defender Firewall with Advanced Security

The first step is opening the advanced firewall management console, where all network rules are created and managed.

Click the Start Menu and type Windows Defender Firewall with Advanced Security into the search box.

When the matching result appears, click it to open the tool.

You can also press Windows + R, type wf.msc, and press Enter. This command opens the same firewall management window directly.

Once opened, you will see a dashboard containing several options on the left side. These include Inbound Rules, Outbound Rules, Connection Security Rules, and Monitoring.

Since we want to prevent an application from accessing the internet, we will mainly work with Outbound Rules because internet traffic usually leaves your computer before reaching online servers.

Take a moment to familiarize yourself with the interface. Although it may look complicated initially, you only need a few options to complete this task.

Step 2: Open the Outbound Rules Section

Now that the Firewall management console is open, the next step is locating the section responsible for controlling outgoing internet connections.

On the left panel, click Outbound Rules.

After selecting it, Windows will display a large list of existing rules in the center pane. These rules determine which applications and services can send data outside your computer.

Do not worry if you see hundreds of entries. Windows automatically creates many firewall rules for built-in applications and services.

The important thing is that any new rule you create here can override existing permissions for a specific application.

Since we want to block internet access for one program, we will create a brand-new outbound rule dedicated to that application.

Step 3: Create a New Outbound Rule

After opening the Outbound Rules section, look toward the right side of the window.

Under the Actions panel, click New Rule. This launches the New Outbound Rule Wizard, which guides you through the process step by step.

The wizard presents several rule types:

• Program
• Port
• Predefined
• Custom

Select Program and click Next. 

Choosing Program tells Windows that you want the rule to apply to a specific application rather than a network port or system service.

For most users, this is the easiest and most effective option because it targets only the software you want to block.

Step 4: Select the Application You Want to Block

This step is where you tell Windows exactly which program should lose internet access.

Inside the wizard, select This Program Path. Click the Browse button. Navigate to the installation folder of the application you want to restrict.

Most programs are typically located in one of these folders:

• C:\Program Files
• C:\Program Files (x86)

Find the application’s .exe file and select it.

For example, if you want to block a specific browser, game, or utility, locate its executable file and click Open.

After selecting the file, its path will appear in the Program Path box.

Double-check that you selected the correct executable because the firewall rule will only affect that specific file.

Click Next to continue.

Step 5: Choose Block the Connection

The next screen asks what action Windows should take when the selected program attempts to access the network.

You will see three options:

• Allow the Connection
• Allow the Connection if it is Secure
• Block the Connection

Choose Block the Connection.

This setting instructs Windows to deny all outbound network traffic generated by the selected application.

Whenever the program tries to communicate with a server, download content, upload information, or check for updates, Windows Firewall will stop the connection.

After selecting the option, click Next.

This is the most important step because it determines the actual behavior of the restriction.

Step 6: Apply the Rule to All Network Profiles

Windows uses different network profiles depending on where your computer is connected.

The wizard displays three profile options:

• Domain
• Private
• Public

For complete internet blocking, keep all three options checked.

This ensures the rule remains active regardless of whether you are connected to:

• A home Wi-Fi network
• A workplace network
• A public hotspot

Leaving all profiles enabled prevents accidental internet access when switching between different network environments.

Click Next after confirming the selections.

Step 7: Name and Save the Firewall Rule

The final screen lets you name the rule. Enter a descriptive name such as:

• Block Chrome Internet Access
• Block Game Updates
• Restrict App Internet Connection

You may also add an optional description explaining why the rule was created. Using clear names makes it easier to identify and manage rules later. Once finished, click Finish.

Windows immediately saves and activates the rule.

The application should now be blocked from accessing the internet.

You do not usually need to restart your computer, although restarting the application may help ensure the changes take effect immediately.

Step 8: Test Whether the App Has Been Blocked

After creating the firewall rule, it is a good idea to verify that everything is working correctly.

Launch the application you blocked. Try performing an action that requires internet access.

For example, you can:

• Open a website in a browser.
• Check for updates.
• Connect to an online service.
• Sync cloud data.
• Join an online game session.

If the rule was configured correctly, the application should fail to establish an internet connection.

Some apps may display an error message, while others may simply show a connection timeout.

This confirms that Windows Firewall is successfully blocking network traffic.

Step 9: Remove the Rule If You Want to Restore Internet Access

If you later decide to allow the application online again, you can easily remove the restriction.

• Open Windows Defender Firewall with Advanced Security.
• Select Outbound Rules.
• Locate the rule you created earlier.
• Click the rule once to highlight it.
• In the right-side Actions panel, select Delete.

Alternatively, you can choose Disable Rule if you only want to temporarily turn it off without deleting it permanently.

Once the rule is removed or disabled, the application can access the internet again.

Block Both Incoming and Outgoing Connections

Some applications use advanced networking techniques that may require additional restrictions.

In such cases, you can create an identical rule under Inbound Rules as well.

The process is nearly identical:

• Open Inbound Rules.
• Create a New Rule.
• Choose Program.
• Select the executable file.
• Choose Block the Connection.
• Apply all profiles.
• Save the rule.

Blocking both incoming and outgoing traffic provides maximum network restriction for the application.

When Should You Restrict Internet Access to Apps?

Many users block internet access for practical reasons.

One common reason is preventing automatic updates that consume bandwidth and change application behavior unexpectedly.

Another reason is improving privacy. Some users prefer stopping software from communicating with external servers when online features are unnecessary.

Gamers often block internet access to prevent game launchers from downloading large updates.

Parents may also restrict internet access to certain applications as part of broader parental control strategies.

In business environments, administrators frequently use firewall rules to control software communication and reduce security risks.

Regardless of the reason, Windows Firewall offers a reliable built-in solution.

How Restricting Internet Access Works in Windows 11

Windows 11 uses Windows Defender Firewall to monitor network traffic entering and leaving your computer. By default, most apps are allowed to communicate online. However, you can create custom firewall rules that override these permissions.

When you create a Block Rule, Windows prevents the selected application from sending or receiving data over the Internet. The app itself remains installed and functional, but online features may stop working depending on the software.

For example:

• A web browser may no longer load websites.
• A game may lose multiplayer functionality.
• An update utility may stop downloading updates.
• A cloud application may stop syncing files.

This method is safe because you can remove the rule at any time if you want to restore internet access.

FAQs

Can I block internet access for a single app in Windows 11?

Yes. Windows Defender Firewall allows you to create a custom rule that blocks internet access for a specific application without affecting other programs.

Will blocking internet access uninstall the app?

No. The application remains installed and fully available on your computer. Only its ability to communicate online is restricted.

Can I restore internet access later?

Yes. You can delete or disable the firewall rule at any time to restore normal internet connectivity for the application.

Do I need third-party software to block apps from the internet?

No. Windows 11 includes Windows Defender Firewall, which provides all the tools needed to restrict internet access for individual applications.

Why is my app still accessing the internet after creating a rule?

This may happen if the wrong executable file was selected or if the application uses multiple executable files. Verify that the correct .exe file was chosen and consider creating additional rules if necessary.

Is Windows Defender Firewall safe to use?

Yes. Windows Defender Firewall is a built-in Windows security feature designed to help protect your computer and manage network traffic safely.

Can I block Microsoft Store apps?

Yes, although the process can be more complicated because Microsoft Store applications often use different file structures and permissions than traditional desktop programs.