How can I block internet access to Spotify's Windows 10 app (on the Windows Store)?

Question

I want to block Spotify from having internet access. It is the app for Windows 10 downloaded from the Windows Store. The reason for blocking internet access is so that I can listen to music offline on my computer, while my dad listens to music on the Google Home from the same account.

I guess the answer to this question could be general to any Windows Store app. I just don't know where the program is to block it from the Windows Firewall.

There is a similar question on this site here but it is outdated because that is for Windows 7/8.

I know how to specify a rule in Windows Firewall to disable internet access, but was wondering how to do that for a Windows Store app? Specifically, for Spotify. Or if there is any other way, that would be an acceptable response as well.

Solution 1

1. Open the “Control Panel“
2. Select “System and Security“
3. In the Windows Firewall section, select “Allow a program through Windows Firewall“.
4. Unchecking the box to the left of the application name disallows it from accessing network resources, while checking it allows access.
5. If the program you wish to block or unblock is not listed, you can click the “Allow another program…” button to add it. Choose the application in the list and select “Add“. If the program is not in this list, use the “Browse…” button to select the program file manually.

---

Since you said it didn't work here is another option

1. Open Windows Defender Firewall
2. Goto "Advanced Settings"
3. On the left side, click the “Outbound Rules” link
4. In the far right pane, click “New Rule” to create a new rule for outbound traffic.
5. In the wizard that pops up, make sure "program" is selected and then click "next"
6. Select the “This program path” option, and then type (or browse for) the path to the program you want to block.

Important Note before clicking continue! (Source: howtogeek)

When you use the “Browse” command to select an EXE file, Windows defaults to using what are known as environmental variables if the particular path includes a given path portion represented by one of those variables. For example, instead of inserting C:\Users\Steve\, it will swap that portion for the environmental variable %USERPROFILE% .

For some reason, despite the fact that this is the default way it populated the program path field, it will break the firewall rule. If the file you have browsed to is anywhere that uses an environmental variable (like the /User/ path or the /Program Files/ path), you have to manually edit the program path entry to remove the variable and replace it with the correct and full file path. In case that’s a tad confusing let us illustrate with our example program from above.

When we browsed to the EXE file for our Maxthon web browser, Windows plugged in the following program path information for the file, which was located in our Documents folder:

%USERPROFILE%\Documents\MaxthonPortable\App\Maxthon\Bin\Maxthon.exe That file path is understood by Windows, but for some reason is no longer recognized when inserted into a firewall rule. Instead, we need to replace the file path that includes the environmental variable with the full file path. In our case it looks like this:

C:\Users\Jason\Documents\MaxthonPortable\App\Maxthon\Bin\Maxthon.exe It’s possible this is some quirk isolated to the current version of the Windows 10 firewall, and that you can use environmental variables in other versions, but we’d encourage you to just remove the variable and use the full and absolute file path to save yourself a headache today and down the road.

Finally, there’s one small but important thing to keep in mind here. For most applications, the main EXE file is the one you want to block, but there are examples of applications where things are a bit counter-intuitive. Take Minecraft, for example. At first glance it seems like you should block Minecraft.exe , but Minecraft.exe is actually just the launcher file and the actual network connectivity happens through Java. So, if you want to restrict your child from connecting to online Minecraft servers you need to block Javaw.exe and not Minecraft.exe . That’s atypical, though, as most applications can be blocked through the main executable.

At any rate, once you’ve selected your application and confirmed the path, you can finally click that “Next” button. On the “Action” screen of the wizard, select the “Block the connection” option, and then click “Next.”

6. On the “Profile” screen, you’re asked to select when the rule applies. Here, you have three options:

Domain: The rule applies when a computer is connected to a domain.

Private: The rule applies when a computer is connected to a private network, such as your home or small business network.

Public: The rule applies when a computer is connected to a public network, such as at a coffee shop or hotel.

If you have a laptop that you use at home (a network you’ve defined as private) and at a coffee shop (a network you’ve defined as public) and you want the rule to apply to both places, you need to check both options. If you want the rule only to apply when you’re at the public Wi-Fi spot at the coffee shop, then just check Public. When in doubt, just check them all to block the application across all networks. When you’ve made your selection click “Next”.

7. The final step is to name your rule. Give it a clear name you’ll recognize later on, then click finish.

All outbound communication from the application in question is now cut off. If you want to further tighten the grip you have on the application you can select the “Inbound Rules” option in right hand navigation panel of the “Windows Firewall with Advanced Security” and repeat the process, step for step, recreating an identical firewall rule that governs inbound traffic for that application too.

Solution 2

you can use this method to block any app thus it would still be useful for everyone .(I know I am late )

1. open windows explorer (open any folder)
2. type in the address bar C:\Program Files\WindowsApps.
3. Follow this article https://www.intowindows.com/how-to-access-windowsapps-folder-in-windows-10/ . To access the folder if you can't.
4. Now find the folder for Spotify or whatever app you are trying to block . Only one folder it is .Name of the folder will give the hint and try opening to find Spotify logo or whichever application logo you want to turn off. Remember the folder name.
5. Download the firewall app blocker.it is a small file and can be run directly from within the zip without needing to install. https://www.sordum.org/8125/firewall-app-blocker-fab-v1-7/

The purpose of this app is to block all .exe files within a specific folder from inbound and outbound internet access from windows firewall. You can verify the new rules added by opening Windows Firewall .(do not try to edit files in the windows app folder and put a bat script to block internet access as this folder is very secured by all means by windows and thus you cannot edit it easily).

6. Now open firewall app blocker and click file on top left then select add folder content. Photo and reference can be found at https://security.stackexchange.com/a/168034

7. find just the folder you needed and under C: > program files > WindowsApps > [app's folder identified earlier] And press OK

8. At bottom left you will find you have done it for the outbound only. Repeat the same for inbound tab.

It worked well for me in attempts to turn off internet access for W.P.S office. I assume step 1 to step 4 may be unnecessary so one may try to avoid if it works well for you.

Comments

[Michael Yaworski]

"Spotify Music" is in the list, but even when unchecked, the app still has internet access

[Stephen Jurist]

I updated my answer and added another process to follow! Hope it works!

[Michael Yaworski]

Your updated solution is what I would normally do, but the problem is that for step 6, I can't find Spotify (or any Windows Store app) as a program

[Stephen Jurist]

When you search for spotify in the bottom left (Where is says "type here to search") right click spotify and click open file location. If it is another shortcut, right click it and open file location again

[Stephen Jurist]

Another place it might be is the StartMenu - C:\Users\USERNAME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs

[Michael Yaworski]

Right clicking on Spotify does not have an option to "open file location". That's because it's a Windows Store app. I'm not really sure how the apps work, but it's ridiculously hidden and protected. Also, it is not in the Start Menu programs.

[DavidPostill]

Open a cmd shell and type where spotify?

[Michael Yaworski]

@DavidPostill Thanks. Unfortunately, even with the result from where spotify as the program for the rule, it still gets internet access. The result is C:\Users\Michael Yaworski\AppData\Local\Microsoft\WindowsApps\Spotify.exe. Could the reason be that my name has a space in it?

[Anaksunaman]

As a serious suggestion, ditch the app version and simply install the normal desktop version. Windows 10 does a lot of things differently with "apps" (UWP) programs versus traditional Win32 (or whatever) programs.