Is anyone else noticing an upswing in connections to Microsoft? Have a client with a huge VDI presence that is get PAT exhaustions because tons of machines are contacting the Windows Push Notification Services on the Internet.

Could be something like this: https://www.wired.com/story/made-in-china-niche-websites-are-seeing-a-surge-of-mysterious-traffic-from-china/

Possibly. Has anyone actively disabled that Windows Push Notification engine? It looks like it is primarily for 3rd party pushes, but does Office and the like use it for Tile and Toast Notifications?