squid to only allow office activation and not windows updates

hi all,

i have added all these lines to my squid config as it wasnt allowing office activation

https://wiki.squid-cache.org/SquidFaq/WindowsUpdate

but now its allowing office activation and now windows updates but i dont want it to do windows updates as this is managed by our WSUS server

what are the corect lines to just do the office activation

as when i comment out all the lines i get this

0 - TCP_DENIED/403 3810 GET http://www.microsoft.com/pkiops/cert...ity%202018.crt

thanks,
rob