I run a clean install of Windows 10 Pro 20H2 19043.844 and if I disable Windows Automatic Root Certificate Update via GPEdit.msc then my internet stops working and all attempts at domain resolution fail. If try to disable Automatic Root Certificate Update by blocking ctldl.windowsupdate.com domain, then certain services stop working, such as Ubisoft Connect. I have Windows Update and Windows Update services + tasks disabled. There is no problem with blocking/stopping certificate revocation (crl.windowsupdate.com domain).

I do tweak my OS, but I apply identical tweaks to all builds and 20H2 is the only build that has this issue. Installing the allowed list from https://ctldl.windowsupdate.com/msdo...uthrootstl.cab and the disallowed list does not resolve the issue...