>MS Support consistently and repeatedly told me that enterprise allowed me to disable this stuff. If I can't control the egress then I can't verify PCI compliance.

Not that this is necessarily the best solution, but these sound like damages to me.

Perhaps a class-action suit may come of this?