Whitelisting adobe servers in classroom lab enviorment during exams

Hello Adobe community, 

I'm a system administrator for my school. We use Adobe CC products to teach our students about adobe products. 

We have installed the shared device licenses in our lab classrooms and they work just fine during normal classes. Students login using there school e-mail and they can start using the adobe products.

Exams are around the corner and we do face an issue. The exams require us to block internet access on the exam accounts . The exam accounts are all based on windows 10 with roaming profiles and windows policies. 

One way to block internet access on our exam accounts is to setup a 'fake' proxy that points to a fake location.

We do this with GPO registry settings 'ProxyEnable' and 'ProxyServer'

This works great. Students can access all local data but can't browse the internet during the exams. 

We can enable an exeption with 'ProxyOverride' setting. This enables us to whitelist some sites/servers.

The problem is that Adobe CC NEEDS internet access to function. I have tried to whitelist these domeins:
*microsoft*; *cloudfront*; *adobe*; *adobesc*; *adobelogin*'; *ftcdn*; *behance*; *adobedtm*; *demdex*; *demandbase*; *adobeoobe*; *macromedia*; *207*; *edgefonts*; *adobejanus*; *adobeccstatic*; *adobess*; *photoshop*; *adobeexchange*; *businesscatalyst*; *worldsecuresystems*; *typekit*; *omtrdc*; *adobetag*; *acrobat*; *creativecloud*; *amazonaws*; *adobecce*; *adobecc*; *digicert*;

I can confirm I can access adobe.com website and all the websites listed. But when I try to start up Adobe CC or any other Adobe program I get 'can't reach adobe servers'.

I'm using these endpoints: 

https://helpx.adobe.com/enterprise/kb/network-endpoints.html

Because we use roaming profiles I can't just turn off the internet mid session. 

Any help would be greatly appreciated!