Restricting Active Directory logons and Azure M365 verification

Question

Is it possible to restrict a user's logon to specific machines in Active Directory without requiring P1 or P2 license for conditional access rules? When I apply logon restrictions, the user is unable to verify their Azure M365 account to sign into Office apps on that computer. This is the error message they receive as shown below:

Answer 1

Hi Gilreath,

Given you're specific requirements it will likely require Conditional Access.

Reference:

https://techcommunity.microsoft.com/t5/security-compliance-and-identity/can-we-restrict-aad-user-logins-to-be-from-specific-devices-for/m-p/1693391