Can I allow only domain joined PCs to access Azure Portal ?

Hi Basem,

To restrict Azure Portal access to only domain-joined PCs, you can set up device-based Conditional Access policies using Microsoft Intune and Microsoft Entra Conditional Access. These policies evaluate the compliance status of managed devices and enforce security and compliance standards by allowing access only to compliant devices.

1. Set Up Intune Device Compliance Policies: Before setting up Conditional Access, you need to configure Intune device compliance policies to ensure devices meet specific requirements​​.
2. Create a Conditional Access Policy in Intune:
   • Sign in to the Microsoft Intune admin center.
     • Navigate to Endpoint security > Conditional access > Create new policy​​.
3. Configure Conditions and Access Controls:
   • Set conditions for the policy, including device platforms and client apps.
     • Under Access controls, configure the policy to 'Require device to be marked as compliant'. This is important to ensure that the policy uses device compliance status. You can also configure other requirements such as multi-factor authentication or requiring a Microsoft Entra hybrid joined device​​.

Please check the following MS. Documentation : https://learn.microsoft.com/en-us/mem/intune/protect/create-conditional-access-intune

Hope that helps!