Hi,
Thank you for posting in Microsoft Q&A forum.
If you want to prevent Mac users from accessing restricted applications and sites, you can achieve this by setting up a Conditional Access policy, even if the Mac devices are not Azure AD joined. Please refer to:
Use app-based Conditional Access policies with Intune
Create a device-based Conditional Access policy
Once the policy is created and enabled, Mac users (or the selected users/groups) will be blocked from accessing the restricted applications and sites based on the conditions you've set. When they attempt to access those resources, they will be denied access and receive an appropriate message.
Please note that for Conditional Access policies to work effectively, the targeted applications and resources need to be integrated with Azure AD. Additionally, it's important to thoroughly test the policy and its impact on various user scenarios before applying it broadly.
Thanks for your time. Have a nice day!
Best regards,
Simon
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.