password control for laptops

Question

we have laptops where the users do not bring them in regularly to update with ms updates and av updates. we woild like to set a limit where the password will lock them out if the laptop has not connected to the domain within a given period of time, eg 3 months. is this at all possible and if so how do we go about doing this please.

Answer 1

In the past there was a feature known as Network Access Protection which would prevent devices which has not been updated for some time to access company resources unless they get update. You should take a note that if system is not connected to domain, they might still get the latest update using home internet. This is not a good approach to prevent login because even if they want to fix the issue, they must login. However, if this is a requirement, it is possible to implement it using some PowerShell commands.