Is there a way we can only have access to our AD joined devices and rest all blocked

Yash Maheshwari 0

so basically my manager wants that anyone using their device should be unable to joining or access any products like outlook as well without out permission

he does not wants to do it via intune is there any other method

hanks

Rahul Jindal [MVP] 10,116 Reputation points MVP

2024-03-26T19:00:48.6333333+00:00

Are the users synced with Entra ID, setup for Entra MFA & licensed? If yes, then you can leverage CA controls to restrict access to users satisfying MFA at the very least. Also, if you can Entra hybrid join the devices, then you can restrict access to Entra hybrid only using CA grant controls.
Yash Maheshwari 0 Reputation points

2024-03-26T19:07:01.0166667+00:00
Hello We do have azure P1 licence

i am really confused on ho to proceed or what to do

we dont want to manage devices via intune but need a work around where only the devices that we approve or setup should join in entra and in AD and they both should sync how can i do that

as of right now we have on prem AD where we use a AD connector in between which synch from AD to azure but not the other way dont know if that makes a difference

also when i run the command dsregcmd /status

AzureAdJoined : NO EnterpriseJoined : NO DomainJoined : YES

NgcSet : NO

WorkplaceJoined : YES WorkAccountCount : 1 WamDefaultSet : NO

4 answers

Zahra Ahmadi Firouz Jaee 615 Reputation points

2024-03-26T18:57:05.48+00:00

Hello,

Thanks for posting your question in the Microsoft Q&A forum.

Actually, there are several approaches you can take, I think one can help you is using "Group Policy" , with Utilize Group Policy Objects you can enforce restrictions that are not joined to your AD domain.

configure GPODs for blocking access to application or services based on the device's domain membership status.

I hope it can be helpful,

Best

Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful

Zahra
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Yash Maheshwari 0 Reputation points

2024-03-26T19:00:55.02+00:00

When we check in Microsoft entra we have a lot of devices that are not in AD but show entra joined how does that work
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Yash Maheshwari 0 Reputation points

2024-03-26T19:02:52.7466667+00:00
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Yash Maheshwari 0 Reputation points

2024-03-26T19:08:44.12+00:00

check this for reference
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Is there a way we can only have access to our AD joined devices and rest all blocked

4 answers

Your answer