How to restrict user access to a specific device

Question

Is there a way to allow a specific user just to login on a given device ?

Any other login tries should be blocked.

Answer 1

@Joel - Feluba

Thank you for posting this in Microsoft Q&A.

As I understand you want to limit user to login to only one device and not any other device.

This is possible if this user is using Azure AD credentials to login to the device.

This can be achieved via conditional access policy in Entra ID.

• You can access Entra ID portal and click on Protection >>Security Center.
• Now click on Named locations on right pane.
• Click on IP ranges location on the top.
• Mention device IP address in the form of example 192.168.1.1/32. Make sure you add the device IP address and at the end add /32.
• Now save it and come back to previous screen.
• Click on Conditional access and click on Create new policy on the top.
• Enter some name to your new policy.
• Under assignments, select the user for whom you want to restrict device login.
• Post that in Cloud Apps, select all apps.
• Under conditions click on Locations and select all locations and under exclude option select the named location that you had created.
• Now leave everything else and click on Grant on the bottom.
• Under Grant you can click on block and save the policy.

With this policy mentioned user cannot login and access anything other that the device IP address that you have mentioned.

Note: Try this is your lab first and then implement the same in your production environment.

Let me know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.