@James Chan_110 Thanks for posting in our Q&A.
For this issue, we can create a conditional access policy and configure filter for devices under conditions in this policy.
And select "Require device to be marked as compliant" under Grant access.
Hope it is helpful.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.