MAM policy for BYOD Windows devices without enrollment.

MAM policy for BYOD Windows devices without enrollment.
What is the best resource to configure MAM policy for Information Protection on Windows personal devices (BYOD) without enrollment?

We would like to allow desktop clients on personal Windows 10/11 PCs to access organization data without device enrollment and restrict download & copy/paste using conditional access for sensitive data