Need to restrict a user's access to a specific device category

Hi MPomeroy

yes you can:

1- Navigate to Entra ID -> Security | Security Center.

2- Named locations in the right-hand panel.

3- Click on the IP Range Location at the top.

4- Enter the device's IP adress in (for the user that you need to restrict access).

5- Then navigate to Condetional access and click on Creat New Policy.

6- Give the policy a name.

7- Under assignments, slecet the user from whom you want to restrict device login.

8- In cloud apps, choose all apps. 

9- Under Conditions, click on the Locations, select All Locations, and under the Exclude option, choose the named location you just created.

10- Finally, leave everything else as is and click on Grant -> under Grant select Block access.

Important: If you have a lab environment  you can tested first before applying it in production.  

Feel free to reach out if you have any additional questions.