Restrict some devices

Hi Buddy

Unfortunately, these devices are not yet enrolled in Defender for Endpoint, I am and have been pressing for this for a while now.

Could you elaborate on "Alternatively, if you have list of devices already identified, then you can block access to them using conditional access device filters. "

I'm struggling to get my head around the Include filtered devices in the policy  / Exclude filtered devices from the policy.

Let say we do

CA Policy - Filtered Devices

All users

All resources

Access = BLOCK

Include filtered devices in the policy

Property Operator Value

DeviceID Equals Device ID from Intune

Does that policy work out as any user accessing any cloud resource on a deviceID is blocked?

SK