We are using Office 365 Business Premium and Office365 Business Essentials which is connected to to our local domain controllers using AD Connect.
At the moment users can logon to any computer and access OneDrive / SharePoint however we would like to restrict this so access is only from Company approved computers and/or IP addresses.
Anyone know if this is possible? Is so would we be licensed for this?
There is an option to restrict signins by IP Address:
But that can be quite restrictive.
You may also want to consider using Azure AD Conditional Access to enforce MFA for unmanaged devices.