Hi, I'm new to the AD world, I'll explain the problem we are facing at work rn and I hope someone could give us some kind of info about this.
We have some users that adds their personal pc to our AD with this window (SSO) in teams
we ask our users to click on "no, sign in to this app only", but some go all the way to download authenticator and registering their device to AD, and the list expand day by day (we got more then 6k users). Is there any way to block this page or disable this function only for a group of users via a script or an option in device settings? They are educational accounts, not work accounts they don't need to enter our network, they just have to get the licenses, and in AD they're are seen as "registered" devices not "joined" if this helps. Thanks to whoever can give us some information about this issue 
