What are different ways on restricting only domain joined endpoint can access Office365? Thank you!

[cloudcrazy]

What are different ways on restricting only domain joined endpoint can access O365? 

I have a use case where the customer only wants their domain joined machine and mobile devices to allow to access Office365 resources, either the user is remote or on-site.  

Thank you in advance!

CloudCrazy

[#2 · Accepted solution]

Hi CloudCrazy

You need to check Conditional access for this scenario.

You also need to make sure that the pcs are hybrid joined and Compliant in Intune, so it will identify that the pc is domain joined and accessing from remote location.
Check below, you may need change to ‘Block’ for your scenario!

https://cloudbymoe.com/f/block-downloads-for-sharepoint-files-from-non-compliant-devices