problems with conditional access for unmanaged devices

[Jeffrey_Tucker]

hello all. i have taken over a situation where the client wants to prevent access to office 365 resources with unmanaged devices such as non-domain joined windows computers and mobile devices. i inherited a configuration that was supposedly working. however something about the configuration is not prevent my test computer from accessing the resources. i feel there is a step missing. i realize this is a broad question though i was hoping that someone has a good guide from start to finish so i can check my settings. thanks in advance.

[#2]

@Jeffrey_Tucker  How about conditional access based on DNS configuration of your AD Forest Domain. That should certainly fix it. But, is your Test machine part of the Internal Network or domain joined ?

[#3]

Would recommend Device based conditional access with Intune

The following article explains it then there should be plenty of guides around for it

https://docs.microsoft.com/en-us/intune/conditional-access-intune-common-ways-use

Hope that helps

Best, Chris

[#4]

@Jeffrey_Tucker 

Use Conditional Access - Device based as suggested earlier.. for more details refer below article..

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/conditions

Thanks

Robin Nishad

Consultant