Wouldn't it be nice to only allow access to corporate apps/resources from approved devices, specifically devices that you have added their serial number to an "allow" list? That way, if the device is not on that list, it will be blocked access?

Join me as I show you how to do this using Microsoft Endpoint Manager and Azure Active Directory.

More information on corporate identifiers: https://docs.microsoft.com/en-us/mem/...

00:00:00 Intro
00:00:44 The Solution
00:02:05 Upload Serial Number
00:03:53 Enrollment Restriction
00:04:53 Compliance Policy
00:05:47 Conditional Access Policy
00:07:22 Demo Block Access
00:11:45 Demo Allow Access
00:10:55 Final Thoughts