Hello there,  so the situation we have is we want to lock down accessing any of our o365 apps from only approved devices.  I assume the only/best way to do this is via Intune.  What we want to do is have it setup where users can enroll devices or do auto enrollment as long as we can approve devices coming in.  We had a breach where someone was able to login to a users account that had MFA enabled still so the thought here is we would only allow access on devices we have approved.  Microsoft KB articles on enrollment seem a little dry on examples and instructions.  Does anyone have any good info on how to set something like that up if possible?   

​Hello there,  so the situation we have is we want to lock down accessing any of our o365 apps from only approved devices.  I assume the only/best way to do this is via Intune.  What we want to do is have it setup where users can enroll devices or do auto enrollment as long as we can approve devices coming in.  We had a breach where someone was able to login to a users account that had MFA enabled still so the thought here is we would only allow access on devices we have approved.  Microsoft KB articles on enrollment seem a little dry on examples and instructions.  Does anyone have any good info on how to set something like that up if possible?     Read More

​