https://www.petervanderwoude.nl/post/conditional-access-for-pcs-managed-by-configmgr/