https://www.petervanderwoude.nl/post/prevent-specific-devices-from-accessing-microsoft-intune/