Device Posture Check and Block
Jonathan Bullock
This should be part of your internal process to revoke session tokens and stolen devices from connecting through Entra and leveraging Entra Conditional access. Also if a device is registered and joined to an azure domain it can be remotely wiped to clear data. Also I think device compliance falls out of scope of what DNS Filter should be doing.