Prevant Offboard Devices get ip from DHCP Server

Question

Hi,

There is a way to prevent offboard device or non-compliance device to get ip from dhcp server?

Even add the mac address to deny list when there is a non-compilance device (on the computer is not installed microsoft defender for endpoint)

I would love a solution!

Rodriguez_591

Answer 1

@Rodriguez_591, Thanks for posting in Q&A. Based on my researching, it seems the setting "Block unicast responses to multicast broadcasts" of Firewall under Endpoint security or Endpoint Protection in Intune can block getting IP from DHCP. You can choose one device to test to try this.

https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-protection-windows-10

https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security-firewall-profile-settings

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi,

Thanks for response.

it's possible to do this as an automatically action for non-compliance/offboard devices?

in Microsoft Intune or Microsoft Defender for Endpoint? when if the Microsoft Defender for Endpoint is not installed in endpoint then there is automatic execution.

I very, very much hope that there is a solution for this.

Rodriguez_591