Endpoint | Account Protection
So I only wanted to apply this to one of my lab systems so I created a dynamic Security Group. I set the criteria to match the ObjectID of my Media-Server. I then validated membership by renewing the group in Azure AD.
I selected Create Policy and Followed the Wizard
I added the group I created at the top of this page so I would only have my Media Server get these new settings.