Endpoint | Account Protection

So I only wanted to apply this to one of my lab systems so I created a dynamic Security Group. I set the criteria to match the ObjectID of my Media-Server. I then validated membership by renewing the group in Azure AD.

AP4.PNG
AP5.PNG

I selected Create Policy and Followed the Wizard

AP1.PNG
AP2.PNG
AP3.PNG

I added the group I created at the top of this page so I would only have my Media Server get these new settings. 

AP7.PNG
AP6.PNG