Windows 11: 22H2 · 3.0 to 25H2 · 1.0

[added: ]This setting enables and configures the device-based tenant restrictions feature for Azure Active Directory.[removed: ][added: ]When you enable this setting, compliant applications will be prevented from accessing disallowed tenants, according to a policy set in your Azure AD tenant.[removed: ][added: ]Note: Creation of a policy in your home tenant is required, and additional security measures for managed devices are recommended for best protection. Refer to Azure AD Tenant Restrictions for more details.[removed: ][added: ]https://go.microsoft.com/fwlink/?linkid=2148762[removed: ][added: ]Before enabling firewall protection, ensure that [removed: a Windows Defender Application Control (WDAC) ][added: an App Control for Business ]policy that correctly tags applications has been applied to the target devices. Enabling firewall protection without a corresponding [removed: WDAC][added: App Control for Business] policy will prevent all applications from reaching Microsoft endpoints. This firewall setting is not supported on all versions of Windows - see the following link for more information.[removed: ][added: ]For details about setting up WDAC with tenant restrictions, see https://go.microsoft.com/fwlink/?linkid=2155230