Require compliant device policy blocks macOS browser sessions only

Minimal guidance for messy support realities.

Scenario

macOS users in browsers are blocked while Windows users pass the same policy without issue.

Recommended Resolution Path

  1. Check whether the browser meets device compliance claim requirements on macOS.
  2. Review platform conditions, approved client app settings, and device registration state.
  3. Compare a failing browser session against a working app-based sign-in from the same Mac.
  4. If the policy intent is browser access, align the client support model explicitly.

Technician Notes

Document what changed, what confirmed the fix, and whether the issue points to a broader standards gap worth addressing for the client.