is it possible to restrict azure vpn user to connect only company devices while using AD auth as right now they can configure vpn to any home laptop