Security

Hi, is there a way to know of the two devices,

1. a laptop which has joined windows-domain

2. and a laptop which has NOT joined windows-domain

 

is there  a way differentiate this two?

You can configure your domain laptops to machine authenticate.  That would be the differentiator.

You would need to leverage machine authentication and/or machine certs.

is that mean i have to manually configure network profile from group policy? because windows will use both user and machine authentication by default right?

You have to decide if you want both user and machine identity or just machine.

Let's say i want my CPPM rule to consider all machine auth are windows domain and all user auth are non-domain.
What do i have to do to achieve that?

Yes, but do you still want user visibility for the domain machines?

Yes i do. What do you suggest?
I cannot use both user and machine auth at the same time right?