Similar to the previous settings, which limit which tenants OneDrive for Business clients can synchronize with, you can also manage service-side tenant settings that will govern which clients can synchronize with your organization. For Active Directory-joined machines, you can use the Allow syncing only on PCs joined to specific domains setting. For non-Active Directory-joined machines, you can use a Conditional Access policy. Configuring Conditional Access policies is outside the scope of the MS-300 exam, but you should know that they can be used as well.