Does the system allow IT to force a user off the network?

[ashvaras]

Do you need to do this via a MDM or via ISE?  How is this accomplished.

[Jason Kunst · Accepted solution]

Can you provide more info of the flow? Expectations?

You can disconnect the users devices from the live sessions screen

Then you would have to lock them out from connecting again permanently

Revoke their certificate

Quarantine the device

Move the device to a blacklisted group

Disable their AD account