Comment by starkruzr

counterpoint: those policies are not sustainable and can be easily defeated by someone simply setting up an endpoint somewhere not on any lists. if you have a security worry about devices being compromised by dint of their location, you need to control the location in some physical rather than logical way. if you have an HR worry about residency, I suspect those rules are going to slowly go the way of the dodo anyway.