APM AD Query to allow access for AD joined clients only

Hi Community,

 

We setup Outlook-Anywhere (OA) access over F5 APM successfully. This actually works from any client. So is there a way to restrict access via AD Query to check if the client is domain joined? I just saw that variable "session.logon.last.machinename" is set correctly for any APM user session.

 

Does anybody know a good AD Query SearchFilter to check if the machine does exist inside the domain?

 

Thanks a lot for feedback Regards thrillseeker