Not sure if this is possible but would like to have a filtering agent for browser that could work (installed) for 3rd party VMs (non domain) that is hosted by the 3rd party (such as Azure Labs or AVD from Microsoft) but cannot be added as internal network for Smart Shield or DNS filter. Having such of an agent that would prompt for authentication for the school board domain account (email and password) when opening any browser. Also, maybe this could work on BYOD devices.