Branch Office - User Authentication Blocked by Internet Access Policy

[zaryhu]

Goal:
To allow devices to become part of the "Any Identified User" group without providing "Any Internet" access. (Authentication before access)

I am setting up a new Branch Office and would like there to be Identity Authentication on any device before it is given internet access. I have network access to my Domain Controllers and have tried adding a giant list of Microsoft, Azure, and Domain services.

• This is a Cisco Meraki Branch office.
• Harmony Connect Application does not connect unless I provide the network with "* Internet"
• The Application has no trouble connecting when not behind the branch office

Below is the list of objects I have attempted using to provide User Authentication:


Willing to give whatever a try as this is a test environment.