KMS activation of external devices - Kms server in dmz. How to restrict access to it?

Question

Windows

Hey!
Please tell me, can anyone come across with setting up such a solution at the enterprise.
There is a need to periodically activate laptops of users outside the corporate network via Kms.
Laptops in the domain.
If you put Kms in dmz, is there a way to restrict access to it? For example, only a PC with a certain name or MAC address can be activated on it. Thank you very much!

Answer 1

and that they are in a non-radius corp. networks go to it through the Internet? Or is there some kind of VPN? if yes, then in group policy we set only the internal KMS address.