You need to ensure that users can access network resources only from computers that comply with the company policy
You need to ensure that Server1 can read the dial-in properties of the user accounts in the eu.contoso.com domain