Hi Merlijn,
I'm not quite sure but I believe this is only achievable by a 3rd solution like Cloudpath or Clearpass, there you can define additional policies like the one you're looking for.
AFAIK I don't think there's a rule for that purpose within the NPS from Windows.
But, if anyone else can clarify further, it will be great.
Best regards.