How to block Skype for business sign in for external PCs while allowing Mobile Devices?

The Lync Access Control filter allows blocking registration of PCs and allowing Mobile devices.

Steps:
1. Browse to the Admin Portal Admin Site
2. Go to Settings > Registration
3. Set the following:
 a. "Device registration" should be "Admin Approval" or "Self Registartion"
 b."Use PC pairing" should be "Yes"
 c."Automatically register computers with internally issued certificates" should be "No"
 d.Under "Device type filtering rules" disable: "Desktop Client Lync", "Desktop Client Skype for Business" and "All devices".

The option "Automatically register computers with internally issued certificates" is applicable to version 5

NOTE: when disabling All devices it also disables the ability to sign in with any other device, not listed explicitly in  "Device type filtering rules".