At a firewall level, no. Any process that will get you OS info would also allow you to get the IP.
Edit: Unless you’re doing it before a DHCP lease assignment, but I’m pretty sure you can’t use the MAC to gain any system info without software being installed on the computer.
But if the purpose is to block windows from ever communicating on the network, what you could do is assign an IP for a subnet that can’t talk out, get the OS, then assign a new IP on your main network for non-windows devices.
At a firewall level, no. Any process that will get you OS info would also allow you to get the IP.
Edit: Unless you’re doing it before a DHCP lease assignment, but I’m pretty sure you can’t use the MAC to gain any system info without software being installed on the computer.
But if the purpose is to block windows from ever communicating on the network, what you could do is assign an IP for a subnet that can’t talk out, get the OS, then assign a new IP on your main network for non-windows devices.