Azure AD Devices - Best Security Policies? what do they do?

[Warwick_Tech]

Hi All,

 

So we recently delved into;

Azure AD > Devices

 

And discovered all our domain devices and all our Covid laptops loaned out as well as a bunch of personal machines.

 

Now, as is my understanding this is when they add their account to office/windows 10 etc. etc. either at setup or 'connect my work or school account'

 

They are limited to 20 devices currently, but realistically how do you control this? I would've thought domain machines and personal devices should be kept seperate, but how (?)

 

It's a bit of a mess of settings.

 

We also have some guest users who appear occasionally - We delete them and make sure the settings are up to date but occasionally they sneak in, what could we be missing?

Azure AD > Users > Add filter > User Type (Guest)

 

Who are these guys?