Microsoft Entra registered - how are these devices getting in my All Devices list

[kennysarmy]

On checking Entra -> Devices -> All devices I'm seeing quite a few student home/personal devices listed with a Join type of "Microsoft Entra registered"

Some have MDM listed as None and some as Microsoft Intune

They all show compliant as "No"

 

Should I be concerned or worried about these?

 

What do students do to get their devices registered?

 

We don't have a BYOD policy so whatever is happening is taking place off site :/

 

Thanks.

[midweek]

When pupils try and use their school accounts with office app there is a popup about staying signed in to all your apps and an auto-filled tick box "allow my organization to manage my device".

If they just click on through it'll register their device in Entra I think.

[jthompson]

There's an option somewhere to limit which users/groups are able to register devices. IIRC by default it's set to allows all users to add devices.

 

You'll want to tighten it up I think, as people may end up with BitLocker keys for their personal devices being stored in your tenancy.

 

I might be wrong on all of that, so happy to be corrected.

[howartp]

There's an option somewhere to limit which users/groups are able to register devices.

Entra > Devices > Device Settings: Users may join devices to MS Entra: All/Selected/None

 

Defaults to All.

[cheekycharly]

Will be as they add their email on outlook or something similar. It registers that as a device.