Random personal devices in M365 / Intune

[IT_Man_Dan]

Afternoon all,

 

I'm just starting to look at Entra and Intune etc and I'm planning to hybrid join our devices.

On inspecting 'Active Devices' in the M365 admin center there are 7 fully managed personal devices listed?! These also appear in Intune.

 

I have checked device enrolment restrictions in intune and personal devices are blocked for each platform, I've also gone into Entra and under device settings I've set "Users may join devices to Microsoft Entra" to none (this may be wrong but I've only skimmed through documentation so far) to try to stop peopled adding personal devices, is there anything else I need to do to prevent it?

 

Also, as these devices appear to be fully managed would they be wiped (which I don't want to happen) if I just delete them from 'Active devices' within M365 or would they just unlink?

 

I'm currently learning this so thank you for your advice.