Work Office 365 account auto logging in on Personal PC

[ridleyrumpus]

Hi,

 

I have on occasion used my School's Office 365 work account on my personal PC at home to carry out some school work.

 

A few days ago I noticed that my personal PC was logged into my work account and what is more appeared more embedded than I realised, seeing my profile in the MSN feed etc and showing that I was logged in. But we are supposed to go through 2FA to log in. And if I try to use an Office 365 App it does indeed ask me to go through 2FA, but certain parts of Windows are showing me that I am logged in.

 

So I went onto my school account and used the log out of all devices option. 

 

But yesterday I turned on my personal PC, had not logged into my Work account in anyway, not used an Office 365 app etc but I was once again logged back into my Schools account.

 

My IT department are telling me that as it is a personal PC they are not interested, but I am concerned for myself AND for our students who are told to log into the shcools systems from home on their personal PCs.

 

Two things.

 

1) How do I ensure that it only logs into the account when I want it to.

 

2) If it is logged into my work account like this, how much information can be logged about my Windows usage on my personal PC?

 

Ridley 

[itskdog]

Check in the Windows settings -> Accounts -> Access work or school and remove your account there to stop the SSO.

 

If you've attached your Entra ID account there, then it will keep you logged in to all Microsoft websites in Edge, in Chrome with the Microsoft Single Sign On extension, and in all Office apps.

 

When signing in to a modern Microsoft program with your MSA or Entra ID, you will be prompted to sign in to "All apps" or "This app only" - clicking the former will configure the account in the Windows settings to keep you signed in across Edge, Office, etc. similar to if the PC was Entra-joined.

 

You should be able to see all the PCs that people have attached in this way in the 365 Admin Centre -> Identity -> Devices, and they will show as "Entra registered" rather than "Entra joined".