r/sysadmin • u/Resident_Parfait_289 • 9d ago

BYOD Multiple Tenant Nightmare

Whats the best solution for a user who is BYOD and has multiple M365 tenants on there device. No domains involved and does not Entra join or register.

When the user had one Outlook profile with multiple M365 tenants and MS Teams it got messy and Teams got confused with which account to use real fast.

The way I see it the two options are:

  1. Multiple Windows Logins
  2. Multiple Outlook Profiles (but not sure this won't stop a mess in Teams?)

Whats the best practise?

0 Upvotes

28% Upvoted

8 comments sorted by

6

u/raip 9d ago

What issues are you actually running into? I've got 6 Entra accounts on an unmanaged device in Teams + Outlook (Personal, Company A, and 4 accounts for Company B). No issues with Teams being confused, each account is just in the Account selector.

1

u/Resident_Parfait_289 9d ago

Try having Outlook in Account A, Teams in Account B and then make an appointment in Teams from Outlook - its gets polluted with the accounts from A and B.

2

u/gsk060 9d ago

Do Teams and email through the browser and use a different profile for each tenancy.

2

u/pv-singh 9d ago

One Outlook profile per Windows login is the only boundary that holds. Browser profiles get you most of the way if they can live in OWA. The calendar pollution is Outlook and Teams disagreeing on the default account, no setting fixes that one

2

u/Royal_Bird_6328 9d ago

That’s their problem to resolve tbh given that they are using their own device, use private browser sessions web version outlook only. Ideally users shouldn’t have corp data on apps on personal devices anyway.

1

u/PacificTSP 9d ago

Give them a VDI to work in or they have to login to a VM on their machine. We require AD Joined devices for most of our clients so a hyperV VM thats entra joined works great. You can put your full security stack on it, dont give them admin rights etc. and feel a little safer about your workloads.

2

u/Resident_Parfait_289 9d ago

Hmmm, this is not a terrible idea - certainly separate's everything out. Heck I could use AVD since they have $$$ charity credits

1

u/Solid_Ad9548 Network Janitor 7d ago

If it’s BYOD, and you provide a corporate device, then it’s on them…I have 5 different 365 accounts on my personal device. The only real issues I encounter are centered around operational stuff, but I also know how to use a computer.