Many of our users’ personal devices are showing up in Microsoft Defender

Question

Many of our users’ personal devices are showing up in Microsoft Defender

Syed Ishmam Ahmad 20

Hello,

Many of our users’ personal devices are showing up in Microsoft Defender because they didn’t uncheck the box to “Allow my organization to manage my device” the first time they signed into their Office 365 email account in Outlook. Is there a way not to ask this question when they login to their Outlook with the corporate email from their personal devices and restrict from showing the devices in MS Defender?

Rahul Jindal 11,621 Reputation points

2026-03-24T18:49:20.4633333+00:00

How are you onboarding devices on Defender? Is it a catch all kind of deployment? If yes, then personal devices can possibly show up. Also, are users connecting their personal devices to corporate network in some way and possibly getting onboarded through device discovery in the Defender tenant?
Syed Ishmam Ahmad 20 Reputation points

2026-03-24T19:26:58.14+00:00

We onboard corporate devices through Microsoft Intune using Windows Autopilot, ensuring that all users receive properly configured and managed company devices.

However, we’ve observed that some users attempt to sign in to Outlook on their personal laptops using their corporate email accounts. During this process, they are prompted with the message: “Do you want to allow your organization to manage this device?”

If the user inadvertently selects “Yes,” the personal device becomes registered and may appear in Microsoft Defender. However, these devices are not fully joined to Microsoft Entra ID nor enrolled in Intune, leading to partial visibility without full management or compliance control.

How to stop this?

2 answers

Your answer

Rahul Jindal 11,621 Reputation points

2026-03-24T18:49:20.4633333+00:00

How are you onboarding devices on Defender? Is it a catch all kind of deployment? If yes, then personal devices can possibly show up. Also, are users connecting their personal devices to corporate network in some way and possibly getting onboarded through device discovery in the Defender tenant?
Syed Ishmam Ahmad 20 Reputation points

2026-03-24T19:26:58.14+00:00

We onboard corporate devices through Microsoft Intune using Windows Autopilot, ensuring that all users receive properly configured and managed company devices.

However, we’ve observed that some users attempt to sign in to Outlook on their personal laptops using their corporate email accounts. During this process, they are prompted with the message: “Do you want to allow your organization to manage this device?”

If the user inadvertently selects “Yes,” the personal device becomes registered and may appear in Microsoft Defender. However, these devices are not fully joined to Microsoft Entra ID nor enrolled in Intune, leading to partial visibility without full management or compliance control.

How to stop this?

Answer 1

Hello Syed Ishmam Ahmad,

It is possible now to block “Allow my organization to manage my device” option. I think you are looking for the below setting,

User's image

For more details, refer to: Rethinking “Allow my organization to manage my device” Why opt‑in enrollment works better for Intun…

Hope this helps!

If you found the information above helpful, please Click Yes. This will assist others in the community who encounter a similar issue, enabling them to quickly find the solution and benefit from the guidance provided.

Answer 2

The prompt to “Allow my organization to manage my device” is part of the Entra account registration and device management flow. If users select Yes, their device is enrolled so the organization can manage security settings, apps, and policies, and the device can then appear in management tools such as Microsoft Defender.

From the provided information:

Device management is what enables the organization to manage security settings and applications on personal or corporate devices and ensure only compliant devices access resources.
The device management screen is only displayed if the user selects Yes on the Entra account registration screen. If the user chooses options that do not enable device management (for example, “No, This App Only”), device management is not activated and the device will not be enrolled.
Once a device is enrolled, administrators can perform operations such as configuring device settings, enforcing security policies, and securing data on the device.

To avoid personal devices being enrolled and then appearing in Defender, users must not enable device management during the sign-in flow. If they already did so and this caused issues, the referenced Q&A indicates that the root cause was the user choosing to allow the organization to manage the device during the “Automatically sign in to all desktop apps and websites on this device” prompt.

The context provided does not describe a central, admin-side setting to completely suppress or remove this prompt for Outlook sign-in on personal devices. The behavior is controlled by the Entra account registration and device management flow, where the user’s choice determines whether the device is enrolled.

References:

Share via

Many of our users’ personal devices are showing up in Microsoft Defender

2 answers

Your answer