Management of unsupported WFH Teams-certified desk phones

The issue is that an employee-owned Yealink phone enrolled and appeared in management, not necessarily that its hardware certification has expired. Teams Android devices use a dedicated AOSP enrollment arrangement; successful enrollment does not establish that your company approved the purchase. First identify the exact device model, firmware, signed-in account, and corresponding Intune and Entra device records. Separate approved Teams hardware from employee-purchased devices in your inventory. Then evaluate a narrowly scoped Conditional Access policy using supported device filters and access controls, testing with a pilot account before enforcement. Do not rely solely on a personal-versus-corporate ownership label as your approval signal. Microsoft supports device filtering, blocking access, and requiring compliance for these devices, but several ordinary mobile-device controls are unsupported. Avoid applying smartphone app-protection requirements indiscriminately. Document your allowed-device policy and involve your identity team before changing tenant-wide enrollment or sign-in settings.