Forum Discussion
Solved
One PC - one Teams account
Hi, My organization has a requirement to restrict teams app in one PC to one particular employee. in other words, No one except the employee who has registered to that PC, cannot login to MS teams by using their credentials. Even the employee who is assigned to that PC should be restricted to access any personal teams account except organization provided teams account. Any possibilities to achieve this requirement?
- So what mechanism do you use today to keep someone from logging on to another workstation?
With Conditional Access to disable web login, as well as coming from anywhere besides your network, you may be able to get close, as long as you restrict the user logging on to another PC.
But honestly, AFAIK, there is ABSOLUTELY NO security advantage is doing this. Securing the PC by enabling Bitlocker, along with Teams security will make sure that any data that sit on the workstation isn't usable, because it is encrypted. If I log onto 4 different machines, I don't worry about anything left behind.
To keep the employee from accessing any Teams, you just have to make sure that they don't have the rights to any Teams. And you need to make sure that they can't create Teams.
But this sounds like a security policy from the 1980's. I can tend to promise that it probably doesn't do what is needed. It's always better to state your problem as the problem and don't state a solution as the problem.
- So what mechanism do you use today to keep someone from logging on to another workstation?
With Conditional Access to disable web login, as well as coming from anywhere besides your network, you may be able to get close, as long as you restrict the user logging on to another PC.
But honestly, AFAIK, there is ABSOLUTELY NO security advantage is doing this. Securing the PC by enabling Bitlocker, along with Teams security will make sure that any data that sit on the workstation isn't usable, because it is encrypted. If I log onto 4 different machines, I don't worry about anything left behind.
To keep the employee from accessing any Teams, you just have to make sure that they don't have the rights to any Teams. And you need to make sure that they can't create Teams.
But this sounds like a security policy from the 1980's. I can tend to promise that it probably doesn't do what is needed. It's always better to state your problem as the problem and don't state a solution as the problem.
