{"id":58142,"date":"2026-07-30T12:02:20","date_gmt":"2026-07-30T02:02:20","guid":{"rendered":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/07\/30\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\/"},"modified":"2026-07-30T12:03:37","modified_gmt":"2026-07-30T02:03:37","slug":"how-to-find-unmanaged-devices-accessing-your-microsoft-365-data","status":"publish","type":"post","link":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/2026\/07\/30\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\/","title":{"rendered":"How to Find Unmanaged Devices Accessing Your Microsoft 365 Data"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">In this blog post How to Find Unmanaged Devices Accessing Your Microsoft 365 Data we will explain how to identify personal laptops, contractor computers and unregistered mobile devices connecting to your business information.<\/p>\n\n\n\n<!--more-->\n\n\n\n<p class=\"wp-block-paragraph\">Most organisations assume that if multi-factor authentication is enabled and company laptops are managed, Microsoft 365 data is protected. The problem is that a valid username, password and authentication approval may still allow someone to open Outlook, Teams, SharePoint or OneDrive from a device your IT team cannot monitor or secure.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As discussed in our article on the hidden risk of unmanaged devices accessing Microsoft 365, these connections are easy to overlook. Finding them requires looking at identity, device and access information together rather than relying on a simple device list.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How Microsoft identifies the device behind a sign-in<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft Entra ID, which is the identity service behind Microsoft 365, records sign-in activity. These records can show who signed in, which application they accessed, their approximate location and details about the device or browser they used.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft Intune, which manages and secures company computers, phones and tablets, provides a second part of the picture. It tells Microsoft whether a device is enrolled, whether required security settings are present and whether the device meets your organisation&#8217;s compliance rules.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Conditional Access then acts as the decision point. It checks information such as the user, application, location and device status before deciding whether access should be allowed, blocked or subject to additional requirements.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Three device labels are especially important:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Registered<\/strong> means Microsoft recognises the device, but your business may not manage it.<\/li>\n<li><strong>Managed<\/strong> generally means the device is enrolled in Intune or another supported device management platform.<\/li>\n<li><strong>Compliant<\/strong> means the managed device currently meets your security rules, such as having encryption, an acceptable operating system version and required protection enabled.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">A registered device is not automatically a secure device. This distinction is where many Microsoft 365 reviews uncover unexpected risk.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Start with Microsoft Entra sign-in logs<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">You do not need to begin with scripts or a large security project. Your first step should be reviewing the sign-in evidence already available in the Microsoft Entra admin centre.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Open <strong>Microsoft Entra ID<\/strong> in the administration portal.<\/li>\n<li>Go to <strong>Monitoring and health<\/strong>, then <strong>Sign-in logs<\/strong>.<\/li>\n<li>Select a useful date range and review successful sign-ins to Microsoft 365 applications.<\/li>\n<li>Open individual records and check the <strong>Device info<\/strong> and <strong>Conditional Access<\/strong> sections.<\/li>\n<li>Look for missing device IDs, unmanaged status, non-compliant status and unfamiliar operating systems or browsers.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Do not limit the review to standard interactive sign-ins, where a person visibly enters their details. Applications can also renew sessions in the background, so non-interactive sign-ins may reveal continuing access that is not obvious from the user&#8217;s most recent login.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft Entra records different types of sign-in activity, while its device information can show the operating system, browser and whether the device was reported as managed or compliant.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Treat missing device information as a lead, not a verdict<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A blank device ID does not automatically prove that someone used an unsafe personal computer. Some browsers, private browsing sessions, applications and authentication methods do not provide complete device details.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, repeated successful access with no recognised device identity deserves investigation. Check the user, application, location, IP address, time of access and Conditional Access result before deciding whether it is legitimate.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Compare sign-ins against your Intune inventory<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Entra sign-in logs tell you what is accessing your data. Intune tells you which devices your business actually controls.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Export a list of active devices from Intune and compare it with the devices appearing in Microsoft 365 sign-ins. A computer repeatedly accessing SharePoint or Exchange Online but missing from Intune should be placed near the top of your review list.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Also review Intune&#8217;s compliance reports. Intune can identify enrolled devices that are non-compliant, devices without an assigned compliance policy and security requirements that are failing. Microsoft recommends treating devices without a compliance policy as non-compliant rather than assuming they are safe.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This comparison usually produces four useful groups:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Known, managed and compliant company devices.<\/li>\n<li>Managed devices that have fallen out of compliance.<\/li>\n<li>Known personal devices protected through approved applications.<\/li>\n<li>Unknown or unmanaged devices requiring investigation.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">That breakdown gives leadership something more useful than a security score. It shows how many people are affected, what business data is exposed and how much disruption remediation may cause.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Test the impact before blocking anything<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Once unmanaged access is identified, the natural reaction is to block it immediately. That can stop legitimate staff, contractors and executives from working if the policy has not been tested properly.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Conditional Access includes a report-only mode. This evaluates a proposed policy during real sign-ins and records what would have happened, but it does not yet block the user.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For example, your IT team can test a policy requiring a compliant device for SharePoint and OneDrive. After a suitable observation period, the report will show which users would be blocked, which devices are involved and whether any business-critical exceptions need to be addressed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is where Conditional Access and Intune need to work together. Intune provides the device health information, while Conditional Access uses that information to control entry to Microsoft 365.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Policies should also be checked for exclusions, incomplete application coverage and rules that unintentionally cancel each other out. Our guide to common Conditional Access mistakes covers these issues in more detail.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Choose the right response for each type of device<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Company computers<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Business-owned computers should normally be enrolled in Intune and required to meet your compliance standards. This gives your organisation control over encryption, updates, security settings and the removal of company data when a device is lost or retired.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Personal phones and tablets<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Not every personal mobile device needs full company management. Intune app protection policies can secure business information inside approved applications, controlling actions such as copying company data into personal apps without managing the entire phone.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Contractor and partner devices<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Contractors may need browser-only access, restricted downloads or access limited to specific applications. The aim is to give them enough access to complete their work without creating a permanent route into the rest of your Microsoft 365 environment.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Administrator devices<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Accounts that can change Microsoft 365 settings should face stricter rules than ordinary users. If an administrator can sign in from an unmanaged home computer, one compromised device could expose the entire organisation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is particularly important given the risks covered in our guide to Microsoft 365 administrator accounts.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">A typical unmanaged-device discovery<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Consider a 180-person professional services business where leadership believed all staff used company laptops. A sign-in review found regular Microsoft 365 access from personal Windows computers, home Macs and several mobile devices that were not covered by approved app protection policies.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Most of the activity was legitimate. Staff were simply trying to work conveniently. But the business had no way to confirm whether those devices were encrypted, patched or shared with family members.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">By testing policies first, enrolling company devices and applying protected mobile access for personal phones, the organisation could close the gap without banning flexible work. The outcome was lower data-loss risk, clearer compliance evidence and fewer surprises during customer security reviews.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why this matters for Australian organisations<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Device visibility supports several parts of the Essential Eight, the Australian government&#8217;s baseline cybersecurity framework, including patching operating systems, patching applications and strengthening multi-factor authentication. It does not achieve Essential Eight compliance by itself, but it helps prove that security requirements are being applied to the devices accessing business data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If personal information is accessed without authorisation, Australian privacy obligations may also require the organisation to assess whether an eligible data breach has occurred. Being able to identify the user, device, application and time of access makes that assessment faster and more reliable.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sign-in information is not retained indefinitely by default. Depending on your Microsoft Entra licence, native activity-log retention is generally limited to between seven and 30 days, so organisations needing longer evidence should send logs to an appropriate monitoring or storage platform.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">The questions your IT provider should be able to answer<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>How many unmanaged devices accessed Microsoft 365 during the last 30 days?<\/li>\n<li>Which users and applications were involved?<\/li>\n<li>Can unmanaged devices download files or only view them online?<\/li>\n<li>Are personal mobile devices protected at the application level?<\/li>\n<li>Are access policies actively enforced or only configured in report-only mode?<\/li>\n<li>How are exceptions approved, documented and reviewed?<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">If these questions cannot be answered clearly, it may be time for a Microsoft 365 and Intune health check.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Turn device visibility into a practical access plan<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The goal is not to block every personal device. It is to know which devices are accessing your information, decide what level of access is appropriate and consistently enforce that decision.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CloudProInc brings more than 20 years of enterprise IT experience to Microsoft 365, Intune, Defender and cloud security reviews. As a Melbourne-based Microsoft Partner and Wiz Security Integrator, we focus on practical fixes that reduce risk without creating unnecessary work for your staff.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you are not sure whether unmanaged devices are reaching your Microsoft 365 data, we are happy to take a look at your sign-in and device controls and explain what we find in plain English \u2014 no strings attached.<\/p>\n\n\n","protected":false},"excerpt":{"rendered":"<p>Unmanaged laptops and phones may be reaching Microsoft 365 without your knowledge. Learn how to identify them, assess the risk, and close access gaps without disrupting staff.<\/p>\n","protected":false},"author":1,"featured_media":58144,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_yoast_wpseo_opengraph-title":"Unmanaged Devices: Find Microsoft 365 Data Access","_yoast_wpseo_opengraph-description":"Learn how to find unmanaged devices accessing business data by reviewing sign-in logs, device compliance and access policies before blocking connections.","_yoast_wpseo_twitter-title":"Unmanaged Devices: Find Microsoft 365 Data Access","_yoast_wpseo_twitter-description":"Learn how to find unmanaged devices accessing business data by reviewing sign-in logs, device compliance and access policies before blocking connections.","_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[13,36,14,12],"tags":[],"class_list":["post-58142","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","category-entra-id","category-microsoft-365","category-microsoft-intune"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.3 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Unmanaged Devices: Find Microsoft 365 Data Access<\/title>\n<meta name=\"description\" content=\"Learn how to find unmanaged devices accessing business data by reviewing sign-in logs, device compliance and access policies before blocking connections.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/07\/30\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Unmanaged Devices: Find Microsoft 365 Data Access\" \/>\n<meta property=\"og:description\" content=\"Learn how to find unmanaged devices accessing business data by reviewing sign-in logs, device compliance and access policies before blocking connections.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/07\/30\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\/\" \/>\n<meta property=\"og:site_name\" content=\"CPI Consulting\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-30T02:02:20+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-30T02:03:37+00:00\" \/>\n<meta name=\"author\" content=\"CPI Staff\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Unmanaged Devices: Find Microsoft 365 Data Access\" \/>\n<meta name=\"twitter:description\" content=\"Learn how to find unmanaged devices accessing business data by reviewing sign-in logs, device compliance and access policies before blocking connections.\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"CPI Staff\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/07\\\/30\\\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/07\\\/30\\\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\\\/\"},\"author\":{\"name\":\"CPI Staff\",\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/#\\\/schema\\\/person\\\/192eeeb0ce91062126ce3822ae88fe6e\"},\"headline\":\"How to Find Unmanaged Devices Accessing Your Microsoft 365 Data\",\"datePublished\":\"2026-07-30T02:02:20+00:00\",\"dateModified\":\"2026-07-30T02:03:37+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/07\\\/30\\\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\\\/\"},\"wordCount\":1530,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/07\\\/30\\\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\\\/#primaryimage\"},\"thumbnailUrl\":\"\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data.png\",\"articleSection\":[\"Blog\",\"Entra ID\",\"Microsoft 365\",\"Microsoft Intune\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/07\\\/30\\\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/07\\\/30\\\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\\\/\",\"url\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/07\\\/30\\\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\\\/\",\"name\":\"Unmanaged Devices: Find Microsoft 365 Data Access\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/07\\\/30\\\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/07\\\/30\\\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\\\/#primaryimage\"},\"thumbnailUrl\":\"\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data.png\",\"datePublished\":\"2026-07-30T02:02:20+00:00\",\"dateModified\":\"2026-07-30T02:03:37+00:00\",\"description\":\"Learn how to find unmanaged devices accessing business data by reviewing sign-in logs, device compliance and access policies before blocking connections.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/07\\\/30\\\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/07\\\/30\\\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/07\\\/30\\\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\\\/#primaryimage\",\"url\":\"\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data.png\",\"contentUrl\":\"\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data.png\",\"width\":1536,\"height\":1024},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/index.php\\\/2026\\\/07\\\/30\\\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Find Unmanaged Devices Accessing Your Microsoft 365 Data\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/#website\",\"url\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/\",\"name\":\"Cloud Pro Inc - CPI Consulting Pty Ltd\",\"description\":\"Cloud, AI &amp; Cybersecurity Consulting | Melbourne\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/#organization\",\"name\":\"Cloud Pro Inc - Cloud Pro Inc - CPI Consulting Pty Ltd\",\"url\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/favfinalfile.png\",\"contentUrl\":\"\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/favfinalfile.png\",\"width\":500,\"height\":500,\"caption\":\"Cloud Pro Inc - Cloud Pro Inc - CPI Consulting Pty Ltd\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.cloudproinc.com.au\\\/#\\\/schema\\\/person\\\/192eeeb0ce91062126ce3822ae88fe6e\",\"name\":\"CPI Staff\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g\",\"caption\":\"CPI Staff\"},\"sameAs\":[\"http:\\\/\\\/www.cloudproinc.com.au\"],\"url\":\"https:\\\/\\\/cloudproinc.azurewebsites.net\\\/index.php\\\/author\\\/cpiadmin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Unmanaged Devices: Find Microsoft 365 Data Access","description":"Learn how to find unmanaged devices accessing business data by reviewing sign-in logs, device compliance and access policies before blocking connections.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/07\/30\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\/","og_locale":"en_US","og_type":"article","og_title":"Unmanaged Devices: Find Microsoft 365 Data Access","og_description":"Learn how to find unmanaged devices accessing business data by reviewing sign-in logs, device compliance and access policies before blocking connections.","og_url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/07\/30\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\/","og_site_name":"CPI Consulting","article_published_time":"2026-07-30T02:02:20+00:00","article_modified_time":"2026-07-30T02:03:37+00:00","author":"CPI Staff","twitter_card":"summary_large_image","twitter_title":"Unmanaged Devices: Find Microsoft 365 Data Access","twitter_description":"Learn how to find unmanaged devices accessing business data by reviewing sign-in logs, device compliance and access policies before blocking connections.","twitter_misc":{"Written by":"CPI Staff","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/07\/30\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\/#article","isPartOf":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/07\/30\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\/"},"author":{"name":"CPI Staff","@id":"https:\/\/www.cloudproinc.com.au\/#\/schema\/person\/192eeeb0ce91062126ce3822ae88fe6e"},"headline":"How to Find Unmanaged Devices Accessing Your Microsoft 365 Data","datePublished":"2026-07-30T02:02:20+00:00","dateModified":"2026-07-30T02:03:37+00:00","mainEntityOfPage":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/07\/30\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\/"},"wordCount":1530,"commentCount":0,"publisher":{"@id":"https:\/\/www.cloudproinc.com.au\/#organization"},"image":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/07\/30\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\/#primaryimage"},"thumbnailUrl":"\/wp-content\/uploads\/2026\/07\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data.png","articleSection":["Blog","Entra ID","Microsoft 365","Microsoft Intune"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.cloudproinc.com.au\/index.php\/2026\/07\/30\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/07\/30\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\/","url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/07\/30\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\/","name":"Unmanaged Devices: Find Microsoft 365 Data Access","isPartOf":{"@id":"https:\/\/www.cloudproinc.com.au\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/07\/30\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\/#primaryimage"},"image":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/07\/30\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\/#primaryimage"},"thumbnailUrl":"\/wp-content\/uploads\/2026\/07\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data.png","datePublished":"2026-07-30T02:02:20+00:00","dateModified":"2026-07-30T02:03:37+00:00","description":"Learn how to find unmanaged devices accessing business data by reviewing sign-in logs, device compliance and access policies before blocking connections.","breadcrumb":{"@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/07\/30\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.cloudproinc.com.au\/index.php\/2026\/07\/30\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/07\/30\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\/#primaryimage","url":"\/wp-content\/uploads\/2026\/07\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data.png","contentUrl":"\/wp-content\/uploads\/2026\/07\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data.png","width":1536,"height":1024},{"@type":"BreadcrumbList","@id":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/07\/30\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.cloudproinc.com.au\/"},{"@type":"ListItem","position":2,"name":"How to Find Unmanaged Devices Accessing Your Microsoft 365 Data"}]},{"@type":"WebSite","@id":"https:\/\/www.cloudproinc.com.au\/#website","url":"https:\/\/www.cloudproinc.com.au\/","name":"Cloud Pro Inc - CPI Consulting Pty Ltd","description":"Cloud, AI &amp; Cybersecurity Consulting | Melbourne","publisher":{"@id":"https:\/\/www.cloudproinc.com.au\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.cloudproinc.com.au\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.cloudproinc.com.au\/#organization","name":"Cloud Pro Inc - Cloud Pro Inc - CPI Consulting Pty Ltd","url":"https:\/\/www.cloudproinc.com.au\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cloudproinc.com.au\/#\/schema\/logo\/image\/","url":"\/wp-content\/uploads\/2022\/01\/favfinalfile.png","contentUrl":"\/wp-content\/uploads\/2022\/01\/favfinalfile.png","width":500,"height":500,"caption":"Cloud Pro Inc - Cloud Pro Inc - CPI Consulting Pty Ltd"},"image":{"@id":"https:\/\/www.cloudproinc.com.au\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.cloudproinc.com.au\/#\/schema\/person\/192eeeb0ce91062126ce3822ae88fe6e","name":"CPI Staff","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2d96eeb53b791d92c8c50dd667e3beec92c93253bb6ff21c02cfa8ca73665c70?s=96&d=mm&r=g","caption":"CPI Staff"},"sameAs":["http:\/\/www.cloudproinc.com.au"],"url":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/author\/cpiadmin\/"}]}},"jetpack_featured_media_url":"\/wp-content\/uploads\/2026\/07\/how-to-find-unmanaged-devices-accessing-your-microsoft-365-data.png","jetpack-related-posts":[{"id":57508,"url":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/2026\/04\/30\/the-hidden-risk-of-unmanaged-devices-accessing-microsoft-365\/","url_meta":{"origin":58142,"position":0},"title":"The Hidden Risk of Unmanaged Devices Accessing Microsoft 365","author":"CPI Staff","date":"April 30, 2026","format":false,"excerpt":"Most Australian organisations have invested in Microsoft 365 licences, security policies, and compliance controls. But there is a gap that regularly gets overlooked \u2014 and attackers know exactly where it is. Unmanaged devices. A personal laptop, a contractor's home PC, or a smartphone that was never enrolled in Intune. Each\u2026","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/04\/the-hidden-risk-of-unmanaged-devices-accessing-microsoft-365-cover.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/04\/the-hidden-risk-of-unmanaged-devices-accessing-microsoft-365-cover.png 1x, \/wp-content\/uploads\/2026\/04\/the-hidden-risk-of-unmanaged-devices-accessing-microsoft-365-cover.png 1.5x, \/wp-content\/uploads\/2026\/04\/the-hidden-risk-of-unmanaged-devices-accessing-microsoft-365-cover.png 2x, \/wp-content\/uploads\/2026\/04\/the-hidden-risk-of-unmanaged-devices-accessing-microsoft-365-cover.png 3x, \/wp-content\/uploads\/2026\/04\/the-hidden-risk-of-unmanaged-devices-accessing-microsoft-365-cover.png 4x"},"classes":[]},{"id":57700,"url":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/2026\/06\/29\/unmanaged-laptops-are-a-bigger-business-risk-than-you-realise\/","url_meta":{"origin":58142,"position":1},"title":"Unmanaged Laptops Are a Bigger Business Risk Than You Realise","author":"CPI Staff","date":"June 29, 2026","format":false,"excerpt":"Unmanaged laptops and personal devices quietly increase cyber risk, compliance gaps and support costs. Here\u2019s what business leaders should do before it becomes an incident.","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/06\/unmanaged-laptops-are-a-bigger-business-risk-than-you-realise.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/06\/unmanaged-laptops-are-a-bigger-business-risk-than-you-realise.png 1x, \/wp-content\/uploads\/2026\/06\/unmanaged-laptops-are-a-bigger-business-risk-than-you-realise.png 1.5x, \/wp-content\/uploads\/2026\/06\/unmanaged-laptops-are-a-bigger-business-risk-than-you-realise.png 2x, \/wp-content\/uploads\/2026\/06\/unmanaged-laptops-are-a-bigger-business-risk-than-you-realise.png 3x, \/wp-content\/uploads\/2026\/06\/unmanaged-laptops-are-a-bigger-business-risk-than-you-realise.png 4x"},"classes":[]},{"id":57888,"url":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/2026\/07\/16\/conditional-access-mistakes-that-put-microsoft-365-at-serious-risk\/","url_meta":{"origin":58142,"position":2},"title":"Conditional Access Mistakes That Put Microsoft 365 at Serious Risk","author":"CPI Staff","date":"July 16, 2026","format":false,"excerpt":"Conditional Access can protect Microsoft 365, but small policy mistakes can leave major gaps. Here are the issues business leaders should ask their IT team to check.","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/07\/conditional-access-mistakes-that-put-microsoft-365-at-serious-risk.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/07\/conditional-access-mistakes-that-put-microsoft-365-at-serious-risk.png 1x, \/wp-content\/uploads\/2026\/07\/conditional-access-mistakes-that-put-microsoft-365-at-serious-risk.png 1.5x, \/wp-content\/uploads\/2026\/07\/conditional-access-mistakes-that-put-microsoft-365-at-serious-risk.png 2x, \/wp-content\/uploads\/2026\/07\/conditional-access-mistakes-that-put-microsoft-365-at-serious-risk.png 3x, \/wp-content\/uploads\/2026\/07\/conditional-access-mistakes-that-put-microsoft-365-at-serious-risk.png 4x"},"classes":[]},{"id":57523,"url":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/2026\/05\/01\/why-microsoft-365-security-is-more-than-just-turning-on-mfa\/","url_meta":{"origin":58142,"position":3},"title":"Why Microsoft 365 Security Is More Than Just Turning on MFA","author":"CPI Staff","date":"May 1, 2026","format":false,"excerpt":"When a business enables Multi-Factor Authentication and calls it \"done,\" they've taken one important step \u2014 but left the door wide open in a dozen other places. MFA blocks a significant portion of credential-based attacks. Microsoft's own data shows it stops over 99% of automated password-based attacks. That's meaningful. But\u2026","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/05\/why-microsoft-365-security-is-more-than-just-turning-on-mfa-cover.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/05\/why-microsoft-365-security-is-more-than-just-turning-on-mfa-cover.png 1x, \/wp-content\/uploads\/2026\/05\/why-microsoft-365-security-is-more-than-just-turning-on-mfa-cover.png 1.5x, \/wp-content\/uploads\/2026\/05\/why-microsoft-365-security-is-more-than-just-turning-on-mfa-cover.png 2x, \/wp-content\/uploads\/2026\/05\/why-microsoft-365-security-is-more-than-just-turning-on-mfa-cover.png 3x, \/wp-content\/uploads\/2026\/05\/why-microsoft-365-security-is-more-than-just-turning-on-mfa-cover.png 4x"},"classes":[]},{"id":57505,"url":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/2026\/04\/29\/the-first-10-things-we-check-in-a-microsoft-365-security-review\/","url_meta":{"origin":58142,"position":4},"title":"The First 10 Things We Check in a Microsoft 365 Security Review","author":"CPI Staff","date":"April 29, 2026","format":false,"excerpt":"When our team starts a Microsoft 365 security review, we focus on the areas that quickly tell us whether an environment is well controlled, loosely managed, or quietly carrying avoidable risk. For many Australian organisations, Microsoft 365 has become the centre of daily work. Email, files, Teams, devices, identities, and\u2026","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/04\/the-first-10-things-we-check-in-a-microsoft-365-security-review-cover.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/04\/the-first-10-things-we-check-in-a-microsoft-365-security-review-cover.png 1x, \/wp-content\/uploads\/2026\/04\/the-first-10-things-we-check-in-a-microsoft-365-security-review-cover.png 1.5x, \/wp-content\/uploads\/2026\/04\/the-first-10-things-we-check-in-a-microsoft-365-security-review-cover.png 2x, \/wp-content\/uploads\/2026\/04\/the-first-10-things-we-check-in-a-microsoft-365-security-review-cover.png 3x, \/wp-content\/uploads\/2026\/04\/the-first-10-things-we-check-in-a-microsoft-365-security-review-cover.png 4x"},"classes":[]}],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/wp-json\/wp\/v2\/posts\/58142","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/wp-json\/wp\/v2\/comments?post=58142"}],"version-history":[{"count":1,"href":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/wp-json\/wp\/v2\/posts\/58142\/revisions"}],"predecessor-version":[{"id":58143,"href":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/wp-json\/wp\/v2\/posts\/58142\/revisions\/58143"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/wp-json\/wp\/v2\/media\/58144"}],"wp:attachment":[{"href":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/wp-json\/wp\/v2\/media?parent=58142"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/wp-json\/wp\/v2\/categories?post=58142"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cloudproinc.azurewebsites.net\/index.php\/wp-json\/wp\/v2\/tags?post=58142"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}