What's the recommended setup for someone using their own computer to access several Microsoft 365 tenants? The device isn't domain-joined, Entra-joined, or Entra-registered, and there are no shared domains involved. Using one Outlook profile with multiple tenant accounts alongside Microsoft Teams quickly became confusing, especially when creating Teams meetings from Outlook and having calendars or accounts from the wrong tenant appear. The main options seem to be separate Windows logins or separate Outlook profiles, but I'm unsure whether multiple Outlook profiles would still cause problems in Teams. What setup or best practice would you recommend?
4 Answers
From a security and support perspective, organizations should avoid putting corporate data into native applications on unmanaged personal devices whenever possible. If full isolation isn’t available, browser-based access with private sessions or dedicated browser profiles is preferable. Otherwise, the user should access each organization through a managed VM or virtual desktop.
If the device is truly unmanaged BYOD, the cleanest approach is usually to use Outlook and Teams in a browser, with a separate browser profile for each tenant. That keeps cookies, sessions, calendars, and account context isolated instead of relying on the desktop apps’ account switching.
A virtual desktop is the most reliable way to create proper separation. Give the user a dedicated VM or Azure Virtual Desktop session for each organization, preferably with the required security tools installed and without local administrator rights. Each environment can then be joined and managed independently.
A virtual desktop could work well here. We may be able to use Azure Virtual Desktop credits, and it would avoid mixing accounts and corporate data on the personal operating system.
Multiple accounts can work in Teams and Outlook for some users, since both applications have account selectors. However, combining accounts becomes unreliable when Outlook, Teams, calendars, and meeting creation use different active tenants. Separate Outlook profiles may reduce some confusion, but they won’t guarantee that Teams uses the matching identity.
That makes sense. The main issue is keeping Outlook and Teams aligned when a meeting is created, so separate browser profiles may be safer than trying to combine everything in one desktop profile.