Configuring Teams Handsets


Teams handsets are a great way of bringing Teams telephony in physical form to your users who prefer a traditional telephone over a headset, or to provide telephone services in common areas, meeting rooms or to guests.

Let’s take a look at how to get them set up in your organisation and how to manage them with your existing tooling.

Choosing Teams Handsets

There’s a whole range of Teams handsets available from well-known vendors like Poly, Yealink, Crestron, AudioCodes and Lenovo. You can review the full list here: Business Desk Phones with Displays | Teams devices (

Configuring the user account

Teams handsets require a standard Office 365 user account – the same as what you’d assign a normal Teams user.

It’s advisable to set the password for your phone account to never expire – particularly if you’re setting the phone up as a meeting room or common area phone.

This is easily achieved in Powershell:

  1. Connect to Office 365:

  2. Set the password for the phone account to never expire:

    Set-MsolUser -UserPrincipalName -PasswordNeverExpires $true


If you’re assigning a handset to an end user that already uses Teams, they can use the same account and licensing to login to their Teams phone.

If you’re setting up a handset for a common area, or meeting room you can license the account with any of the following Office/Microsoft 365 licensing:

  • E1, E3 or E5 licensing
  • Common Area Phone
  • Meeting Room

If you’re using E1 or E3 licensing, you’ll need to add a separate Phone system license if you want to make PSTN calls

If you’re using Common Area Phone licensing and wish to enroll the phone in Intune, you’ll need to assign a separate Intune license.

Of course, to actually make calls to/from the PSTN you’ll either need a Microsoft Calling Plan license (if you’re in one of the countries supported by Microsoft Calling Plans), A Direct Routing or Operator Connect solution, or if you’re in Australia you can also use Telstra Calling.

Intune Enrollment

You can enroll Teams handsets in Intune, and apply conditional access policies to them (e.g ensuring they are compliant, and have MFA enforced).

If your Enrollment Restrictions policy blocks personal device enrollment for Android devices, be sure to add the serial number of your Teams handsets under Devices > Enroll Devices > Corporate Device Identifiers to allow the phone to enroll.

If you’re having issues enrolling Teams Phones, check out my guide here: Teams Phone – Intune Enrollment Issues – Blog –

Enforcing Multi-factor Authentication

Teams handsets do support multi-factor authentication, and will support sign on either directly from the phone screen itself, or via

Keep in mind that if the phone is a common area phone, or meeting room phone, enforcing MFA could become problematic if the phone needs to be signed back in and the administrator who’s device is registered to receive the MFA prompt/authenticator code isn’t around. Because of this, i’d recommend not enforcing MFA for common area or meeting room phones if you can get away with it in your environment.

Changing The Look And Feel Of The Phone

Teams phones support three different operating modes:

  • Normal “User sign in” mode
  • Common Area Phone mode
  • Meeting Room mode

The sign in mode affects how the interface looks on the phone handset, and what features and functions are available to the end user. You set the sign in mode via a Teams IP Phone Policy.

To create a new Teams IP Phone Policy:

  1. Connect to Microsoft Teams in Powershell:

  2. Run the following command to create a new Teams IP Phone Policy

    New-CsTeamsIPPhonePolicy -Identity ‘CAP’ -Description ‘Common Area Phone Policy’ -SignInMode CommonAreaPhoneSignIn

    SignInMode can be: CommonAreaPhoneSignIn, UserSignIn, MeetingSignIn

    Let’s take a look at what each sign in mode looks like to the end user when the policy is assigned to the users account that’s used to sign in to the phone:

User “UserSignIn” Mode

UserSignIn mode is the typical desk phone experience. The handset displays Calls, People, Calendar, and Voicemail. You’d typically assign this policy to an end user who’d have the phone sat on their desk to make/receive calls.

In this mode, you can choose to enable Hot Desking (sign in and sign out) and set a HotDesking Timeout value that automatically signs the phone out after a set timeout period.

Enable hotdesking:
Set-CsTeamsIPPhonePolicy -Identity ‘DeskPhone’ -AllowHotDesking $true

Set Hotdesking timeout value (minutes):
Set-CsTeamsIPPhonePolicy -Identity ‘DeskPhone’ -HotDeskingIdleTimeoutInMinutes 480

Common Area “CommonAreaPhoneSignIn” Mode

In Common Area Phone mode, the phone displays a dial pad on screen (if using a touch screen device), and provides no access to calendaring or voicemail. As the name suggests, this mode is suitable for phones that are placed in common areas like hallways, or publicly accessible areas.

You can choose to enable or disable directory search when in this mode if you wish. The advice here is that if the phone is in a publicly accessible area, I’d recommend disabling directory search to stop someone searching your internal directory for contact information.

Disable Search:
Set-CsTeamsIPPhonePolicy -Identity ‘CAP’ -SearchOnCommonAreaPhoneMode Disabled

Also to note is that in this mode, it’s not possible to add favorites or speed dials.


Meeting Room “MeetingSignIn” Mode

In Meeting Room mode, the phone displays any upcoming meetings the account has been included in. This makes joining these Teams meetings audio only from the phone super simple – you simply tap the meeting and tap join.


Configuration Profiles

In addition to the TeamsIPPhonePolicy settings that you can set in PowerShell, there are also a number of settings available to you within the Teams Admin Centre for Teams Phones.

General Settings

You can configure a number of different settings include a device lock, which will ask the user for a PIN after the set timeout value to unlock the phone.

Here is also where you set the correct time zone for the phone, so that it displays the right date / time information.


Device Settings

Device settings let you set display settings like setting a screensaver, backlight brightness and backlight timeout, as well as accessibility features like enabling high contrast mode.

Silent mode mutes the phone so that it doesn’t ring when called.


Network Settings

Network settings let you set IP, Hostname and DNS information, as well as the device’s local admin password and if the PC port on the back of the phone is enabled (useful if you want to daisy chain the users PC to the phone to share a single Ethernet port at their desk.

Note: You cannot set Proxy information here.


Accessing the phone via HTTP/HTTPS

If you’re used to being able to view the phones settings via a web browser, you’ll be happy to hear that this is still possible on Teams handsets too, but you’ll first need to enable “Web Server” mode on certain handsets to be able to connect.

On a Poly handset, this is found under Settings > Device Settings > Admin Only (enter admin password) > Network Configuration > Web User Inferface (switch ON).

You can then browse to https://ip-of-phone and login as the admin.

Note: when running in Teams mode, a number of options are unavailable (greyed out) under settings.


Final Thoughts

Are you considering deploying Teams handsets in your organisation?

0 0 votes
Article Rating
Notify of

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Inline Feedbacks
View all comments