Since our organisation has moved to Teams for calling, and the discovery that BToE is not going to work, we're going down the headset route for our staff. We have 200-400 VVX411 handsets that are now sitting in storage that we wish to dispose of, and wish to avoid plugging them all in to factory reset if we can.
Our concerns are around the credentials of our users before we provide the devices to our eWaste provider who will try to find a home for them before destroying them. Users have signed in via web interface, BToE, and direct on the handset.
Just hoping to get the below questions covered off so our security team can make an assessment.
Is there any information on how credentials are stored? I understand a token is provided if signed in via aka.ms.
If we don't factory reset them, what information would be available to a 3rd party? If I plug in handsets, without network, a few will still provide the last user's email.
Is there any risk of old passwords being stored in a non-secure way?
Thanks,
