# Limit the maximum number of devices per user to 10
Controlling device proliferation is important. Set a reasonable limit on the number of devices each user can register in your Microsoft Entra ID tenant.
Source: https://maester.dev/docs/tests/ZTA.21837
:::note[Maester checks this too]
[CIS.M365.5.1.4.2](/docs/tests/CIS.M365.5.1.4.2) (Ensure the maximum number of devices per user is limited) checks the same setting. Running both reports it twice.
:::
## Overview
Controlling device proliferation is important. Set a reasonable limit on the number of devices each user can register in your Microsoft Entra ID tenant. Limiting device registration maintains security while allowing business flexibility. Microsoft Entra ID lets users register up to 50 devices by default. Reducing this number to 10 minimizes the attack surface and simplifies device management.
## Remediation
- Learn how to [limit the maximum number of devices per user](https://learn.microsoft.com/entra/identity/devices/manage-device-identities?wt.mc_id=zerotrustrecommendations_automation_content_cnl_csasci#configure-device-settings).
## Run it
The check runs as part of the whole assessment, with the ZeroTrustAssessment module installed:
```powershell
Install-Module ZeroTrustAssessment -Scope CurrentUser
Connect-Maester
Invoke-Maester -Pack ZTA -SkipBuiltIn
```
Leave out `-SkipBuiltIn` to run Maester's own checks in the same run.
About this check
| | |
| --- | --- |
| Severity | Low |
| Effort to fix | Low |
| Impact on users | Low |
| Pillar | Identity |
| Category | Device management |
| Product | [Entra ID](/docs/tests/products/entra) |
| Feature | Device identity |
| Area | Devices and endpoints |
| ATT&CK | [T1098.005](/docs/tests?mitre=T1098.005) Device Registration |
| Licence | Free |
| Tenant | Workforce |
Product, feature, area and ATT&CK are Maester's: the assessment does not record them, so Maester keeps them in the pack's `taxonomy.json`.