Forum Discussion

sumo83's avatar
sumo83
Iron Contributor
Nov 28, 2023

Compliance mark computer OK for Bitlocker even if not enabled

Hi all,   I've been wondering for some time already whether it is a bug.. or I miss something ...   I have a compliance policy that includes checking for Bitlocker (Device Health -> Bitlocker:Req...
Intune
Rudy_Ooms_MVP's avatar
Rudy_Ooms_MVP
MVP
Nov 28, 2023
Mmmm ... just wondering by how does your default compliance settings look like?
https://learn.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started#compliance-policy-settings

Mark devices without compliance policy as? maybe at that point in time, the device doesn't had the possibility to sync/report/checkin properly

Or any grace periods configured? should the device be marked not compliant immediately or?

I assume that after a reboot or a while the device would be mark not compliant?
  • sumo83's avatar
    sumo83
    Iron Contributor
    Nov 28, 2023
    thanks for mentioning "Compliance policy settings" .. I was not aware of that... I've changed "Mark devices with no compliance policy assigned as" ....from "Compliant" to "Not Compliant"...

    I would say this was the issue... Will see if better when adding new computer next time 🙂

    Btw, I have device compliance policy Action to mark devices as noncompliant immediately.

Resources