Forum Discussion
Hybrid Azure AD joined Devices WITHOUT Intune show up as Non Compliant
Rudy_Ooms_MVP .. thanks for you comments
Default Compliance is configured as "not compliant" but the effected "Not Compliant Devices" without and MDM Scope (AADHJ devices) under AzureAD Devices do not show up in Endpoint Mgr.
But changing this would also effect not only windows devices right ... all the mobile devices too ... 
Scope for Windows Enrollment is set to "Some" but is 100% sure that none of the affected devices/user where in that group.
Could you find out the reason why its not compliant? ( I assume the build in ones) or?
Indeed that is pretty weird. It looks like only devices which where "setup" in last couple of months. But also older ones are affected.
As they show not in intune it is just guessing what compliance rules trigger it. Is this somehow possible of the Graph API but I have look for that in detail.
Maybe some Intune/Device/AzureAD MVP can ask the product team
.. I do not have those connections 
. Or even MS is reading this and can give some hints as this is definitely not normal. Thx
Erik
- To do so i need way more information :)… as example those devices that havent a mdm set… the person who enrolled it… had that user a intune license… how does the dsregcmd /status output looks like…
Feel free to gather some logs with this powershell command
wget https://aka.ms/intuneps1 -outfile IntuneODCStandAlone.ps1
powerShell -ExecutionPolicy Bypass -File .\IntuneODCStandAlone.ps1
- I am having exactly same issue. some devices shows NA for compliant status and other devices shows NO. we have nothing configured in Intune at this time to manage any devices.
- Okay but as you configured nothing in Intune and you are enrolling those devices into intune…? you also have no compliance policies configured etc so… one of the build in compliance policies is: has a compliance policy assigned… guess what happens when it doesnt gets or has one 🙂
- So we have AAD conditional access policy configured to allow only hybrid AAD joined (Win10) devices or compliant devices(iOS & Android) using compliance partner configured in Intune with AirWatch. no Win devices are enrolled or show up in Intune - Device blade. These devices are only visible in AAD - All Devices blade. there are about 4000 devices hybrid joined and only half of the devices show Compliant = NO other shows compliant = NA.
