Forum Discussion

gaurav10001suri's avatar
gaurav10001suri
Copper Contributor
Aug 21, 2022

intune compliance policy

Hi, We have setup windows 10 Intune compliance policy. We have set mark device non-compliant after 10 days. As per microsoft article if any device marked non-compliant with the given grace period then non-compliant device should go into 10 days grace period. We are facing issue with non-compliant devices they are not going into grace period time devices goes into non-compliant status. Kindly suggest any changes. Our devices are co managed with intune and sccm.

 

 

 

 

 

 

 

4 Replies

  • Hi...
    Good morning!

    1. "We have set mark device non-compliant after 10 days" --> Mmm looks bad 🙂 .. So a device (as example) without bitlocker could still have access to your office 365 data and store those files on that device without being compliant?

    2. Which compliant rule is it failing on? could you show us some more information about what was configured
    • gaurav10001suri's avatar
      gaurav10001suri
      Copper Contributor

      thanks Rudy_Ooms_MVP for the response.

      Compliance condition we have setup.

      minimum os version should be xxxx.xxx.

      bitlocker key should be enabled.

      defender real time should be enabled.

       

      most of the devices falling in defender real time and bitlocker key. Devices are not going into grace period time. Devices are going into non-compliant.

       

      • Rudy_Ooms_MVP's avatar
        Rudy_Ooms_MVP
        MVP
        Are you also 100% sure , when looking at the compliance monitor, none of those compliance settings had an error? as that could make the device go in to not compliance state instead of grace period

Resources