Intune device showing non compliant and per user status different

Question

Device is showing as non-compliant, when we click on the device-->Device Compliance, it shows multiple users on the same device, some showing compliant and some showing Not Compliant.

Question:

How the device compliance is decided when multiple users sign-in on a device?

Thanks

SM

rudy_ooms_mvp · Answer

HiIt sort of says it here :https://docs.microsoft.com/en-us/mem/intune/protect/create-compliance-policy#before-you-begin"Enroll devices to one user, or enroll without a primary user. Devices enrolled to multiple users aren't supported."Resume: Intune will track compliance for every user on that device, so if one fails... the whole device fails... And this is done for every user who logs in..&nbsp;Did you also tried with a device with the primary user removed, so it really becomes a shared device?

smf9211 · Answer

Thanks, i didn't try that yet but got the answer, will try that.
So any user who logs in to that Hybrid azure ad join machine will be visible in Intune because same policies applies to all users, Any way to remove those additional users from compliance setting of the device? Cant find that option

rudy_ooms_mvp · Answer

You have your built in compliance policies, some custom-made compliance policies and your default set of compliance policies , (that you need to target to users.) so you could add "all users" and use the filters to exclude some devices/users.

But you will always have your built in compliance which you can't do anything about 🙂 Like is active, enrolled user exists etc

smf9211 · Answer

Hmm.. thanks, yeah asking question here because these things not clear in MS Docs. One more question, we know if device is not complaint, then it is considered as "quarantined". Does it have any impact on user/device unless it is linked with conditional access policy?Thanks in advance

rudy_ooms_mvp · Answer

smf9211&nbsp;&nbsp;I know 🙂&nbsp; compliance policies are not very well written about.... (creating a blog about it ... but I need to find some time I guess)&nbsp;Compliance policies are only to measure something (except password policies on mobile devices if I am not mistaken... as they sort of enforce a user to change their password)So you will need to have something to sort off enforce an action when its not compliant --&gt; Conditional access... If --&gt; then

Forum Discussion

Intune device showing non compliant and per user status different