Forum Discussion
No user affinity - conditional access
When you say "No user affinity" do you mean, they are NOT logged in by any user or logged in with a common account like "Device Enrollment Manager (DEM)"?
In both these cases, CA will not be evaluated, so compliance is not calculated on them due to which it is not considered non-compliant.
So all devices that have a system account should not be part of conditional access polices? - there is no workarround on this ?
Can see that my devices with a system account fails the compliance, so also fails the conditional access.
So how can I either add those devices to a compliance policy - or how can I exclude them?
I could easily make a device group, but this will not work as exclusion in Conditional access, as it must be user based. And the user "system account" is not a azure account, so wondering what can be done.Guess that also non-user devices, should be able to be verified with compliance ?