Forum Discussion

NY_Dina's avatar
NY_Dina
Copper Contributor
Aug 16, 2024

Intune device compliance status not evaluated

Has anyone encountered devices taking absolutely forever to evaluate overall compliance after user enrollment ESP? (pre-provisioned devices). They just sit there in "not evaluated" and get blocked by CA policy. Most come good eventually, but some literally are taking employees offline for the whole day.

These are all Win11 AAD-joined. Microsoft has only offered me the standard "may take up to 8 hours, goodbye" response but I am pulling my hair out trying to figure out if this is just an Intune thing, or is there a trick I am missing? Some of them take so long that I give up and swap out the device so they can start working.

 

The individual policies are evaluating just fine, but the overall status is way behind. I'd even prefer them to be non-compliant because at least then the grace period would kick in.

I have had very limited success with rebooting and kicking off all the syncs / check access buttons, but I have a feeling those buttons have just been a placebo. It happens very sporadically too on about half of devices the user doesn't even notice it's that quick.

 

Thanks for any advice

  • micheleariis's avatar
    micheleariis
    Steel Contributor
    Hi, it's very strange; if on a client you open company portal does it give you some strange message or does it say it's compliant?
    • NY_Dina's avatar
      NY_Dina
      Copper Contributor
      on company portal I got message that can't access company resources "This device does not meet Company compliance and security policies. You need to make some changes to this device so that you can access company resources."
      • micheleariis's avatar
        micheleariis
        Steel Contributor
        Hi, this is very strange; what are the compliat policies you have configured?
  • andrerocha1450's avatar
    andrerocha1450
    Copper Contributor
    hi there, you can use this to force the sync.
    Start-Process -FilePath "C:\Program Files (x86)\Microsoft Intune Management Extension\Microsoft.Management.Services.IntuneWindowsAgent.exe" -ArgumentList "intunemanagementextension://synccompliance"

Resources