Intune device compliance status not evaluated

Treat this as an Intune to Entra compliance reporting delay, not an ESP policy failure. Compare the device’s Entra device ID in the blocked sign-in log with its Intune record, check for duplicate device objects, confirm the user has an Intune license, and collect the MDM diagnostics plus DeviceManagement-Enterprise-Diagnostics-Provider logs while the status is Not evaluated. Intune writes the IsCompliant value to Entra for Conditional Access, so repeated Sync or Check access actions will not fix a mismatched or delayed backend value. If the IDs match and affected devices are checking in, open a support case with device IDs, enrollment timestamps, sign-in correlation IDs, and logs rather than replacing the hardware.