AMA: Device Health Attestation - security benefits and integrations

Ensuring that a platform is healthy and trustworthy is a fundamental vertical in today’s zero trust approach, and this has become one of the keys focuses of recent times. Pre-OS boot continues to rem...

Heather_Poulsen

Updated Dec 27, 2024

Technical Takeoff

treestryder

Iron Contributor

Oct 27, 2022

A large percentage of our devices show as non-compliant because they are failing the Windows built-in policy named "Is active". This is supposed to ensure our devices are reporting in at least every 30 days (default). Like nearly everything else in Intune, this built-in policy is being evaluated per device AND per user. I have found that this behavior is causing devices we would consider "active" to be marked as inactive, once someone who had logged in at one time has not been seen again for 30 or more days. Should I submit this as a bug? If it is working as designed, is there a workaround? We haven't enabled Conditional Access because of these.

Recently discussed this with Intune Support on Twitter.

https://twitter.com/Treestryder/status/1583464446902427650