AMA: Device Health Attestation - security benefits and integrations

If you know the device should have e.g. bitlocker, and it doesn't, there must be ways to just "make it so" - automatic remediation. If you suspect a restart would fix it, bug the user to reboot, or give them a 24 hour reboot deadline... If auto-remediation fails, send the error logs to the Admin portal so a human can start from a reasonable place. At the moment, it's a massive workload to resolve non-compliance issues - we don't have much data.