mdatp device compliance

[Thomas Höhner]

Hi,

is there a recent change within the handling of mdatp compliance policy out of endpoint manager?

We used to assign mdatp compliance policy to "All Users" which, in the past, only evaluates the related user account, which was matched to the policy assignment.

Since yesterday, we recognized, that the mdatp compliance policy is also scoped to the device itself:

now also the system account gets evaluated, and we have a new built-in compliance policy system account evaluation....

In addition, the scoped user account remains as "not applicable" for this compliance policy.

Anyone knows more details about this?

Thank you

Thomas

[#2]

@Thomas Höhner AFAIK, device compliance policies have come in picture for the devices which have active threat present on it. In such cases irrespective of the user, device can marked as compliant or non-compliant. So that further it can be combined with conditional access policy to allow/block connectivity to that particular device.