Unable to confirm device settings / Your device isn't up to date with organisation policies

%3CLINGO-SUB%20id%3D%22lingo-sub-1261034%22%20slang%3D%22en-US%22%3EUnable%20to%20confirm%20device%20settings%20%2F%20Your%20device%20isn't%20up%20to%20date%20with%20organisation%20policies%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1261034%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20All%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20have%20a%20Conditional%20Access%20policy%20in%20place%20that%20requires%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CUL%3E%3CLI%3EMFA%3C%2FLI%3E%3CLI%3EDevice%20Compliance%3C%2FLI%3E%3CLI%3EApproved%20app%3C%2FLI%3E%3C%2FUL%3E%3CP%3EAll%203%20conditions%20must%20be%20met%20on%20iOS%20%2F%20Android%20phones%20before%20access%20is%20granted.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%2C%20when%20adding%20test%20users%20to%20the%20Conditional%20Access%20target%20group%2C%20the%20users%20CANNOT%20access%20corp%20resources%2C%20with%20errors%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CUL%3E%3CLI%3EYour%20device%20isn't%20up%20to%20date%20with%20organisation%20policies%3C%2FLI%3E%3CLI%3EUnable%20to%20confirm%20settings%3C%2FLI%3E%3C%2FUL%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAdd%20a%20test%20user%20to%20an%20Exclusion%20group%20and%20it%20works%20fine.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20reason%20why%20the%20compliance%20%2F%20config%20policies%20are%20not%20hitting%20then%20device%20therefore%20causing%20non-compliance%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1261034%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EConditional%20Access%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1264591%22%20slang%3D%22en-US%22%3ERe%3A%20Unable%20to%20confirm%20device%20settings%20%2F%20Your%20device%20isn't%20up%20to%20date%20with%20organisation%20policies%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1264591%22%20slang%3D%22en-US%22%3EAre%20you%20sure%20non-compliance%20is%20the%20error%3F%3CBR%20%2F%3E%3CBR%20%2F%3EWhat%20app%20are%20you%20using%20to%20access%20what%20resource%3F%3C%2FLINGO-BODY%3E
Highlighted
Regular Contributor

Hi All

 

We have a Conditional Access policy in place that requires:

 

  • MFA
  • Device Compliance
  • Approved app

All 3 conditions must be met on iOS / Android phones before access is granted.

 

However, when adding test users to the Conditional Access target group, the users CANNOT access corp resources, with errors:

 

  • Your device isn't up to date with organisation policies
  • Unable to confirm settings

 

Add a test user to an Exclusion group and it works fine.

 

Any reason why the compliance / config policies are not hitting then device therefore causing non-compliance?

 

Regards

1 Reply
Highlighted
Are you sure non-compliance is the error?

What app are you using to access what resource?