Devices compliance policies shall be configured for every supported device platform
PreviousDevices shall be deleted that haven’t checked in for over 30 daysNextNoncompliant devices shall be blocked from accessing corporate resources
Last updated
Last updated
Device compliance policies allow us to define the necessary settings on a particular platform that meets corporate requirements. Device compliance policies paired with conditional access policies allow us to prevent access to corporate resources on noncompliant devices. Devices should be constantly monitored to ensure compliance with corporate policies.
A device compliance policy is configured for each device platform that is supported by the corporation.
Devices that do not meet the compliance standards shall be marked as noncompliant immediately
Any tenant with Intune licensing can access this setting.
To configure device compliance policies by platform:
Device compliance policies will have no impact to end-users unless they are paired with conditional access policies to block access on noncompliant devices. Devices not in compliance will show up in the Intune admin center from a reporting standpoint. There are certain device compliance policy settings that will prompt the end-user for certain action. For instance, configuring Encryption of data storage on the device will prompt the user to configure Bitlocker encryption if it is not already enabled. It is recommended to push out a configuration profile to automatically configure encryption in this use case to avoid help desk calls.