Windows 10 Security Baseline showing everything as a "Success" within 'Per-setting status' blade but displaying "Failure" within 'Device status' blade

RDW 216 Reputation points
2020-08-05T11:26:46.193+00:00

We have a strange issue, that my colleague has reported...

He's stating that he's deployed a Windows 10 Security Baseline which displays all "Failures" under 'Assignment Status' within Device Status but when you go to 'Per-setting status' all the settings are showing as "Succeeded" for each setting. There are a couple of devices that are showing a success under Device Status. The only difference between the sucessfully reporting devices and the non-successfully reporting devices are that the successful ones have a M365 E5 license and the non-successful ones have an EM+S E3 and O365 E3 license assigned. I've attached a screen dump of the failure within Device Status and then a device drilled down within the Windows 10 Security Baseline which displays "Success" within 'Per-setting status':

15795-dump1.png

Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,921 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Crystal-MSFT 49,426 Reputation points Microsoft Vendor
    2020-08-06T04:28:37.673+00:00

    Hi,

    For the device with assignment error, please go to one affected device side, open Settings->Access work or school->info and click Sync, wait some time to see if the status will be changed.

    However, if the issue persists, please check if there's any same setting we configured under Device Configuration. If yes, unassigned it the affected user.

    Meanwhile, we can also check the MDM diagnostic log and event log to see if there's any finding.
    https://learn.microsoft.com/en-us/mem/intune/protect/security-baselines-monitor#mdm-diagnostic-information

    Hope it can help.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.