Azure Intune Non-Compliant Devices

Question

I am new to Intune and have the following questions for the experts out there. I have a number of devices which are checking in daily, yet are non-compliant. When I click on the devices it states it is processing the default compliance policy. When I check the default policy, it is set to mark all devices as non-compliant. How can I tell what is causing the devices to fail the compliance check i.e: AV missing, Bit locker missing etc...

Answer 1

@rr-4098 Thanks for posting in our Q&A.

To clarify this issue, we appreciate your help to collect some information:
1.Please make sure that the setting "Mark devices with no compliance policy assigned as" is set to "compliant" under Devices > Compliance policies >Compliance policy settings in intune portal.

2.Please access intune portal and click on a not compliant device > Device compliance > select the not compliant policy > find the specific setting that leads the device not compliant.
https://learn.microsoft.com/en-us/mem/intune/protect/compliance-policy-monitor#device-details

If there is anything update, feel free to let us know.

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi @rr-4098

1) If you are talking about the Admin (MEM/Intune) portion:

https://learn.microsoft.com/en-us/mem/intune/protect/compliance-policy-monitor#open-the-compliance-dashboard

2) To find Intune error logs on a device please take a look at this page for where different logs are:

Intune Client-side Logs

3) Please let us know what compliance issues you are facing if the above does not help.

---

If this is helpful please accept answer.