What is the best practice to deploy compliance policy?

Question

Hi, please help to confirm. What is best practice to deploy compliance policy? should we deploy on users or device?

Answer 1

@Ritesh Sharma Thanks for posting in our Q&A.

Please note what kind of compliance policy to set depends on your company's requirements. The settings about windows compliance policy are in the following article:

https://learn.microsoft.com/en-us/mem/intune/protect/compliance-policy-create-windows

For devices with a user signed in - assign the compliance policy to a User group.

For devices without a user signed in - assign the compliance policy to a Device group.

For more details, please read the Note in the following article:

https://learn.microsoft.com/en-us/mem/intune/protect/compliance-policy-monitor

Hope it will give you some ideas.

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.