MDE question regarding device with high score level

HK G 516 Reputation points

I have an non-compliance Intune device due to risk score being high in MDE. I checked the MDE portal and believe that the incident that triggered the high risk level is legitimate. I would like to know how I can "lower" the score so that the device can be back to compliance.

If the incident indeed was a real threat and if I follow the recommendation to remedy the issue, will the risk level be "re-adjusted"?


Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,262 questions
Microsoft Intune Compliance
Microsoft Intune Compliance
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Compliance: Adhering to rules, standards, policies, and laws.
146 questions
0 comments No comments
{count} votes

Accepted answer
  1. Crystal-MSFT 45,906 Reputation points Microsoft Vendor

    @HK G, Thanks for posting in Q&A.

    From your description, it seems the device is non-compliance due to high risk score. And in MDE portal, the device also shows high risk. To lower the score, you can contact Microsoft Defender for Endpoint support to get help.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

0 additional answers

Sort by: Most helpful