What technically happens to non-compliant devices in InTune

crib bar 781 Reputation points
2023-05-31T08:40:56.3133333+00:00

Within InTune, if you configure a ‘compliance policy’ for Android devices, and a device has a setting that does not meet the requirements of the compliance policy, what actually happens, and what impact does that have on the device? For arguments sake if a compliance policy means all devices must be running a minimum version of Android or above, and a device is still running an older version of Android and cannot be upgraded, what actual impact does that have on the device as it fails the compliance policy. For example, can the client define what action to take for non-compliant devices and where is this set within InTune, or is this an InTune default impact (and if so what is it?).

Secondly, I was interested in the same for 'configuration profiles', if a device has a setting which fails a configuration profile, what is the actual impact, and is the impact an InTune default, or can it be customised by the client themselves?

Microsoft Intune Android
Microsoft Intune Android
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Android: An open-source mobile platform based on the Linux kernel, developed by Google, and maintained by the Open Handset Alliance.
266 questions
Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,807 questions
Microsoft Intune Enrollment
Microsoft Intune Enrollment
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Enrollment: The process of requesting, receiving, and installing a certificate.
1,318 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,730 questions
0 comments No comments
{count} votes

Accepted answer
  1. Crystal-MSFT 46,171 Reputation points Microsoft Vendor
    2023-06-01T01:31:10.03+00:00

    @crib bar, Thanks for posting in Q&A.

    If a device fails to meet the requirements set in a compliance policy, InTune can take one or more Actions for noncompliance, which can be customized by the client. Some examples of Actions for noncompliance include sending a push notification or email to the end user, remotely locking the device, or retiring the device. These Actions for noncompliance can help alert the user when their device isn’t compliant, or safeguard the organizational data on the device. The configuration of these Actions for noncompliance can be selected and customized by the policy administrator before deploying the policy. For example, you can configure several related Actions to occur in a sequence. First, immediately upon being noncompliant you might have InTune send an email to the device’s user, and perhaps an administrator as well. Then, a few days later, a second Action could send a different email reminder with details about a deadline for remediating the device. You might also configure a final Action to add a device to a list of devices you might want to retire, with the Action set to run only after a device continues to remain noncompliant for an excessive period.

    Similarly, if a device has a setting that fails a configuration profile, the actual impact will depend on the device configuration settings that were configured. InTune allows you to configure preferred settings, which are applied first, and then if a device doesn't comply with the preferred settings, the InTune settings are applied. If neither of these are present, the device continues with its current settings. So, the impact on a device that fails a configuration profile may vary, depending on the settings that are configured. The administrator can customize the settings for configuration profiles in InTune.

    Reference:


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

0 additional answers

Sort by: Most helpful