priority compliance policy settings/requirements

Question

Purely out of interest for some research I am doing, when configuring a ‘compliance policy’ for Android smartphones in InTune, aside from the obvious, such as minimum OS levels (specifying only supported versions), encryption status, PIN/password/biometric requirement/complexity settings, what other types of 'setting' do you include in your compliance policies? These would be for managed devices, not BYOD devices.

I appreciate each organisation has its own requirements & risk tolerance, and some organisations will also be subject to specific security regulations that will influence their policy settings.

Answer 1

Hi,

Thank you for posting in Microsoft Q&A forum.

Per my experience, the most used compliance policy items are as you mentioned and what kind of special compliance policy to set depends on the company's requirements.

Here are some tips for compliance policy:
Assign your compliance policies to groups of users
Configure Conditional Access to block non-compliant devices
Test before deployment
Update your policies when necessary
Keep your policies simple to understand and follow

Thanks for your time. Have a nice day!

Best regards,
Simon

---

If the response is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.