Prevent devices from being Non-compliant after returning from holiday

Lars Notenboom 0 Reputation points
2023-08-17T14:17:25.9833333+00:00

Hi community,

I have Windows devices that are enrolled in Intune. The devices have received a Compliance policy and all devices are showing up as Compliant. If new devices do not comply to the policy, they will change to Non-compliant after 7 days and also receive an email message based on a template. So far, everything works exactly as we'd like.

Now here's the thing: What if one of my colleagues decide to go on holiday for a couple weeks? The device changes to Non-compliant. It turns out it may take over 2-4 hours before the device is checked as Compliant. Because of this, my colleague is unable to access his data and has to wait until the device is Compliant again.

Is there any way to have the device change to "In grace period" instead of going to Non compliant? I already checked the "Compliance status validity period" which is set to 30 days. My colleague returned after 9 days.

Regards,
Lars

Microsoft Intune Compliance
Microsoft Intune Compliance
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Compliance: Adhering to rules, standards, policies, and laws.
147 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,720 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. ZhoumingDuan-MSFT 10,900 Reputation points Microsoft Vendor
    2023-08-18T05:48:20.38+00:00

    @Lars Notenboom, Thanks for posting in Q&A. 

    From your description, we understand that you want to find a way to extend the "In grace period" to keep your on holiday colleague’s device Compliant.

    Based on my experience, it is recommended that you set Mark device noncompliant schedule under Actions for noncompliance settings. Here is one example you can refer, we set Action as Mark device noncompliant and Schedule as 5 which means after 5 days the device will be marked as noncompliant:

    ![A screenshot of a computer

    Description automatically generated](/api/attachments/bb0fcb52-f8f6-4f40-bf85-ce8b88f1d1a1?platform=QnA)

    Here is a link with more information about the Actions for noncompliance:

    Configure compliance policies with actions for noncompliance in Microsoft Intune | Microsoft Learn

    Hope above can be helpful!


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.