Intune Compliance policy "Filter Device"

Question

Hello Team,

I encountering an issue with a compliance policy.

I configured a compliance policy as "Required to be compliant".

The result is applying this policy on all devices even the compliant devices.

After then, I filter on devices to exclude devices that have status compliant

But the same issue still exists.

What is wrong in my configs ?

Thanks,

Alaa Elrayes

Answer 1

@Alaa Elrayes, Thanks for posting in Q&A. Based on my researching, Firefox 91+ is supported for device-based Conditional Access, but "Allow Windows single sign-on for Microsoft, work, and school accounts" needs to be enabled. Chrome 111+ is supported for device-based Conditional Access, but "CloudApAuthEnabled" needs to be enabled.

https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-conditions#supported-browsers

If the above not met, then it will cause the browser can't get required information which may cause the failure. For the Firefox configuration, you can follow the link above I provided to enable the setting on Firefox. For Chrome, you can follow the document Rahul provided to enable "CloudApAuthEnabled".

Please try the above suggestion and if there's any update, feel free to let us know.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Maybe this can help for Chrome - https://rahuljindalmyit.blogspot.com/2023/05/configure-cloudapauthenabled-to-support.html