iTunes backups for Legal holds

Question

I have a question regarding Intune configuration as it relates to legal being able to get phone data via iTunes backup.

Scenario: Legal wants a backup of the device contents via iTunes backup when an employee is under a Legal Hold. If iTunes backups are disabled via Intune policy, is it possible to make another user group within Intune that doesn't disable iTunes backup and just put the user who is under a legal hold in this group temporarily until the backup is done? And then move the user back to the regular group they were in after the backup is completed? Is this possible without downsteam effects?

Answer 1

It is suggested to exclude the device in the assignment of this policy. After completing backup, delete the device in the exclude group.

Intune notifies the device to check in with the Intune service. The notification times vary, including immediately up to a few hours. These notification times also vary between platforms.
If a device doesn't check in to get the policy or profile after the first notification, Intune makes three more attempts. An offline device, such as turned off, or not connected to a network, may not receive the notifications. In this case, the device gets the policy or profile on its next scheduled check-in with the Intune service. If the device recently enrolled, the compliance, non-compliance, and configuration check-in runs more frequently, which is estimated at every 15 minutes for 1 hour, and then around every 8 hours. Refer: https://learn.microsoft.com/en-us/mem/intune/configuration/device-profile-troubleshoot