Intune complance error

Nigel Prattley 1 Reputation point
2021-06-30T11:46:29.993+00:00

We are experiencing issues with a number of pcs whereas intune in marking them non-compliant due to secure boot not being enabled but it is enabled

Microsoft Security | Intune | Other
{count} votes

1 answer

Sort by: Most helpful
  1. Luchuan Deng-MSFT 81 Reputation points
    2021-07-01T05:52:22.093+00:00

    @NigelPrattley-0904 Thanks for posting in our Q&A. From your description, I know the devices that have enabled secure boot are still shown as Not Compliant in Intune.

    Based as I know, the “Require Secure Boot to be enabled on the device” setting is supported on TPM 1.2 and 2.0 devices. For devices that don't support TPM 2.0 or later, the policy status in Intune may show as Not Compliant. For our issue, the possible reason is the TPM version of the devices don't meet the requirements of Intune. So we suggest to check if the TPM version of these devices are supported by Intune or not. We can get a detailed procedure in this document.
    https://learn.microsoft.com/en-us/troubleshoot/mem/intune/secure-boot-enabled-device-shows-not-compliant
    Hope it can help.


    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.