Intune Policy Conflicts for Grace Periods

Question

Hi,
I was wondering how MS365 handles the following: a device falls under multiple compliance policies. But each policy has a different grace period. As per the documentation, in general, the more secure configuration would apply. But for grace periods what takes priority:

• does the grace period of the first policy apply?
• does the smaller grace period apply?
• does the higher grace period apply?

If there is a documentation where this is mentioned, do let me know.

Answer 1

@arvis Thanks for posting in our Q&A.
By researching, I find that If a device has multiple compliance policies, and the device has different compliance statuses for two or more of the assigned compliance policies, then a single resulting compliance status is assigned. This assignment is based on a conceptual severity level assigned to each compliance status.

When a device has multiple compliance policies, then the highest severity level of all the policies is assigned to that device. Please refer to:
https://learn.microsoft.com/en-us/mem/intune/protect/create-compliance-policy#assign-a-resulting-compliance-policy-status

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.