Intune Policy Conflicts for Grace Periods

arvis 21 Reputation points
2021-08-17T15:20:06.477+00:00

Hi,
I was wondering how MS365 handles the following: a device falls under multiple compliance policies. But each policy has a different grace period. As per the documentation, in general, the more secure configuration would apply. But for grace periods what takes priority:

  • does the grace period of the first policy apply?
  • does the smaller grace period apply?
  • does the higher grace period apply?

If there is a documentation where this is mentioned, do let me know.

Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,749 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Jarvis Sun-MSFT 10,101 Reputation points Microsoft Vendor
    2021-08-18T07:26:28.307+00:00

    @arvis Thanks for posting in our Q&A.
    By researching, I find that If a device has multiple compliance policies, and the device has different compliance statuses for two or more of the assigned compliance policies, then a single resulting compliance status is assigned. This assignment is based on a conceptual severity level assigned to each compliance status.

    When a device has multiple compliance policies, then the highest severity level of all the policies is assigned to that device. Please refer to:
    https://learn.microsoft.com/en-us/mem/intune/protect/create-compliance-policy#assign-a-resulting-compliance-policy-status


    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.