Additional Microsoft Entra services and features related to identity, access, and network security
The error indicates that a conditional access or device compliance policy requires the device to be in a specific state (for example, domain_joined) that the current device does not meet. As a result, access to the security page is blocked.
To resolve this, follow these steps:
- Make sure the device is correctly joined to the organization’s network/domain and is considered compliant:
- Sign in to Windows with the work or school account (for example,
******@contoso.com). - Connect to the organization’s network via VPN or DirectAccess if working remotely.
- Press Windows logo key + L to lock the device, then unlock it with the same work or school account.
- Try accessing the security page again.
- Sign in to Windows with the work or school account (for example,
- If the device is a personal device or cannot be domain-joined, contact the organization’s helpdesk or IT administrator. They must either:
- Confirm the device is enrolled and compliant according to their policy, or
- Adjust the conditional access/device compliance policy if personal or non-domain-joined devices should be allowed.
If the issue persists after confirming domain join and network connection, only the organization’s IT/admin team can change or relax the policy that is enforcing the unsupported required device state.
References: