Edit

Share via


Understand compliance in Configuration Manager

Configuration Manager supports compliance features to help organizations meet national, regional, and industry-specific regulations. Configuration Manager aligns with Microsoft's commitment to data protection, privacy, and compliance, by offering tools to help secure and manage data effectively.

Shared responsibility model

Microsoft ensures that Configuration Manager complies with various industry standards and regulatory frameworks. However, customers are responsible for implementing their data protection and compliance strategies to align with their specific organizational requirements.

Compliance dependencies

Configuration Manager leverages other Microsoft services for compliance, including:

Microsoft Intune capabilities for compliance

Microsoft Intune helps enforce compliance policies and protect organizational data specifically for Intune:

  • Conditional Access: Ensures only compliant devices and apps managed by Intune can access sensitive data. See Conditional Access.
  • Device Compliance Enforcement: Enforces device compliance policies to meet organizational security requirements. See Device Compliance Policies.

For more information about Intune compliance capabilities, visit the Microsoft Intune documentation.

Note

For more information about how to concurrently manage Windows 10 or later devices by using both Configuration Manager and Microsoft Intune, see What is co-management?.

Data encryption

Use Configuration Manager to manage BitLocker Drive Encryption (BDE) for on-premises Windows clients, which are joined to Active Directory. It provides full BitLocker lifecycle management that can replace the use of Microsoft BitLocker Administration and Monitoring. For more information, see Plan for BitLocker management.

Compliance features

Configuration Manager includes several compliance features that help organizations manage device compliance. For more information, see Ensure device compliance with Configuration Manager.