When a device enrolled in Microsoft Intune is flagged as “Not Compliant”

When a device enrolled in Microsoft Intune is flagged as “Not Compliant,” it typically indicates a misalignment with your organization’s compliance policies. To resolve the issue, follow these steps:

---

1. Check Compliance Policy Settings

• Open Microsoft Endpoint Manager Admin Center.
• Go to Devices > Compliance policies.
• Review the policies assigned to the device and ensure the settings align with your organization’s requirements.

---

2. Sync the Device

• On the device:
  • Windows: Go to Settings > Accounts > Access work or school > Select the account > Info > Sync.
  • iOS/Android: Open the Company Portal app and manually initiate a sync.
• Wait a few minutes to see if the compliance status updates.

---

3. Resolve Specific Compliance Issues

Common reasons for non-compliance:

• Password Requirements: Check if the device meets your organization’s password complexity policy.
• OS Updates: Ensure the device is running a supported version of the operating system.
• Device Encryption: Verify that encryption (e.g., BitLocker for Windows or FileVault for macOS) is enabled.
• Firewall/Antivirus: Ensure required security apps or settings are active.

---

4. Review Conditional Access

• If Conditional Access is enforced, ensure the user has met multi-factor authentication (MFA) or other access controls.
• Navigate to Azure Active Directory > Conditional Access to review policies.

---

5. Check Device Management Status

• Verify the device status in Intune:
  • Go to Devices > All devices.
  • Locate the device, and check its compliance status, last sync, and error messages.
• If the device is listed as “Intra ID,” ensure the identity of the user matches the account associated with the device.

---

6. Remove/Re-enroll the Device (if necessary)

If all else fails:

• Unenroll the device:
  • Windows: Go to Settings > Accounts > Access work or school > Disconnect.
  • iOS/Android: Remove the device from the Company Portal app.
• Re-enroll the device using the Company Portal.

---

Let me know if you need detailed instructions for your specific device or additional troubleshooting steps! For consulting email us at [email protected]