Skip to main content
Version: 2.1.1-preview

MT.1054 - Ensure built-in Device Compliance Policy marks devices with no compliance policy assigned as 'Not compliant'

Henrik PiechaMerill FernandoBen MilesThomas SchmidtSam ErdeNicola Suter
Contributed by Henrik Piecha with 5 co-contributorsAll contributors →

Overview​

Ensure the built-in Device Compliance Policy marks devices with no compliance policy assigned as 'Not compliant'.

Set your Intune built-in Device Compliance Policy to mark devices with no compliance policy assigned as 'Not compliant'. This ensures that new devices that do not have any policies assigned are not compliant per default.

Remediation action:​

To change the built-in device compliance policy:

  1. Navigate to Microsoft Intune admin center.
  2. Click Devices scroll down to Manage devices.
  3. Select Compliance and Select Compliance settings.
  4. Set Mark devices with no compliance policy assigned as to Not compliant
  5. Click Save.

Test Metadata​

FieldValue
Test IDMT.1054
SeverityMedium
SuiteMaester
CategoryIntune
PowerShell testTest-MtDeviceComplianceSettings
TagsIntune, Maester, MT.1054

Source​

  • Pester test: tests/Maester/Intune/Test-MtIntunePlatform.Tests.ps1
  • PowerShell source: powershell/public/maester/intune/Test-MtDeviceComplianceSettings.ps1