Skip to content

Commit b637119

Browse files
committed
KPI driven review and update
1 parent 999bfbc commit b637119

1 file changed

Lines changed: 11 additions & 11 deletions

File tree

memdocs/intune/protect/compliance-policy-monitor.md

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,13 @@
11
---
22
# required metadata
33

4-
title: Monitor device compliance policies in Microsoft Intune
5-
description: Use the device compliance dashboard to monitor overall device compliance, view reports, and view per-policy and per-setting device compliance.
4+
title: Monitor results of your device compliance policies in Microsoft Intune
5+
description: Use the device compliance dashboard to understand overall device compliance the per-policy and per-setting device compliance results.
66
keywords:
77
author: brenduns
88
ms.author: brenduns
99
manager: dougeby
10-
ms.date: 04/15/2021
10+
ms.date: 05/02/2022
1111
ms.topic: how-to
1212
ms.service: microsoft-intune
1313
ms.subservice: protect
@@ -18,7 +18,7 @@ ms.localizationpriority: high
1818
#ROBOTS:
1919
#audience:
2020

21-
ms.reviewer: samyada
21+
ms.reviewer: tycast
2222
ms.suite: ems
2323
search.appverid: MET150
2424
#ms.tgt_pltfrm:
@@ -27,9 +27,9 @@ ms.collection:
2727
- M365-identity-device-management
2828
- highpri
2929
---
30-
# Monitor Intune Device compliance policies
30+
# Monitor results of your Intune Device compliance policies
3131

32-
Compliance reports help you review device compliance and troubleshoot compliance-related issues in your organization. Using these reports, you can view information on:
32+
Compliance reports help you understand when devices fail to meet your compliance configurations and can help you identify compliance-related issues in your organization. Using these reports, you can view information on:
3333

3434
- The overall compliance states of devices
3535
- The compliance status for an individual setting
@@ -72,7 +72,7 @@ Descriptions of the different device compliance policy states:
7272

7373
- **Compliant**: The device successfully applied one or more device compliance policy settings.
7474

75-
- **In-grace period:** The device is targeted with one or more device compliance policy settings. But, the user hasn't applied the policies yet. This status means the device is not-compliant, but it's in the grace-period defined by the admin.
75+
- **In-grace period:** The device is targeted with one or more device compliance policy settings. But, the user hasn't applied the policies yet. This status means the device is not-compliant, but it's in the grace period defined by the admin.
7676

7777
- Learn more about [Actions for noncompliant devices](actions-for-noncompliance.md).
7878

@@ -96,17 +96,17 @@ Descriptions of the different device compliance policy states:
9696
> [!IMPORTANT]
9797
> Devices that are enrolled into Intune, but not targeted by any device compliance policies are included in this report under the **Compliant** bucket.
9898
99-
#### Device behavior with a compliance settings in Error state
99+
#### Device behavior with a compliance setting in Error state
100100

101-
When a setting for a compliance policy returns a value of **Error**, the existing compliance state on the device remains unaffected for up to seven days to allow time for the compliance calculation to complete correctly for that setting. Within those seven days, the device's existing compliance status continues to apply until the compliance policy setting evaluates as **Compliant** or **Not compliant**. If after seven days, the setting still has a status of **Error**, the device becomes **Not compliant** immediately. Note that grace periods do not apply to compliance policies with a setting in an **Error** state.
101+
When a setting for a compliance policy returns a value of **Error**, the compliance state of the device remains unchanged for up to seven days to allow time for the compliance calculation to complete correctly for that setting. Within those seven days, the device's existing compliance status continues to apply until the compliance policy setting evaluates as **Compliant** or **Not compliant**. If a setting still has a status of **Error** after seven days, the device becomes **Not compliant** immediately. Grace periods don't apply to compliance policies with a setting in an **Error** state.
102102

103103
##### Examples:
104104

105105
- A device is initially marked **Compliant**, but then a setting in one of the compliance policies targeted to the device reports **Error**. After three days, compliance evaluation completes successfully and the setting now reports **Not compliant**. The user can continue to use the device to access Conditional Access-protected resources within the first three days after the setting states changes to **Error**, but once the setting returns **Not compliant**, the device is marked **Not compliant** and this access is removed until the device becomes **Compliant** again.
106106

107107
- A device is initially marked **Compliant**, but then a setting in one of the compliance policies targeted to the device reports **Error**. After three days, compliance evaluation completes successfully, the setting returns **Compliant**, and the device's compliance status becomes **Compliant**. The user is able to continue to access Conditional Access protected resources without interruption.
108108

109-
- A device is initially marked **Compliant**, but then a setting in one of the compliance policies targeted to the device reports **Error**. The user is able to access Conditional Access protected resources for seven days, but after seven days, the compliance setting still returns **Error**. At this point, the device becomes Not compliant immediately and the user loses access to the protected resources until the device becomes **Compliant** – even if there is a grace period set for the applicable compliance policy.
109+
- A device is initially marked **Compliant**, but then a setting in one of the compliance policies targeted to the device reports **Error**. The user is able to access Conditional Access protected resources for seven days, but after seven days, the compliance setting still returns **Error**. At this point, the device becomes Not compliant immediately and the user loses access to the protected resources until the device becomes **Compliant** – even if there's a grace period set for the applicable compliance policy.
110110

111111
- A device is initially marked **Not compliant**, but then a setting in one of the compliance policies targeted to the device reports Error. After three days, compliance evaluation completes successfully, the setting returns **Compliant**, and the device's compliance status becomes **Compliant**. The user is prevented from accessing Conditional Access protected resources for the first three days (while the setting returns **Error**). Once the setting returns **Compliant** and the device is marked **Compliant**, the user can begin to access protected resources on the device.
112112

@@ -217,7 +217,7 @@ This feature is included in the device status reporting:
217217

218218
Policy conflicts can occur when multiple Intune policies are applied to a device. If the policy settings overlap, Intune resolves any conflicts by using the following rules:
219219

220-
- If the conflicting settings are from an Intune configuration policy and a compliance policy, the settings in the compliance policy take precedence over the settings in the configuration policy. This happens even if the settings in the configuration policy are more secure.
220+
- If the conflict is between settings from an Intune configuration policy and a compliance policy, the settings in the compliance policy take precedence over the settings in the configuration policy. This result happens even if the settings in the configuration policy are more secure.
221221

222222
- If you have deployed multiple compliance policies, Intune uses the most secure of these policies.
223223

0 commit comments

Comments
 (0)