You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: memdocs/intune/protect/compliance-policy-monitor.md
+11-11Lines changed: 11 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,13 +1,13 @@
1
1
---
2
2
# required metadata
3
3
4
-
title: Monitor device compliance policies in Microsoft Intune
5
-
description: Use the device compliance dashboard to monitor overall device compliance, view reports, and view per-policy and per-setting device compliance.
4
+
title: Monitor results of your device compliance policies in Microsoft Intune
5
+
description: Use the device compliance dashboard to understand overall device compliance the per-policy and per-setting device compliance results.
6
6
keywords:
7
7
author: brenduns
8
8
ms.author: brenduns
9
9
manager: dougeby
10
-
ms.date: 04/15/2021
10
+
ms.date: 05/02/2022
11
11
ms.topic: how-to
12
12
ms.service: microsoft-intune
13
13
ms.subservice: protect
@@ -18,7 +18,7 @@ ms.localizationpriority: high
18
18
#ROBOTS:
19
19
#audience:
20
20
21
-
ms.reviewer: samyada
21
+
ms.reviewer: tycast
22
22
ms.suite: ems
23
23
search.appverid: MET150
24
24
#ms.tgt_pltfrm:
@@ -27,9 +27,9 @@ ms.collection:
27
27
- M365-identity-device-management
28
28
- highpri
29
29
---
30
-
# Monitor Intune Device compliance policies
30
+
# Monitor results of your Intune Device compliance policies
31
31
32
-
Compliance reports help you review device compliance and troubleshoot compliance-related issues in your organization. Using these reports, you can view information on:
32
+
Compliance reports help you understand when devices fail to meet your compliance configurations and can help you identify compliance-related issues in your organization. Using these reports, you can view information on:
33
33
34
34
- The overall compliance states of devices
35
35
- The compliance status for an individual setting
@@ -72,7 +72,7 @@ Descriptions of the different device compliance policy states:
72
72
73
73
-**Compliant**: The device successfully applied one or more device compliance policy settings.
74
74
75
-
-**In-grace period:** The device is targeted with one or more device compliance policy settings. But, the user hasn't applied the policies yet. This status means the device is not-compliant, but it's in the grace-period defined by the admin.
75
+
-**In-grace period:** The device is targeted with one or more device compliance policy settings. But, the user hasn't applied the policies yet. This status means the device is not-compliant, but it's in the graceperiod defined by the admin.
76
76
77
77
- Learn more about [Actions for noncompliant devices](actions-for-noncompliance.md).
78
78
@@ -96,17 +96,17 @@ Descriptions of the different device compliance policy states:
96
96
> [!IMPORTANT]
97
97
> Devices that are enrolled into Intune, but not targeted by any device compliance policies are included in this report under the **Compliant** bucket.
98
98
99
-
#### Device behavior with a compliance settings in Error state
99
+
#### Device behavior with a compliance setting in Error state
100
100
101
-
When a setting for a compliance policy returns a value of **Error**, the existing compliance state on the device remains unaffected for up to seven days to allow time for the compliance calculation to complete correctly for that setting. Within those seven days, the device's existing compliance status continues to apply until the compliance policy setting evaluates as **Compliant** or **Not compliant**. If after seven days, the setting still has a status of **Error**, the device becomes **Not compliant** immediately. Note that grace periods do not apply to compliance policies with a setting in an **Error** state.
101
+
When a setting for a compliance policy returns a value of **Error**, the compliance state of the device remains unchanged for up to seven days to allow time for the compliance calculation to complete correctly for that setting. Within those seven days, the device's existing compliance status continues to apply until the compliance policy setting evaluates as **Compliant** or **Not compliant**. If a setting still has a status of **Error** after seven days, the device becomes **Not compliant** immediately. Grace periods don't apply to compliance policies with a setting in an **Error** state.
102
102
103
103
##### Examples:
104
104
105
105
- A device is initially marked **Compliant**, but then a setting in one of the compliance policies targeted to the device reports **Error**. After three days, compliance evaluation completes successfully and the setting now reports **Not compliant**. The user can continue to use the device to access Conditional Access-protected resources within the first three days after the setting states changes to **Error**, but once the setting returns **Not compliant**, the device is marked **Not compliant** and this access is removed until the device becomes **Compliant** again.
106
106
107
107
- A device is initially marked **Compliant**, but then a setting in one of the compliance policies targeted to the device reports **Error**. After three days, compliance evaluation completes successfully, the setting returns **Compliant**, and the device's compliance status becomes **Compliant**. The user is able to continue to access Conditional Access protected resources without interruption.
108
108
109
-
- A device is initially marked **Compliant**, but then a setting in one of the compliance policies targeted to the device reports **Error**. The user is able to access Conditional Access protected resources for seven days, but after seven days, the compliance setting still returns **Error**. At this point, the device becomes Not compliant immediately and the user loses access to the protected resources until the device becomes **Compliant** – even if there is a grace period set for the applicable compliance policy.
109
+
- A device is initially marked **Compliant**, but then a setting in one of the compliance policies targeted to the device reports **Error**. The user is able to access Conditional Access protected resources for seven days, but after seven days, the compliance setting still returns **Error**. At this point, the device becomes Not compliant immediately and the user loses access to the protected resources until the device becomes **Compliant** – even if there's a grace period set for the applicable compliance policy.
110
110
111
111
- A device is initially marked **Not compliant**, but then a setting in one of the compliance policies targeted to the device reports Error. After three days, compliance evaluation completes successfully, the setting returns **Compliant**, and the device's compliance status becomes **Compliant**. The user is prevented from accessing Conditional Access protected resources for the first three days (while the setting returns **Error**). Once the setting returns **Compliant** and the device is marked **Compliant**, the user can begin to access protected resources on the device.
112
112
@@ -217,7 +217,7 @@ This feature is included in the device status reporting:
217
217
218
218
Policy conflicts can occur when multiple Intune policies are applied to a device. If the policy settings overlap, Intune resolves any conflicts by using the following rules:
219
219
220
-
- If the conflicting settings are from an Intune configuration policy and a compliance policy, the settings in the compliance policy take precedence over the settings in the configuration policy. This happens even if the settings in the configuration policy are more secure.
220
+
- If the conflict is between settings from an Intune configuration policy and a compliance policy, the settings in the compliance policy take precedence over the settings in the configuration policy. This result happens even if the settings in the configuration policy are more secure.
221
221
222
222
- If you have deployed multiple compliance policies, Intune uses the most secure of these policies.
0 commit comments