Skip to main content
Version: 2.1.1-preview

MT.1054 - Ensure built-in Device Compliance Policy marks devices with no compliance policy assigned as 'Not compliant'

Overview​

Ensure the built-in Device Compliance Policy marks devices with no compliance policy assigned as 'Not compliant'.

Set your Intune built-in Device Compliance Policy to mark devices with no compliance policy assigned as 'Not compliant'. This ensures that new devices that do not have any policies assigned are not compliant per default.

Remediation action:​

To change the built-in device compliance policy:

  1. Navigate to Microsoft Intune admin center.
  2. Click Devices scroll down to Manage devices.
  3. Select Compliance and Select Compliance settings.
  4. Set Mark devices with no compliance policy assigned as to Not compliant
  5. Click Save.

Test Metadata​

FieldValue
Test IDMT.1054
SeverityMedium
SuiteM365 Advisor
CategoryIntune
PowerShell testTest-MtDeviceComplianceSettings
TagsIntune, M365Advisor, MT.1054

Remediation​

To change the built-in device compliance policy:

  1. Navigate to Microsoft Intune admin center.
  2. Click Devices scroll down to Manage devices.
  3. Select Compliance and Select Compliance settings.
  4. Set Mark devices with no compliance policy assigned as to Not compliant
  5. Click Save.

Source​

  • Pester test: tests/M365Advisor/Intune/Test-MtIntunePlatform.Tests.ps1
  • PowerShell source: powershell/public/M365Advisor/intune/Test-MtDeviceComplianceSettings.ps1