[Intune] Resolve devices that are in a non-compliant state in Microsoft Intune
The platform identifies devices that are in a non-compliant state within Microsoft Intune and recommends immediate remediation. Non-compliant devices may have outdated software, misconfigurations, or fail to adhere to required security policies, increasing the risk of vulnerabilities and data breaches.
Recommendation Impact Across KPIs
| KPI | Impact | Calculated? |
|---|---|---|
| Reliability: | No direct reliability impact identified | ❌ |
| Security Compliance: | PRIMARY REC - Direct impact on organizational security posture and compliance status | ✅ |
| Economic: | No direct economic impact calculated | ❌ |
| User Experience: | Potential impact on device functionality and access to resources | ❌ |
| Environment: | No environmental impact identified | ❌ |
Score Calculation
1. Data Ingestion
- Device compliance state
- Device type (endpoint, mobile)
- Compliance policy assignments
- Current configuration status
2. Data Enrichment
- Mapping to NIST compliance frameworks
- Device compliance history
- Policy requirement mapping
- Configuration baseline comparison
3. Health Score
- Calculate the Health score based on NIST Score * NIST Asset Weight
- Multiplier applied based on length of compliance (Date recommendation became Active)
- Source: DataTable-NIST
Example Graph
Pie chart showing distribution of device compliance states: - Compliant - Noncompliant - Unknown - inGracePeriod - configManager
Business Opportunities
Product Sales Opportunity
This recommendation provides an opportunity to sell additional tools or licenses to support ongoing compliance and security management in Microsoft Intune.
Professional Services Opportunity
Professional services can be offered to resolve non-compliant devices, including addressing outdated software, misconfigurations, and security policy failures to ensure devices are secure and compliant.
Remediation Guidance
To resolve the recommendation the following steps are recommended:
- Develop a Compliance Remediation Plan
- Identify Non-Compliant Devices
- Assess Severity
- Allocate Resources
Set a Timeline
Communicate with End Users
- Notify Affected Users
- Schedule Remediation
- Provide Instructions
Establish IT Support
Execute the Remediation
- Apply Updates & Reconfigurations
- Replace Devices (If Necessary)
- Automate Remediation
Verify Compliance
Post-Remediation Monitoring & Optimization
- Monitor Compliance
- Conduct Periodic Checks
- Collect User Feedback
Supporting Information
Supported Data Sources
- Microsoft Graph API (Intune)
- Microsoft Graph API (Entra)
- Microsoft Graph API (Defender)
Recommendation Categorisation
- Security
- Compliance
- Device Management
Supported Instances
- Endpoints
- Mobile devices
- All asset types returned from API
API Information
- Endpoint: graph.microsoft.com/v1.0/deviceManagement/managedDevices
- Parameter: complianceState