2023E12 - Configuring Compliance Policies with Intune (I.T)

Steve and Adam cover the basics of configuring Intune compliance policies then testing them.
Visit our websites and social media for more or to get in touch with us
Steven Hosking - Microsoft MMD Team
/ onpremcloudguy
github.com/onp...
Adam Gross - Microsoft MVP - Enterprise Mobility
/ adamgrosstx
www.asquaredoz...
github.com/Ada...
mvp.microsoft....
Ben Reader - Microsoft MVP - Enterprise Mobility
/ powers_hell
www.powers-hel...
github.com/tab...
mvp.microsoft....
Jóhannes Geir Kristjansson - Microsoft MVP - Enterprise Mobility
/ jgkps
/ j%c3%b3hannes-geir-kri...
mvp.microsoft....

[@wmpp]

Great content, fellas. I find a lot of value in your conversations that go off-track.

[@kill3r94]

Love this guys thank you! Really looking forward to the Conditional Access Video! That's my next step in my journey and I have been eagerly waiting for that one!

[@danpowell7421]

I do enjoy watching these Videos. What I particularly like is the times you get caught out by a UI change or a setting that causes a MacBook to get locked :D It's reassuring to know these things even happens to the best of us.

[@danpowell7421]

I've been caught out by not getting into the compliance policy when you go into device > compliance settings. If you click on the compliance policy you want to check a few times it does take you to the next page.

[@jmanuelng]

Happy anniversary Adam! 😁😁

[@DamagedDingo]

Sleep over! *nervously looks around room for Steve and Adam* I tried compliance policy to block non-compliant or byod devices last week but failed so looking forward to this video but do wonder how this is the third video in a row on a topic I was just getting too. *edit: I woke up literally 5 minutes ago and mixed compliance with conditional access. My bad.

[@vladgrigoroiu5335]

Thank you! Great video as always! I was wondering if at some point you would be able to organise a video around BYOD and BYOPC with MAM protection policies best practices for these. (unless there is already one which I have missed)

[@IntuneTraining]

We may get into MAM at some point in the future. Not sure how close we will get on the BYOD area - at least not on the Windows side - it’s just not ideal. I don’t recall if we ever did any MAM in the past 4 seasons or not honestly.

[@IntuneTraining]

Yes - here you go. This is our original CA video and it includes iOS MAM policy configs. See if this helps. kzbin.info/www/bejne/g6OTpaasjrmAl5Isi=0nfSEf3DsR03cleT

[@TheShackdaddy]

Great video. Was reading a recent Rudy Ooms article when he says that you should usually be targeting users, not devices, with Compliance policies, due to some problem he describes: "When assigning it to a device group or “All devices” instead of a user group you could end with the “system account” not being compliant as we also could notice with the built-in Device Compliance Policy" -- What's your take on that?

[@andrewenglish3810]

What happens if you have Windows 11 and 10 workstations in your environment how do add both build numbers to the device properties?

[@martinzonderland1543]

Question about the Password Compliance section, is it possible there's a difference for BYOD and Corporate devices of this setting/behaviour? Because Corporate Devices are Entra/Domain Joined, most of times password Policy is setup on Entra/Domain, but with BYOD they are using a Local Account on the device (or M365 Personal Account) to logon.

[@AnthGags333]

Hey, thankling you for your content, could we place this in the Intune Training Playlist please?

[@IntuneTraining]

We have a playlist for the reboot - Season 5. Added to the Intune Training playlist as well.

[@shivprasadkaragi6761]

When i set block to simple password. And it is numeric 6 digit password. Please help me with rules to set complex password here.

[@jonnyg81]

Never use All devices or All users. Terrible practice and design. Block all access by default and only allow specific users/devices based on membership, dynamic device groups and conditions (for CA)

[@IntuneTraining]

We generally call this out in demos where we have assignments - for demos in the lab we use All Devices or All Users but always recommend making groups and avoiding the built in groups.