2023E12 - Configuring Compliance Policies with Intune (I.T)

[@wmpp]

Great content, fellas. I find a lot of value in your conversations that go off-track.

[@kill3r94]

Love this guys thank you! Really looking forward to the Conditional Access Video! That's my next step in my journey and I have been eagerly waiting for that one!

[@danpowell7421]

I do enjoy watching these Videos. What I particularly like is the times you get caught out by a UI change or a setting that causes a MacBook to get locked :D It's reassuring to know these things even happens to the best of us.

[@danpowell7421]

I've been caught out by not getting into the compliance policy when you go into device > compliance settings. If you click on the compliance policy you want to check a few times it does take you to the next page.

[@jmanuelng]

Happy anniversary Adam! 😁😁

[@DamagedDingo]

Sleep over! *nervously looks around room for Steve and Adam* I tried compliance policy to block non-compliant or byod devices last week but failed so looking forward to this video but do wonder how this is the third video in a row on a topic I was just getting too. *edit: I woke up literally 5 minutes ago and mixed compliance with conditional access. My bad.

[@andrewenglish3810]

What happens if you have Windows 11 and 10 workstations in your environment how do add both build numbers to the device properties?

[@vladgrigoroiu5335]

Thank you! Great video as always! I was wondering if at some point you would be able to organise a video around BYOD and BYOPC with MAM protection policies best practices for these. (unless there is already one which I have missed)

[@IntuneTraining]

We may get into MAM at some point in the future. Not sure how close we will get on the BYOD area - at least not on the Windows side - it’s just not ideal. I don’t recall if we ever did any MAM in the past 4 seasons or not honestly.

[@IntuneTraining]

Yes - here you go. This is our original CA video and it includes iOS MAM policy configs. See if this helps. kzbin.info/www/bejne/g6OTpaasjrmAl5Isi=0nfSEf3DsR03cleT

[@martinzonderland1543]

Question about the Password Compliance section, is it possible there's a difference for BYOD and Corporate devices of this setting/behaviour? Because Corporate Devices are Entra/Domain Joined, most of times password Policy is setup on Entra/Domain, but with BYOD they are using a Local Account on the device (or M365 Personal Account) to logon.

[@TheShackdaddy]

Great video. Was reading a recent Rudy Ooms article when he says that you should usually be targeting users, not devices, with Compliance policies, due to some problem he describes: "When assigning it to a device group or “All devices” instead of a user group you could end with the “system account” not being compliant as we also could notice with the built-in Device Compliance Policy" -- What's your take on that?

[@shivprasadkaragi6761]

When i set block to simple password. And it is numeric 6 digit password. Please help me with rules to set complex password here.

[@AnthGags333]

Hey, thankling you for your content, could we place this in the Intune Training Playlist please?

[@IntuneTraining]

We have a playlist for the reboot - Season 5. Added to the Intune Training playlist as well.

[@jonnyg81]

Never use All devices or All users. Terrible practice and design. Block all access by default and only allow specific users/devices based on membership, dynamic device groups and conditions (for CA)

[@IntuneTraining]

We generally call this out in demos where we have assignments - for demos in the lab we use All Devices or All Users but always recommend making groups and avoiding the built in groups.