MT.1054 - Ensure built-in Device Compliance Policy marks devices with no compliance policy assigned as 'Not compliant'

Overview

Ensure the built-in Device Compliance Policy marks devices with no compliance policy assigned as 'Not compliant'.

Set your Intune built-in Device Compliance Policy to mark devices with no compliance policy assigned as 'Not compliant'. This ensures that new devices that do not have any policies assigned are not compliant per default.

Remediation action:

To change the built-in device compliance policy:

1. Navigate to Microsoft Intune admin center.
2. Click Devices scroll down to Manage devices.
3. Select Compliance and Select Compliance settings.
4. Set Mark devices with no compliance policy assigned as to Not compliant
5. Click Save.

Related links

• Microsoft 365 Admin Center
• Microsoft Intune - Compliance
• Compliance policy settings

Test Metadata

Field	Value
Test ID	MT.1054
Severity	Medium
Suite	Maester
Category	Intune
PowerShell test	Test-MtDeviceComplianceSettings
Tags	Intune, Maester, MT.1054

Source

• Pester test: tests/Maester/Intune/Test-MtIntunePlatform.Tests.ps1
• PowerShell source: powershell/public/maester/intune/Test-MtDeviceComplianceSettings.ps1