Step-by-Step Guide to Create a Device Compliance Policy

Prerequisites

Before creating a device compliance policy, ensure the following:

• Microsoft Intune Subscription: You must have an active Intune subscription.

• Administrative Access: You need appropriate admin permissions within Microsoft Intune to create and manage compliance policies.

Steps to Create a Device Compliance Policy

1. Sign in to the Microsoft Endpoint Manager Admin Center

1. Open your web browser and go to the Microsoft Endpoint Manager Admin Center.

2. Sign in using your administrator credentials.

2. Navigate to Device Compliance Policies

1. In the left-hand navigation menu, select Devices.

2. Under Policy, choose Compliance policies.

3. Click Create Policy.

3. Select Platform

1. Choose the platform for which you want to create the policy, such as:

   • Windows 10 and later

   • iOS/iPadOS

   • Android

2. Click Create to proceed.

4. Configure Policy Settings

1. Enter a Name for your compliance policy.

2. Optionally, add a Description to explain its purpose.

3. Click Next.

5. Define Compliance Rules

Configure compliance settings under each available category, such as:

• Password Requirements:
  Enforce password complexity, minimum length, and expiration rules.

• Device Health:
  Require devices to be free of malware and ensure encryption is enabled.

• Operating System Version:
  Specify minimum and maximum OS versions allowed on managed devices.

• System Security:
  Require security features such as BitLocker (Windows) or FileVault (macOS).

Click Next once all compliance rules are defined.

6. Actions for Noncompliance

Specify actions to take if a device becomes noncompliant. Common actions include:

• Sending an email notification to the user.

• Marking the device as noncompliant in Intune.

• Remotely locking or restricting device access.

Click Next to continue.

7. Assign the Policy

1. Under Assignments, select the users or groups that the policy will apply to.

2. You can also include or exclude specific groups for targeted deployment.

3. Click Next.

8. Review and Create

1. Review all policy configurations for accuracy.

2. Click Create to finalize and deploy the compliance policy.

Once deployed, Intune will begin evaluating managed devices based on your defined compliance rules.