Managing Devices in Non-Compliant State with Intune Compliance Grace Period

Explore Our Microsoft Intune Training →

Intune provides a grace period for non-compliant devices to help IT admins manage compliance effectively. In this article, we walk you through the process of configuring grace periods per compliance policy, setting up email notifications for non-compliant users, monitoring grace period devices in Intune reports, and using Conditional Access to enforce compliance.

How Intune Compliance Grace Periods Work

Intune allows you to set a specific time frame (grace period) during which non-compliant devices are still considered compliant. During this period, users can remediate the issues causing non-compliance without being affected by actions such as notifications, retire, or wipe.

Configuring Grace Periods Per Compliance Policy

To configure a grace period for a compliance policy:

  • Navigate to `Devices > Compliance policies > Create a new policy`.
  • Select the platform (Windows, iOS/iPadOS, or Android).
  • Set up your policy requirements and rules.
  • Go to `Actions` and choose `Configure user notifications` and `Configure device actions`.
  • Under `Grace period`, specify the duration for which the non-compliant devices will be considered compliant.
  • Save the policy.

Actions for Non-Compliance

When the grace period expires, the specified actions (notifications, retire, or wipe) will take effect on the non-compliant devices.

Monitoring Devices in Grace Period Status

Intune provides reports to monitor devices in a grace period. You can access these reports under `Devices > Monitor > Compliance status` and `Reports`.

Using Conditional Access to Enforce Compliance Before Grace Period Expires

You can use Conditional Access policies to enforce compliance before the grace period expires. This ensures that devices remain compliant at all times.

Key Takeaway: Apply the steps and concepts in this post to strengthen your Microsoft IT environment. Ready to go deeper? Explore our hands-on training below.

Explore Our Microsoft Intune Training →

Written by Mohammed Akhter

Founder of ITP Training. 50,000+ students trained across 30+ countries in Microsoft endpoint and cloud security. Learn more →