How to fix Has Compliance Policy Assigned Issue

Question

Hi Team

We have some non compliance devices under "Has Compliance Policy Assigned Issue" compliance built in policy. As checked. It is due to the device enrolled by users has left the organization and user account is blocked. As, it is still showing enrolled state for the non compliance by XYZ user name. Which user has left the organization.

Can we change enrolled by user. If the user has left the organization?

Answer 1

I am able to reproduce this at-will without using a expired, departed or disabled user account. The account is alive and well and yet this occurs.

1. Use MDT to image a machine
2. Perform an Azure AD join using a Provisioning Package which uses a bulk enrollment token
3. Device shows in AAD and Intune
4. Intune reports the Device is not compliant:
   1. 

I don't quite understand why that's the case.

Answer 2

You can only change Primary User, I wonder why that wouldn't be enough for Compliance? You can also change the management name, not sure does it have any affect, I think not. I think the original idea of autopilot and enrollment is, that when user leaves the company, computer is always re-installed for security reason. That's why there is no direct solution to your scenario.

Answer 3

Devices must have at least one compliance policy assigned to be complaint.

Answer 4

Agree to Vishal, no compliance policy is assigned to user which is throwing this error.

Microsoft Intune Admin center > devices> compliance> check if any policy is assigned to this user., if not assign the relevant one.