2016345612(Syncml(500) - Intune Compliance Policy Error
We have had this recurring issue for a long time now, and despite searching the error all over the place, there seem to be a lot of other IT professionals in the same boat, but no obvious answers. The error is on the Anti-Virus setting on the default…
Device compliance in multitenant for CSP
Hello all, I have two existing tenants: TenantA - Work tenant, containing all my data and services and my work account TenantB - Admin tenant, containing our tools for our IT activity toward our customers and my admin account. Let say work@tenantA…
Microsoft O365 Group Mailbox only retention
Hi, I need to create a retention policy to delete emails older than 1 month from O365 group email. Already created a retention policy in Purview and changed the application attribute Like this from Powershell --> Set-RetentionCompliancePolicy…
2016281112 Remediation failed
Hello everyone, I have the problem, that only a few of our companies devices get marked as noncompliant with a "2016281112 (Remediation failed)" for the system account. It's only for the minimum password length as well. Most other devices work…
Implementing EPAC (ISO 270001) using Terraform
Hello Everyone , My company is using CAF to manage policies on Azure infrastructure. Now they want to switch to EPAC for better policy management. This is our first time for implementing EPAC. Have below queries for which need suggestion. How to decide…
Restricting Access to a Web Application Based on Device Compliance with Intune and Azure AD
I am currently using Microsoft Intune to manage access to a third-party web application that has been registered as a web link app type. I have successfully added the application in Intune, and it appears in the Company Portal. However, users can share…
Conditional access for mobiles: Android and iOS
Hi everyone, I am asking for support, When I try to add a business account in a native application such as gmail on an unregistered cell phone, after specifying only the business email address and domain password = access is not possible (correct…
How to Restrict Access to a Web Application Based on Device Compliance Using Intune and Azure AD?
I am currently using Microsoft Intune to manage access to a third-party web application that I have registered as a web link app type. I’ve successfully added the application in Intune, and it appears in the Company Portal. However, I am facing an issue…
How to fix Has Compliance Policy Assigned Issue
Hi Team We have some non compliance devices under "Has Compliance Policy Assigned Issue" compliance built in policy. As checked. It is due to the device enrolled by users has left the organization and user account is blocked. As, it is still…
What API or PowerShell cmdlet can be used to collect Microsoft compliance manager score data?
To collect Compliance Manager score data, you can utilize the Microsoft Graph API or PowerShell with appropriate cmdlets.
Encryption of data storage on device error 2016345612
Hello, We are using the Windows Security Compliance policy and we are noticing quite a few devices are erroring on the "Encryption of data storage on device" section with the following State details: 2016345612(Syncml(500): the recipient…
How create a alert when login or access the mailbox of a user?
Director tells me that someone has login in your email account. It's possibly created an alert to specify the user mailbox and alerts via send a email to admin groups.
Intune role permission to view 'Default Device Compliance Policy'
Hi, Please can someone advise which Intune role permission is required to allow visibility of the 'Default Device Compliance Policy' under the Device compliance page? I have a RBAC role (assigned to a scope tag), with Read and View reports allowed for…
Endpoint DLP still shows disabled even after onboarding the device in MDE
I've seen somewhere that onboarding the device in MDE won't be requiring to onboard the device to Purview portal for DLP to work but below image shows that my Endpoint DLP Status is disabled. Take note that these machines are non-domain joined. In the…
Microsoft Purview
Hello, I'm trying to determine if Microsoft Purview will work as a back-office system to store business manuals, standard operating procedures, and documents. Could someone please provide advice on whether this is a great platform to use for creating…
Action 'Get-LabelPolicy' and 'Get-AutoSensitivityLabelPolicy' by User '<SNIP-PII>'
We have been receiving detections related to User Access Sensitivity Label Policy with actions stating these commands have been executed 'Get-LabelPolicy' and 'Get-AutoSensitivityLabelPolicy'. The user.id associated with it is named '<SNIP-PII>' …
Intune Devices failing Default Windows Compliance Policy, Encryption of data storage on device error
I have a large number of devices with this error. I have not been able to figure out how to resolve it in order to bring these devices into compliance.
Feature request device compliance reports
I would like to see at Reports > Device Compliance, to not see only the devices that are not compliant, but also see the reason why the device is not compliant. Now i have to navigate to every single device to see what the reason is why it is not…
Intune ios device shows not evaluated on overview but shows compliant in device compliance
We recently setup Intune and have enrolled a couple of devices using the webenrollment method. The devices will enroll but they remain Not Evaluated on the overview page. When I go to device compliance it shows the default device compliance policy as…
unable to create work profile in my Oneplus-Nord 2T mobile phone
I am facing problem while setting 'company portal work profile'. My phone model- Oneplus Nord-2T, Android 14 version, Oxygen OS. While setting the app it is showing '' we are unable to create your work profile. Your device might not support work profile…