Device Compliance Report
Policy compliance status, non-compliant devices, and compliance trends over time across all Intune-managed devices.
Overview
The Device Compliance Report shows the compliance status of all managed devices against your configured compliance policies. Identify non-compliant devices, understand the reasons for non-compliance, and track compliance improvements over time.
Report Columns
| Column | Description |
|---|---|
| Device Name | Name of the managed device |
| User | Primary user of the device |
| Platform | Windows, iOS, Android, or macOS |
| OS Version | Operating system version |
| Compliance Status | Compliant, Non-compliant, or Not Evaluated |
| Last Check-in | Most recent device sync with Intune |
| Non-compliance Reason | Specific policy violation(s) |
| Ownership | Corporate or Personal (BYOD) |
Compliance Overview
Aggregate compliance statistics:
- Compliant — Devices meeting all assigned policy requirements
- Non-Compliant — Devices violating one or more compliance rules
- Not Evaluated — Devices pending initial compliance check
- In Grace Period — Non-compliant but within the allowed remediation window
Non-Compliance Reasons
| Policy Violation | Devices | Platform | Severity |
|---|---|---|---|
| OS version out of date | Varies | Windows | Medium |
| BitLocker not enabled | Varies | Windows | High |
| Device jailbroken/rooted | Varies | iOS/Android | Critical |
| Firewall disabled | Varies | Windows/macOS | Medium |
| Antivirus definitions outdated | Varies | Windows | Medium |
Filters
- Tenant — All tenants, specific tenant, or tenant groups
- Platform — Windows, iOS, Android, macOS
- Compliance Status — Compliant, Non-compliant, Not evaluated
- Ownership — Corporate, Personal, Unknown
- Enrollment Type — MDM, MAM, Co-managed
Compliance Actions
For non-compliant devices, available actions include:
- Send notification to the user about non-compliance
- Block access to corporate resources via Conditional Access
- Remotely remediate the issue (e.g., trigger update, enable encryption)
- Retire the device from management if unresolvable
Graph API Data Sources
GET /deviceManagement/deviceCompliancePoliciesGET /deviceManagement/reports/getDeviceNonComplianceReport
API Reference
GET /api/reports/intune/compliance— Get compliance status reportGET /api/reports/intune/compliance/non-compliant— Get non-compliant devicesPOST /api/reports/intune/compliance/export— Export report data
Last updated on