Intune Compliance Status

Question

Intune Compliance Status

Handian Sudianto 7,441

On intune we can see device compliance status, and for testing purpose i want to test change one device from compliance to noncompliance. How we can make the device to noncompliance?

Rahul Jindal 11,721 Reputation points

2026-07-15T03:33:20.8833333+00:00

You can create another policy with a setting\configuration that you know for sure doesn’t exist on the device. Assign the policy to the device group containing the test device and make sure to exclude the same group from other compliance policies to avoid conflicts. The other option is to modify the settings on your test device purposely to make it non compliant. Hope this helps.
Handian Sudianto 7,441 Reputation points

2026-07-15T06:36:02.2433333+00:00

hi @Rahul Jindal so the compliance not tslking about the security aspec such as antivirus on/off, updated or not or something like that?

1 answer

Your answer

Rahul Jindal 11,721 Reputation points

2026-07-15T03:33:20.8833333+00:00

You can create another policy with a setting\configuration that you know for sure doesn’t exist on the device. Assign the policy to the device group containing the test device and make sure to exclude the same group from other compliance policies to avoid conflicts. The other option is to modify the settings on your test device purposely to make it non compliant. Hope this helps.
Handian Sudianto 7,441 Reputation points

2026-07-15T06:36:02.2433333+00:00

hi @Rahul Jindal so the compliance not tslking about the security aspec such as antivirus on/off, updated or not or something like that?

Answer 1

A device can become noncompliant when it fails one or more assigned compliance policy settings, when the user does not meet the policy requirements, or when the device fails to report compliance within the configured validity period.

A practical test path is:

In the Microsoft Intune admin center, go to Devices > Compliance.
Select the compliance policy assigned to the test device.
Review the policy settings on the Properties tab so the exact requirement to break is known.
On the test device, intentionally violate one assigned requirement from that policy. For example, if the policy requires a compliant configuration such as password complexity, do not meet that requirement.
Wait for the device to check in and report back to Intune. After a device receives and processes the policy, reporting can take up to 24 hours while the device is online.
Return to Devices > Compliance > select the policy > Monitor tab > View report or Device status to confirm the device moved to Noncompliant.

Other supported ways a device can show as noncompliant:

If the tenant setting Mark devices with no compliance policy assigned as is changed to Not compliant, devices without an assigned compliance policy are treated as noncompliant.
- Path: Endpoint security > Device compliance > Compliance policy settings
If the device does not report compliance before the Compliance status validity period (days) expires, Intune treats it as noncompliant.

Notes:

Devices must be enrolled into Intune to receive compliance policies.
Newly enrolled devices can first appear as Not evaluated.
Devices in In-grace period are noncompliant, but still within the grace period defined by the admin.