Compliance

Question

Hi,

When you create a compliance for windows 10 should this be assigned to users or the device ?
I have always assigned it to devices, but someone told me to assign this to the user instead.
Is there any documentation from MS that shows that this should be assigned either to device or user ?

Thanks for reply

/R
Andy

Answer 1

Both are valid. From https://learn.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started#device-compliance-policies:

Deploy to users in user groups or devices in device groups. When a compliance policy is deployed to a user, all the user's devices are checked for compliance. Using device groups in this scenario helps with compliance reporting.