question

ConorTresloveHayes-2338 avatar image
0 Votes"
ConorTresloveHayes-2338 asked saldana-msft edited

Comanagement compliance issues

Hi all,



Bit of a weird one, I have enabled the Intune Policy "Require compliance from ConfigMgr". When this is set, it returns non-compliant and so does software center. However, according to control panel my device is compliant.

Screenshots are attached of the messages.
92415-configmgr-noncompliant.png
92552-configmgr-compliant.png

Has anyone had this before? I am at a loss.

If I set co management back to ConfigMgr for compliance only, Software center reports all is ok.


Cheers,

Conor





mem-cm-generalmem-intune-general
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Jason-MSFT avatar image
0 Votes"
Jason-MSFT answered Jason-MSFT commented

You need to review why Intune notes the devices as non-compliance in the MEM admin center.

Here's a very nice post walking through this end to end: https://www.jeffgilb.com/require-configuration-manager-compliance/

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I have read through this previously.
It seems a bug to me, as (as above) from control panel the device seems to be compliant but software center and intune says differently. When I remove this compliance policy, software center says all is fine.

Think its time I raise (another) ticket for intune.

0 Votes 0 ·
Jason-MSFT avatar image Jason-MSFT ConorTresloveHayes-2338 ·

A support case is certainly the correct path here.

0 Votes 0 ·
LuDaiMSFT-0289 avatar image
0 Votes"
LuDaiMSFT-0289 answered LuDaiMSFT-0289 commented

@ConorTresloveHayes-2338 Thanks for posting in our Q&A.

For the screen shot you provided, it shows that the device is complicant in SCCM. To clarify this issue, we appreciate your help to collect some information:
1.Please check if the device is compliant in intune portal.
2.If the device is not compliant in intune portal, please click on the device > device compliance to find specific not-compliance items. We can refer to the following link:
https://docs.microsoft.com/en-us/mem/intune/protect/compliance-policy-monitor#device-details

If there is anything update, feel free to let us know.


Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi there,

The device is not compliant in the Intune portal. The only compliance policy set, is "Require device compliance from Configuration manager".
RE the screenshot, what does the first message show then? Is this not related to compliance and be ignored?

I only see the issue when I set compliance to Intune. If I revert back to ConfigMgr, the message goes away and all is ok.

Thanks

0 Votes 0 ·
LuDaiMSFT-0289 avatar image LuDaiMSFT-0289 ConorTresloveHayes-2338 ·

@ConorTresloveHayes-2338 Thanks for your update.

From intune's point of view, if you just configure the setting "Require compliance from ConfigMgr", the compliance status in SCCM and intune will be the same. However, they are not same. Based my understanding, the compliance status in software center can't be ignored.

Given this situation, it is needed to check more background information such as do log analysis. With Q&A limitation, Q&A is not the best channel for log analysis case. So we suggest to open a case to check on this. It is free. The following link describes how to open a case, we can refer to it:
https://docs.microsoft.com/en-us/mem/intune/fundamentals/get-support

Hope this issue will be solved as soon as possible.

0 Votes 0 ·