question

arvis avatar image
0 Votes"
arvis asked arvis commented

Intune Policy Conflicts for Grace Periods

Hi,
I was wondering how MS365 handles the following: a device falls under multiple compliance policies. But each policy has a different grace period. As per the documentation, in general, the more secure configuration would apply. But for grace periods what takes priority:
- does the grace period of the first policy apply?
- does the smaller grace period apply?
- does the higher grace period apply?

If there is a documentation where this is mentioned, do let me know.



mem-intune-device-configurations
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

JarvisSun-MSFT avatar image
0 Votes"
JarvisSun-MSFT answered arvis commented

@arvis Thanks for posting in our Q&A.
By researching, I find that If a device has multiple compliance policies, and the device has different compliance statuses for two or more of the assigned compliance policies, then a single resulting compliance status is assigned. This assignment is based on a conceptual severity level assigned to each compliance status.

When a device has multiple compliance policies, then the highest severity level of all the policies is assigned to that device. Please refer to:
https://docs.microsoft.com/en-us/mem/intune/protect/create-compliance-policy#assign-a-resulting-compliance-policy-status



If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks @JarvisSun-MSFT - This does not answer my question. Let me explain:

I have seen this document. This document tells you how multiple compliance policies are assessed. But my question was what happens if one compliance policy has a grade period of 10 days and another has 20 days, which policy will be given preference?
- is it 10 days ?
- is it 20 days ?
- is it neither of the above but something else?





0 Votes 0 ·