Compliance Status
Monitor device compliance across your managed fleet. Compliance status shows which devices meet organizational security requirements and which need remediation.
Compliance States
- Compliant — Device meets all assigned compliance policies
- Not Compliant — One or more policy checks failed; may trigger Conditional Access block
- In Grace Period — Non-compliant but within the configured grace period
- Not Evaluated — No compliance policy assigned or pending first evaluation
Policy Compliance Breakdown
| Column | Description |
|---|---|
| Policy Name | Compliance policy name |
| Platform | Windows, macOS, iOS, Android |
| Compliant | Devices passing |
| Non-Compliant | Devices failing |
| In Grace Period | Devices in remediation window |
| Not Evaluated | Devices pending evaluation |
Non-Compliance Reasons
OS Version
Device OS is below the minimum required version.
Password Requirements
Device password does not meet complexity, length, or expiration requirements.
Encryption
BitLocker (Windows) or FileVault (macOS) is not enabled.
Jailbreak/Root Detection
iOS device is jailbroken or Android device is rooted.
Defender Threat Level
Microsoft Defender reports a threat level above the allowed threshold.
Grace Periods
- Mark as non-compliant — Days after detection before marking non-compliant
- Block access — Additional days before Conditional Access blocks the device
- Retire device — Days before automatic retirement (optional)
- Send notification — Email users about non-compliance
Conditional Access Integration
- Compliant devices granted access to Microsoft 365 resources
- Non-compliant devices blocked or given limited access
- Grace period devices maintain access until expiry
API Reference
GET /api/devices/compliance/status— Get compliance summaryGET /api/devices/compliance/devices— List devices by stateGET /api/devices/compliance/policies/:id/status— Per-policy breakdownGET /api/devices/:deviceId/compliance— Device compliance details
Last updated on