MD-101 Exam Dumps - Managing Modern Desktops

The Noncompliant devices report provides data typically used by Helpdesk or admin roles to identify problems and help remediate issues. The data found in this report is timely, calls out unexpected behavior, and is meant to be actionable.

Note: Compliance reports help you understand when devices fail to meet your compliance configurations and can help you identify compliance-related issues in your organization.

Open the compliance dashboard

Open the Intune Device compliance dashboard:

• Sign in to the Microsoft Endpoint Manager admin center.

• Select Devices > Overview > Compliance status tab.

When the dashboard opens, you get an overview with all the compliance reports. In these reports, you can see and check for:

Overall device compliance

Per-policy device compliance

Per-setting device compliance

Threat agent status

Device protection status

View compliance reports

In addition to using the charts on Compliance status, you can go to Reports > Device compliance.

• Sign in to the Microsoft Endpoint Manager admin center.

• Select Devices > Monitor, and then from below Compliance select the report you want to view. Some of the available compliance reports include:

Device compliance

Noncompliant devices

Devices without compliance policy

Setting compliance

Policy compliance

Noncompliant policies (preview)

Windows health attestation report

Threat agent status

References:

https://docs.microsoft.com/en-us/intune/device-restrictions-configure

https://docs.microsoft.com/en-us/intune/device-restrictions-ios

The policy needs to be applied to Group4 so we need to configure Users and Groups.

The Access controls are set to Block access

We therefore need to exclude compliant devices.

From the scenario:

• Ensure that the users in a group named Group4 can only access Microsoft Exchange Online from devices that are enrolled in Intune.

Note: When a device enrolls in Intune, the device information is updated in Azure AD to include the device compliance status. This compliance status is used by conditional access policies to block or allow access to e-mail and other organization resources.

References:

https://docs.microsoft.com/en-us/azure/active-direct ory/conditional-access/overview

https://docs.microsoft .com/en-us/azure/active-directory/conditional-access/conditions

https://docs.microsoft.com/en-u s/intune/device-compliance-get-started

References:

https://docs.microsoft.com/en-us/microsoft-store/add-profile-to-devices#mana ge-autopilot-deployment-profiles