Forum Discussion

Thomas Höhner's avatar
Thomas Höhner
Copper Contributor
Aug 12, 2020

mdatp device compliance

Hi,

is there a recent change within the handling of mdatp compliance policy out of endpoint manager?

We used to assign mdatp compliance policy to "All Users" which, in the past, only evaluates the related user account, which was matched to the policy assignment.

Since yesterday, we recognized, that the mdatp compliance policy is also scoped to the device itself:

 

now also the system account gets evaluated, and we have a new built-in compliance policy system account evaluation....

In addition, the scoped user account remains as "not applicable" for this compliance policy.

Anyone knows more details about this?

Thank you

Thomas

Endpoint Manager
MDATP
  • AnuragSrivastava's avatar
    AnuragSrivastava
    Iron Contributor
    Dec 09, 2020

    Thomas Höhner AFAIK, device compliance policies have come in picture for the devices which have active threat present on it. In such cases irrespective of the user, device can marked as compliant or non-compliant. So that further it can be combined with conditional access policy to allow/block connectivity to that particular device.

Resources