AMA: Improve your security posture with Intune

As discussed on the AMA we generally if you are struggling with specific compliance items to split them into their own compliance policies which allows you to customize that policy further. Then you can leverage things like notifications, grace periods, and combine multiple policies to provide an experience that meets your security needs while providing a good user experience. Determining the best targeting (user vs device) should be something you test in your environment with your policies. Historically many customers had focused on user-based targeting, but we have seen more and more customers be successful with device targeting for compliance. We have been making ongoing investments to improve reporting and compliance when device targeting is used.