Skip to content

Device compliance

A policy defining what makes a device acceptable, used as a condition for granting access.

Compliance rules typically require disk encryption, a supported operating system version, current patches, a screen lock, and working endpoint protection. Intune or a comparable tool evaluates each device against them continuously.

Combined with conditional access this becomes powerful: company data is reachable only from devices you can verify are healthy, so a stolen password on an unmanaged machine gets nowhere.

Where this comes up

Device compliance sits inside our identity and access work. If you are trying to work out what this means for your own environment rather than in the abstract, that is the page worth reading next, and a short call will get you a straight answer faster than either.

Identity and access management Ask an engineer

Related terms

Conditional access Policies that decide whether to allow, block, or add requirements to a sign-in based on the context of the request. Microsoft Intune Microsoft's cloud service for managing and securing laptops, phones, and tablets. Zero trust A security model that verifies every request on its merits instead of trusting anything because of where it came from. Mobile device management Managing the configuration and security of phones and tablets that access company data.

More in identity and access

Access reviewActive DirectoryBreak-glass accountConsent phishingDomain controllerEntra ID P2FIDO2Guest account

Back to the full glossary →

Want this explained against your own setup?

Definitions only get you so far. Book a short call and we will tell you whether this actually matters for your business, and what we would do about it.

Call (855) 737-9500 / (480) 573-3349

Email [email protected]

15-minute response on critical issues, 24/7. Onboarding in two to three weeks.

We reply within one business day. No spam, no pressure.