Security & Good Practice
Keeping Your Devices Compliant (Intune Basics)
This guide explains what a device compliance prompt from Microsoft Intune means and what you should do to resolve it so you can continue accessing work apps and files.
Time needed
10–20 minutes (varies by action required)
Platform
Microsoft 365
Guide steps
3 clear sections
Before you begin
Your organisation uses Microsoft Intune for device management. Your device needs to be enrolled. If you have never enrolled your device, contact the helpdesk first.
Follow along
Step-by-step guide
Understand what device compliance means
- Instruction 1: Microsoft Intune is a device management service included in Microsoft 365 Business Premium. Your IT team uses it to ensure every device accessing company data meets minimum security standards.
- Instruction 2: Compliance requirements commonly include: a minimum operating system version, a PIN or password set on the device, disk encryption enabled (e.g. BitLocker on Windows, FileVault on Mac), no detected security vulnerabilities.
- Instruction 3: If your device does not meet these requirements, Intune marks it as 'non-compliant' and Microsoft 365 may block access to email, Teams, and other apps until the issue is fixed.
- Instruction 4: This is not a punishment — it protects company data from being accessed on an insecure device.
Action map
Understand what device compliance means
- 01
Microsoft Intune is a device management service included in Microsoft 365 Business…
- 02
Compliance requirements commonly include: a minimum operating system version, a PIN or…
- 03
If your device does not meet these requirements, Intune marks it as 'non-compliant' and…
Visual guide
Use this visual action map alongside the written instructions above.
Open Microsoft security guidance for Keeping Your Devices Compliant (Intune Basics)Respond to a compliance warning
- Instruction 1: When you see a compliance warning, read the message carefully — it usually explains exactly what is non-compliant (e.g. 'Your device OS needs to be updated', 'Encryption is not enabled').
- Instruction 2: For an OS update requirement: go to Windows Update (Settings > Windows Update) or Software Update on Mac and install all pending updates. Restart your device when prompted.
- Instruction 3: For an encryption requirement: on Windows, search for BitLocker in the Start menu and turn it on. On Mac, go to System Settings > Privacy & Security > FileVault and turn it on. Contact the helpdesk if you are unsure how to proceed.
- Instruction 4: For a PIN or password requirement: go to your device's sign-in settings and ensure a strong PIN or password is set.
Check your compliance status and sync
- Instruction 1: After making the required changes, open the Company Portal app if it is installed on your device, and click Check status or Sync to prompt a compliance re-check.
- Instruction 2: On a Windows device: open the Company Portal app from the Start menu, click Devices, select your device, and click Check access or Sync.
- Instruction 3: If the Company Portal app is not installed, contact the helpdesk — they may need to enrol your device or install the app remotely.
- Instruction 4: Compliance checks typically update within 15 minutes of syncing. If access to M365 is still blocked after an hour, contact the helpdesk.
Quick fixes
Troubleshooting
I have made the required changes but I am still blocked from M365
Open the Company Portal app and click Sync. Wait 15 minutes, then try signing in to M365 again. If still blocked, contact the helpdesk with a description of the compliance message you saw and the changes you made.
I do not have the Company Portal app and cannot find it
The Company Portal app is distributed by your IT team through Microsoft Intune. If it is not on your device, your device may not yet be enrolled in management. Contact the helpdesk to get your device enrolled and the app installed.
Still need a hand?
Our support team can help with Microsoft 365.
Tell us where you got stuck and what you see on screen.