Question

You are configuring a Windows 10/11 compliance policy in Microsoft Intune for Contoso. Management requires that devices failing the minimum OS version check be given three days to remediate before being marked noncompliant, but after that grace period they must be blocked from corporate resources. Which action should you configure in the compliance policy's 'Actions for noncompliance' settings to meet the grace-period requirement?

Accepted Answer

Set 'Mark device noncompliant' with a schedule of 3 days after noncompliance.

Answer

Set 'Mark device noncompliant' immediately (0 days) and rely on Conditional Access session controls.

Answer

Set 'Retire the noncompliant device' with a schedule of 3 days.

Answer

Create a device configuration profile with a 3-day reboot deferral.