Scenario
A device shows compliant in Intune, but the user still gets blocked by Conditional Access.
Recommended Resolution Path
- Compare the sign-in log device ID with the Intune managed device ID to catch registration mismatch.
- Check whether the user is signing into a browser profile that is not device-bound.
- Confirm the policy requires hybrid join versus compliant state only.
- Re-register the work account if MDM and Entra records drifted apart.
Technician Notes
Confirm the business impact, document the root cause, and capture any preventative follow-up in the PSA or client knowledge base.
- Log in to post comments
Subjects