Host Compliance

What a device has to be able to say about itself before it is trusted.

Host Compliance

What a device must be able to say about itself before it is trusted, such as disk encryption, antivirus, and whether it is managed. Devices report their posture and appear as compliant, failing, or not yet reported.

Reading the list

Every enrolled device appears with one of three states. Compliant means it reported and met the rules. Failing means it reported and did not. Not reported means it has not said anything yet, which is not the same as failing and is worth treating differently: a device that has never checked in may simply not have run since you set the rules.

When something fails

The row says which check failed rather than only that one did, so the fix is usually obvious: encryption switched off, an antivirus product not running, a device that has left management. Posture is reported by the device itself, so correcting it on the machine and letting it check in again is what clears the row.