Microsoft Intune device & app management.
View All Tags
You did everything right. Conditional Access requires a compliant device before anyone touches company data. You tested it, it worked, you closed the ticket, you felt good about yourself. ☕
Then one Tuesday you spot a device in the sign-in logs you have never seen before. Personal laptop. No management. No Intune. Nothing. And right next to it, in cheerful little green letters: Compliant.
Wait. What.
Most organisations don’t just have one type of device.
If you look closely, you can almost always split them into the same handful of categories — and each comes with its own quirks.
Once you understand those patterns, you can design an Autopilot framework that covers them all without overcomplicating your life.
It started with a ticket:
"Hi IT, I wiped my device because Teams stopped syncing. Can you fix it?"
Weird.
So you check — and sure enough, the device is gone from Intune. Just... gone.
No wipe, no retirement event, nothing in logs. It just vanished like a magician's assistant. 🎩✨
Turns out, the user simply went to:
Settings → Accounts → Access work or school → Disconnect
That's it. Two clicks. No password prompt. No MFA.
And poof — device is unmanaged.
So… that’s enough OneDrive for now 😅
5 policies. 2 groups. And one very real desire to never see another popup about “Your files are not backed up”.
As a few — and by now, many — of you know, I tend to show up regularly at various business partners.
Not just to drink coffee (although yes, that too ☕), but to spar about Microsoft configurations, smart policies, and the occasional “how-did-we-miss-this” setting.
And in those conversations, one thing keeps popping up:
💬 “We didn’t even know that was a thing…”