Direct answer
A device compliance policy evaluates defined settings; Conditional Access can use that status when deciding whether a user may access a protected resource. Review and test both policies together.
Map the two decisions
Document the compliance requirements, targeted device groups, protected cloud applications and users. A compliant status reflects selected policy checks; it does not certify that a device is free of compromise. An application outside the access policy may follow different rules.
Reference: Microsoft: Intune device compliance policies.
Test safe examples
Use an approved test tenant or pilot group with a known compliant device, a controlled noncompliant device and representative accounts. Compare expected sign-in outcomes and policy reports. Preserve a tested emergency access route and review the provider's current rollout guidance before enforcement.
Investigate discrepancies
If access differs from expectation, compare device identity, compliance status, last check-in, application, user and applied policies. A stale report or unassigned compliance policy needs a different response from an intentionally noncompliant device. Retest after the approved fix.
Example: access to a finance application
A compliant laptop may be allowed to access finance records while an unmanaged test device is denied under the applicable policy. Record the test account, client, device and application for each result. Also confirm whether other applications are outside that policy's scope; compliance itself is a signal rather than a universal access rule.
Assessment limits
Device signals and application support differ by client and platform. A compliance result covers configured checks only and may change after policy refresh or device state changes.
Frequently asked questions
Does compliance status alone block access?
Not necessarily. A relevant access policy must use the signal for the protected resource.
Does a compliant device have no vulnerabilities?
No. Compliance reflects specific evaluated requirements, not complete security assurance.
Should access policies be enforced for every user immediately?
Use an approved pilot, evaluate impact and protect emergency access before wider enforcement.
Primary sources and further reading
These guides combine published security guidance with practical assessment planning. Adapt checks to the owner's policy, environment, and authorized scope.
This guide was prepared with AI assistance using the linked sources and illustrative examples. Check current vendor guidance and your environment before making changes.