Direct answer
Confirm the device identity and last successful check-in, then review enrollment, network access and management errors. An offline or unenrolled device cannot be assumed to have received current policy.
Confirm the target and last contact
Match the management record to the physical device and owner, including any duplicate or replaced records. Record the last check-in, device status and recent changes. Ask whether the machine is powered on, connected and able to reach the required management services.
Investigate enrollment and sync
Microsoft's troubleshooting guidance notes that a device unable to check in cannot receive policy and provides Windows sync steps through work or school account settings. Capture the actual error and time, then follow the organization's support process rather than repeatedly removing enrollment.
Reference: Microsoft: Troubleshoot Intune policies.
Verify policy after recovery
Once connectivity and enrollment are restored, compare the check-in time and policy status with effective device settings. Reassess stale findings and identify other devices affected by the same service or network issue. Escalate devices that cannot safely reconnect.
Check a replacement-device mismatch
A user may receive a replacement laptop while the old management record remains visible. Match device identifiers and the owner's current asset before initiating a sync or recording a failure. If the new record is healthy but the old one is stale, follow the documented retirement and record-retention process rather than assuming the replacement is unmanaged.
Assessment limits
A successful sync confirms only that a connection occurred; it does not prove every policy has applied or that the endpoint is healthy.
Frequently asked questions
Does pending policy mean the setting is disabled?
No. It may mean the device has not received or processed it. Check effective state and policy status separately.
Should a device be unenrolled immediately?
Investigate the supported recovery path first; removing enrollment can change management and access.
Can a stale record belong to an old machine?
Yes. Reconcile device identifiers and ownership before taking action.
Primary sources and further reading
These guides combine published security guidance with practical assessment planning. Adapt checks to the owner's policy, environment, and authorized scope.
This guide was prepared with AI assistance using the linked sources and illustrative examples. Check current vendor guidance and your environment before making changes.