Faster compliance updates for Windows devices

What changed

Supported Windows devices can detect changes to firewall, antivirus, BitLocker, Microsoft Defender, OS build, real-time protection and Secure Boot signals and proactively request an Intune compliance reevaluation instead of waiting for the next scheduled check-in.

Why it matters

Faster compliance state updates reduce the delay between device remediation and Conditional Access or reporting decisions, while unsupported devices continue to use the scheduled evaluation path.

Known limitations

• Availability, prerequisites and rollout scope remain authoritative in the linked Microsoft documentation.

Now check

• Confirm supported Windows and Intune prerequisites for client-driven compliance evaluation
• Pilot firewall, antivirus, BitLocker, Defender, OS build, real-time protection and Secure Boot state changes
• Measure the time from remediation to updated Intune compliance and Conditional Access behavior