# Track the seven-day hold when an Intune compliance setting reports Error

> Why can a device retain its earlier compliance state while one setting is in Error?

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260917-099-track-the-seven-day-hold-when-an-intune-compliance-setting-reports-error/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-17T16:33:21+00:00
- Modified: 2026-09-17T16:38:46+00:00
- Last reviewed by DSE: 2026-09-17
- Resource type: Guide
- DSE priority: Information
- Topics: Cybersecurity, IT
- Reading time: 1 minutes

## What you need to know

Why can a device retain its earlier compliance state while one setting is in Error?

## Potentially affected

Use this explanation when an Intune compliance setting reports Error. Record the affected setting, its first observed error time, the prior device compliance state and the policy's configured grace period.

## DSE recommendation

DSE recommends treating the error as an owned investigation while recording the temporary state carry-forward.

## Article

## Source facts

When a compliance setting reports Error, Intune preserves the device’s existing compliance state for up to seven days while waiting for a valid evaluation. If Error remains after that period, the device becomes noncompliant or enters the policy’s configured grace period. [Microsoft Learn](https://learn.microsoft.com/en-us/intune/device-security/compliance/monitor-policy).

## Applicability

Use this explanation when an Intune compliance setting reports Error. Record the affected setting, its first observed error time, the prior device compliance state and the policy’s configured grace period.

## DSE recommendation

DSE recommends treating the error as an owned investigation while recording the temporary state carry-forward. Give support a deadline tied to the first observed failure and the policy behavior, rather than assuming an unchanged device status means the setting passed. Coordinate any expected access impact with the device and application owners.

## Verification

Review the per-setting result and overall device status together as troubleshooting progresses. Retain the relevant check-in times and the eventual compliant or noncompliant evaluation. If the error persists, verify the resulting status against the documented seven-day behavior and configured grace period. Close the investigation only when the setting has an explained result.

## Official references

[Microsoft Learn: Monitor results of your Intune device compliance policies](https://learn.microsoft.com/en-us/intune/device-security/compliance/monitor-policy). Source reviewed September 17, 2026.

## Primary reference

- Name: Monitor results of your device compliance policies in Microsoft Intune - Microsoft Intune | Microsoft Learn
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/intune/device-security/compliance/monitor-policy
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Track the seven-day hold when an Intune compliance setting reports Error,” DSE Security, https://update.dsesecurity.com/updates/dse-20260917-099-track-the-seven-day-hold-when-an-intune-compliance-setting-reports-error/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.