Track the seven-day hold when an Intune compliance setting reports Error

Source facts

When a compliance setting reports Error, Intune preserves the device’s existing compliance state for up to seven days while waiting for a valid evaluation. If Error remains after that period, the device becomes noncompliant or enters the policy’s configured grace period. Microsoft Learn.

Applicability

Use this explanation when an Intune compliance setting reports Error. Record the affected setting, its first observed error time, the prior device compliance state and the policy’s configured grace period.

DSE recommendation

DSE recommends treating the error as an owned investigation while recording the temporary state carry-forward. Give support a deadline tied to the first observed failure and the policy behavior, rather than assuming an unchanged device status means the setting passed. Coordinate any expected access impact with the device and application owners.

Verification

Review the per-setting result and overall device status together as troubleshooting progresses. Retain the relevant check-in times and the eventual compliant or noncompliant evaluation. If the error persists, verify the resulting status against the documented seven-day behavior and configured grace period. Close the investigation only when the setting has an explained result.

Official references

Microsoft Learn: Monitor results of your Intune device compliance policies. Source reviewed September 17, 2026.