Managed devices records the laptops and phones your company issues, who each one belongs to, and what your device management system reports about them. Today encryption is read from Microsoft Intune. Screen lock and endpoint protection are not available from this provider.
Who can do this
An owner or editor who is a current member of the company can declare devices, connect the inventory and record exceptions and corrections. The person who proposed an assignment or exception cannot review it. Someone else does.
Find it
Open People & access in the sidebar, under Programmes, then Company devices. The page is Managed devices, in two parts: Observed managed devices, read from your provider, and Declared company inventory, which you write yourself.
Declare a device
- Press Declare device. The form has steps. Press Continue to move on.
- Give the Asset reference and Device name.
- Give a Reason and press Save.
Declared devices carry no proof from a provider. To change one, press Edit declared device. To remove one, press Take out of inventory and answer Why is it coming out?: It was entered by mistake or It is no longer used by the company. Nothing is deleted.
Connect the device inventory
- Connect your Intune as a managed system under Connected systems first.
- Press Connect device inventory.
- Choose the MDM system, enter the Microsoft tenant ID, and choose the Inventory owner.
- Tick the approval for private managed-device inventory for this tenant and system, and tick Enable provider reads.
- Give a Reason and press Save.
To read the inventory again, press Recheck devices.
Confirm who a device belongs to
On an observed device, press Review employee assignment and choose the Confirmed employee account. Someone else then reviews it with Review assignment, choosing Accept or Return for correction under Review decision.
Exceptions and corrections
- If a device is allowed to fall short for a while, press Propose exception. Choose the Reviewed employee assignment and the Posture trait, and give when it expires, at most 90 days ahead. An exception records accepted risk. It does not change what the provider reports.
- When you fix a device, press Record correction. The record does not change the device. The next provider read shows whether it worked.
Exceptions are reviewed by someone else with Review exception.
Common questions
"Why does screen lock say unavailable?" With Microsoft Intune, Asiri reads encryption only. Screen lock and endpoint protection stay unavailable.
"Does an exception make the device compliant?" No. It records that the company accepts the risk until it expires.