What and why: Microsoft Intune will migrate Windows Health Attestation compliance evaluation from the current Device Health Attestation (DHA) service to Microsoft Azure Attestation (MAA). This is an Intune service-side change that will happen automatically.
Windows Health Attestation moves to Azure Attestation by early 2027
Intune will migrate Windows Health Attestation compliance evaluation for Windows 11 from the Device Health Attestation service to Microsoft Azure Attestation. The service-side migration is planned by early 2027 and will occur automatically.
- Azure Attestation becomes the evaluation service for Windows 11 health-based compliance
Intune · Device security
Intune plans to move Windows Health Attestation from Device Health Attestation to Microsoft Azure Attestation by early 2027. Organizations must maintain network access to Azure Attestation endpoints to preserve compliance evaluation and avoid compliance failures.
For Windows 11 devices using health-based compliance policies, administrators should ensure network access to Azure Attestation endpoints before the migration. Without that access, compliance evaluation may fail.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
Updates this week
Microsoft Intune
2 updatesIntune will migrate Windows Health Attestation from Device Health Attestation to Microsoft Azure Attestation by early 2027. Organizations must ensure network access to Azure Attestation endpoints to maintain compliance evaluation for Windows 11 devices using health-based policies, or risk compliance failures.