Daily Intune NewsMicrosoft plans to move Intune Windows Health Attestation for Windows 11 devices from Device Health Attestation to Microsoft Azure Attestation by early 2027. Devices using health-based compliance policies could fail compliance evaluation if required Azure Attestation network access is unavailable.
Intune · Device securityThe planned migration affects Windows 11 devices whose Intune compliance evaluation uses health-based policies. Maintaining network access to Azure Attestation endpoints is required to avoid compliance failures.
Administrators should ensure that managed Windows 11 devices can reach the Azure Attestation endpoints before the migration, then monitor health-based compliance evaluation for failures as the change approaches.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
Intune will migrate Windows Health Attestation from Device Health Attestation to Microsoft Azure Attestation by early 2027. Organizations must ensure network access to Azure Attestation endpoints to maintain compliance evaluation for Windows 11 devices using health-based policies, or risk compliance failures.
