0x87d101f4 Intune Compliance Error: How to Fix It

Resync your Intune policies to apply to all devices

4 min. read

Updated onFebruary 20, 2024

updated onFebruary 20, 2024

Share this article

Improve this guide

Read our disclosure page to find out how can you help Windows Report sustain the editorial teamRead more

Key notes

When you use Microsoft Intune to manage your devices, you might notice that some devices don’t comply with the required security settings. The device compliance settings are based on your organization’s security policy requirements.

If a device is not compliant, it needs to be rectified to meet these standards. In this article, we will walk you through how to fix the 0x87d101f4 Intune compliance error to ensure that all your devices comply with your Intune policies’ requirements.

How do I make my device Intune compliant?

Intune will automatically check your device compliance when you enroll it. If you have already enrolled a device in Intune and it is not compliant, it will be marked non-compliant in the Azure portal.

To make your device Intune compliant, you need to register the device with Intune. When you register a device, you will be asked for information about the device and its configuration.

Intune has a list ofsupported OSes, devices, and browsers. To use your device with Intune, you must ensure it’s compatible. That can be done by ensuring the OS is supported and the device has a valid certificate.

If you’re not sure whether your device is Intune-compliant, check the following:

How do I fix Intune non-compliant devices?

Before you settle on performing the advanced solutions, ensure you check off the following:

1. Sync Intune policies

Manually forcing syncing allows your policies to automatically apply the most recent settings to your users, groups, and devices. This allows Intune to enforce the policies on the device and report compliance status.

In case you encounter issues withIntune not syncing, check out our detailed article on how to navigate this issue. Still, it could take up to 24 hours for enrolled devices to show up, so you need to be patient if the synchronization process doesn’t yield immediate results.

2. Reset the non-compliant device

Resetting a device means removing it from Intune, wiping it, and then adding it back into Intune. This will remove all the settings from Intune, such as VPN profiles, MDM policies, and more.

When the device returns online, it will automatically download the latest policies and settings from Intune again.

If you still have problems with compliance after resetting your devices, another issue may be at play that is causing the 0x87d101f4 error.

What is the grace period for Intune compliance?

Microsoft Intune has a grace period for compliance, which is the amount of time you have to fix any non-compliance issues before your device/account is considered non-compliant. The default grace period for compliance is 30 days, but your admin can change it.

When you create a new compliance policy, you can choose whether or not to enable the grace period. You can use Configuration Manager to remediate your devices against compliance violations during this grace period.

Hopefully, with these steps, you have been able to resolve the 0x87d101f4 error in Intune. While you’re still here, check out our list ofnetwork management software, especially if you’re interested in automatic policy updates.

This isn’t the only error you can encounter, and many reportederror code 0x87d1fde8, but we covered that one in another guide.

For any additional thoughts on this topic, leave your comments down below.

0x87d101f4 Intune Compliance Error: How to Fix It#

How do I make my device Intune compliant?#

How do I fix Intune non-compliant devices?#

1. Sync Intune policies#

2. Reset the non-compliant device#

What is the grace period for Intune compliance?#