Microsoft Eases Compliance Remediation with Intune and Defender on iOS

Non-compliant devices can bring work to a halt and overwhelm IT teams with avoidable issues. Microsoft’s latest update tackles this head-on with a new one-tap Resolve workflow that streamlines compliance remediation across Microsoft Intune and Microsoft Defender on iOS.

Microsoft has added a new Resolve button to Microsoft 365 apps (like Teams or Outlook) on iOS and iPadOS when a device is non-compliant due to missing Defender requirements. Users will need to tap it to automatically identify the compliance issue, install or launch Microsoft Defender if needed, recheck compliance, and return users to their original app.

“Traditionally, when a user’s device was marked noncompliant due to missing security apps like Microsoft Defender, they had to navigate through multiple apps, follow multi-step instructions, and often re-authenticate – often to resolve a single issue. This created friction, confusion, and delays in regaining access to corporate resources. With the new end-to-end remediation workflow triggered by the Resolve button, we’re eliminating those extra steps,” the Microsoft Intune team explained.

How does Just-in-Time remediation enhance compliance?

This new streamlined process leverages Just-in-Time (JIT) registration and remediation that embeds compliance checks directly into the workflow of apps. Devices that already leverage JIT for iOS/iPadOS automatically get the enhanced experience, while others can enable it with minimal configuration.

For IT administrators, this new experience means simplified compliance remediation processes and a significant reduction in help desk tickets. To enable this functionality, organizations simply need to set up Just-in-Time (JIT) registration and compliance remediation in Microsoft Intune.

Organizations can start with a small pilot group to test Just-in-Time (JIT) registration and confirm everything works as expected. Moreover, administrators must ensure that Microsoft Defender has the necessary permissions configured in advance to avoid setup delays. They should also track and monitor common issues like missing passcodes or outdated iOS versions that often cause compliance failures.