Detect and handle a violation

Goal: The violation is confirmed by current data, the response is verified, and a re-check is performed after remediation.

Before you begin

Define the requirement and the available telemetry. Take into account that additional parameters are not saved in the current build.

Procedure

1. Select the policy type and recipients.
2. Select an allowed response.
3. Run the check and analyze the violation.
4. Compare the events on the device.

Expected result

There is a check result, confirmation of the response, and a new check after the cause has been eliminated.

If the result differs

If telemetry is stale, restore contact. Revoking management is unavailable; some of the additional form parameters are not saved.

Changes and rollback

Confirm the recipients before changing an assignment. Test the new value on a test device first. Do not treat removing an assignment as an automatically confirmed rollback of all local settings: check the final state of the device and the application.