MP.RKS.IA.1004: Windows devices have checked in with Intune recently
| ID | MP.RKS.IA.1004 |
| Severity | Low |
| Suite | RKSolutions Intune Anomalies |
| Product | Intune |
| Feature | Device enrollment |
| Security area | Devices and endpoints |
| Resource type | Device |
| User impact of fixing | Low |
| Effort to fix | Low |
| Provides evidence for | ISO 27001:2022: A.8.1 (partial), A.5.9 (partial)UAE IA v1.1: T5.7.1 (partial), T1.2.1 (partial)What this means |
| Reads from | Microsoft Graph |
| Licence needed | INTUNE_A |
What this checks and how to fix it
Section titled “What this checks and how to fix it”A device that has not synced with Intune for a long time no longer gets policies, updates or app installs, and its
compliance state is out of date. Often it is lost, replaced or not used any more, and it still counts as a managed
device. The test lists Windows devices whose last sync is older than the InactiveDays parameter (90 days by default).
Remediation action
Section titled “Remediation action”- Find out whether each device below is still in use.
- Retire or delete the devices that are not, in the Microsoft Intune admin center under Devices > Windows.
- Set up a device clean-up rule so this happens on its own.
Related links
Section titled “Related links”Mito check, based on RKSolutions Intune Anomalies by Roy Klooster. Author: royklo. Open-source licences.
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.