MP.RKS.IA.1007: Single-user Autopilot devices are used by one person
| ID | MP.RKS.IA.1007 |
| Severity | Medium |
| Suite | RKSolutions Intune Anomalies |
| Product | Intune |
| Feature | Device enrollment |
| Security area | Devices and endpoints |
| Resource type | Device |
| User impact of fixing | Low |
| Effort to fix | Low |
| Provides evidence for | ISO 27001:2022: A.8.1 (partial), A.5.9 (partial)UAE IA v1.1: T5.7.1 (partial), T1.2.1 (partial)What this means |
| Reads from | Microsoft Graph |
| Licence needed | INTUNE_A |
What this checks and how to fix it
Section titled “What this checks and how to fix it”A device enrolled with a user-driven Autopilot profile is meant for one person. When several people sign in to it, it is being shared, and the policies and apps that follow its primary user do not fit the other users. The test lists devices enrolled with a single-user Autopilot profile on which more than one user signed in.
Remediation action
Section titled “Remediation action”- Ask the owners of the devices below whether the devices are shared.
- For shared use, enrol them with a shared or self-deploying profile instead; otherwise ask the other users to stop using them.
Related links
Section titled “Related links”Mito check, based on RKSolutions Intune Anomalies by Roy Klooster. Author: royklo. Open-source licences.
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.