MT.1053: Ensure intune device clean-up rule is configured
| ID | MT.1053 |
| Severity | Low |
| Suite | Mito |
| Product | Intune |
| Feature | Tenant administration |
| Security area | Devices and endpoints |
| Resource type | Tenant |
| User impact of fixing | Low |
| Effort to fix | Low |
| Reads from | Microsoft Graph |
| Licence needed | INTUNE_A |
What this checks and how to fix it
Section titled “What this checks and how to fix it”Ensure device clean-up rule is configured
This test checks if the device clean-up rule is configured.
Set your Intune device cleanup rules to delete Intune MDM enrolled devices that appear inactive, stale, or unresponsive. Intune applies cleanup rules immediately and continuously so that your device records remain current.
Remediation action
Section titled “Remediation action”To enable device clean-up rules:
- Open Microsoft Intune - Device clean-up rules
- Or navigate to Microsoft Intune admin center > Devices > Organize devices > Device clean-up rules.
- Select Create.
- Set Name and Platform.
- Enter 30 days or more depending on your organizational needs.
- Click Next.
- Click Create.
Related links
Section titled “Related links”Mito check. Author: HenrikPiecha; contributors: merill, l-gosling. Open-source licences.
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.