Microsoft 365 Alert – Service Degradation – Windows 365 – Users’ newly enrolled Windows 365 Link devices are marked as non-compliant in Microsoft Intune – RESOLVED

20/07/2026 08:47:00 AM

NHSmail Reference: INC46883676

Microsoft Reference: WP1431500

Issue Status: RESOLVED

Issue Description: Users’ newly enrolled Windows 365 Link devices are marked as non-compliant in Microsoft Intune.

More Info: The issue impacted Windows 365 Link devices that received Windows build 26200.8875 before they completed Microsoft Intune enrollment, this included newly provisioned devices and devices that underwent Bare Metal Recovery (BMR).
Devices that were already enrolled in Microsoft Intune before they installed the affected build were not impacted.

Final Update: 21/07/2026 09:16:00 AM – A targeted code solution was applied for the device health attestation (DHA) policy that contained the regression. Devices that previously hit the error were confirmed as compliant. Additionally, our actions resolved all previously non-compliant devices as well as all newly enrolled devices.

Scope of impact:Your organization was affected by this event, and impact was limited to newly enrolled or newly recovered Windows 365 Link devices that received Windows build 26200.8875 before Microsoft enrollment completed. These devices may have been reported as non-compliant by Microsoft.

Root cause: A recent Windows build introduced a code regression that impacted device health attestation and compliance evaluation by Microsoft. As a result, newly enrolled or newly recovered Windows 365 Link devices that received the affected build before enrollment completed may have been incorrectly marked as non-compliant.

Next steps: Microsoft is continuing to investigate this issue and how the regression was introduced to ensure a more permanent solution and prevent future events.