Microsoft 365 Alert – Service Degradation – Windows 365 – Users’ newly enrolled Windows 365 Link devices are marked as non-compliant in Microsoft Intune – ONGOING

20/07/2026 08:47:00 AM

NHSmail Reference: INC46883676

Microsoft Reference: WP1431500

Issue Status: ONGOING

Issue Description: Users’ newly enrolled Windows 365 Link devices are marked as non-compliant in Microsoft Intune.

More Info: The issue impacts Windows 365 Link devices that receive Windows build 26200.8875 before completing Microsoft Intune enrollment, including newly provisioned devices and devices that have undergone Bare Metal Recovery (BMR).

Devices that were already enrolled in Microsoft Intune before installing the affected build are not currently known to be impacted.

As they continue to develop a permanent remediation, affected organizations should ensure that new Windows 365 Link devices, and devices that have undergone Bare Metal Recovery (BMR), complete Microsoft Intune enrollment before installing Windows updates.

Devices that have already received Windows build 26200.8875 before completing Microsoft Intune enrollment may require Bare Metal Recovery (BMR), followed by reenrollment, to restore compliance.

Current Update: 20/07/2026 08:48:00 AM – On Friday, July 17, 2026, at approximately 10:11 PM UTC, the Incident Communications and Coordination (ICC) team was engaged on an issue affecting Windows 365 wherein the 26200.8875 build published
on July 14, 2026, introduced a regression for newly activated or recovered devices which have not finished enrollment in Microsoft Intune. Engineers have identified the regression and are validating a potential solution. More time will be needed to and a reconvene has been scheduled for Monday, July 20, 2026, at 7:30 PM UTC (12:30 PM PST) for next steps.

Scope of impact: Your organisation is affected by this event. Impact is limited to newly enrolled or newly recovered Windows 365 Link devices that receive Windows build 26200.8875 before Microsoft Intune enrollment completes. These devices may be incorrectly reported as non-compliant by Microsoft Intune. This information may be updated as their investigation continues.

Root cause: A recent Windows build introduced a code regression that affects device health attestation and compliance evaluation by Microsoft Intune. As a result, newly enrolled or newly recovered Windows 365 Link devices that receive the affected build before enrollment completes may be incorrectly marked as non-compliant.

Next update by: Monday, July 20, 2026, at 9:30 PM UTC