Intune health report

Northwind Traders (sample data)

Prepared 19 October 2026. 128 devices, 118 on Windows.

Atliso Pro

Health score

41 / 100

At risk, up 0 since 19 Sept

Summary

0 of 9 checks passed. 9 checks need attention, covering 53 items. 2 fixes have been deployed through Atliso Pro, clearing 20 devices so far.

Check	Severity	Affected	Result
BitLocker keys missing from Entra ID	High	8 / 113	Action needed
Windows devices not encrypted	High	5 / 118	Action needed
No LAPS password backed up	Medium	7 / 118	Action needed
LAPS password not rotating	Medium	10 / 111	Action needed
Not checked in for 14+ days	Low	6 / 128	Action needed
Non-compliant devices	Medium	8 / 128	Action needed
Remediation scripts failing	Medium	1 / 3	Action needed
Windows versions out of support	High	7 / 118	Action needed
Apple certificates and tokens expiring	High	1 / 3	Action needed

1BitLocker keys missing from Entra ID (8)Deploy the BitLocker Escrow remediation to a pilot group, then all Windows devices.
2Windows versions out of support (7)Check Devices > Windows updates > Feature updates for a policy that targets the old version. A feature update policy holds devices on its version, so a policy pinned to 24H2 keeps them there.
3Windows devices not encrypted (5)Drives that are encrypted but showing protection off are fixed by the Protection Fix remediation without decrypting.
4Apple certificates and tokens expiring (1)Renew in Intune > Devices > Device onboarding > Enrollment > Apple. For the push certificate, choose Renew (not Create) in Apple's portal and use the same Apple ID that created it, or every Apple device has to re-enrol.