Ensure intune device clean-up rule is configured

Contributed by Henrik Piecha with 2 co-contributorsAll contributors →

Part of Maester · Intune · Tenant administration · All checks

Run this check

Invoke-Maester -TestId MT.1053

Overview

Ensure device clean-up rule is configured

This test checks if the device clean-up rule is configured.

Set your Intune device cleanup rules to delete Intune MDM enrolled devices that appear inactive, stale, or unresponsive. Intune applies cleanup rules immediately and continuously so that your device records remain current.

Remediation action

To enable device clean-up rules:

• Open Microsoft Intune - Device clean-up rules
  • Or navigate to Microsoft Intune admin center > Devices > Organize devices > Device clean-up rules.
• Select Create.
• Set Name and Platform.
• Enter 30 days or more depending on your organizational needs.
• Click Next.
• Click Create.

Related links

• Automatically hide devices with cleanup rules

Details

Every attribute of this check

Field	Value
Test ID	MT.1053
Severity	Low
Suite	Maester
Product	Intune
Feature	Tenant administration
Area	Devices and endpoints
Resource type	Tenant
User impact	Low
Implementation cost	Low
MITRE ATT&CK	None
PowerShell test	Test-MtManagedDeviceCleanupSettings
Services	Graph
Compatible licenses	INTUNE_A

Source

• Test: tests/maester/intune/Test.MT.1053.ps1
• Documentation: tests/maester/intune/Test.MT.1053.md