Internet Access Intune device compliance bypass script
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit d3734f8 · +2 −0 lines · also on GitHub
⋯ 7 unchanged lines
88
99
# Add Intune device compliance bypasses to Global Secure Access Internet Access
1010
11
+## Overview
12
+
1113
The [Universal Conditional Access documentation](/entra/global-secure-access/concept-universal-conditional-access#known-tunnel-authorization-limitations) notes that Global Secure Access has tunnel authorization limitations. This means that you can block access to a forwarding profile in Conditional Access and inadvertently lock users out from accessing anything on their machine.
1214
1315
The way to mitigate this issue is bypassing [Network endpoints for Microsoft Intune](/mem/intune/fundamentals/intune-endpoints). This PowerShell script adds Intune-related endpoints to the Global Secure Access Internet Access (IA) custom bypass policy. This helps mitigate device compliance issues and supports scenarios such as AzVPN side-by-side deployments.
⋯ 212 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 07:05 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.