Windows 11 MD-102 Compliance Lab

Overview

Demonstrates enterprise device compliance management using Microsoft Intune and Entra ID Conditional Access. A Windows 11 VM was enrolled in Intune, a compliance policy was applied requiring BitLocker and Defender, and a Conditional Access policy was enforced to require compliant devices.

Highlights

• Enrolled a Windows 11 device in Intune via MDM user scope
• Built the MD102-Lab-Compliance policy (BitLocker, OS version, Defender)
• Enabled BitLocker with the new XTS-AES encryption mode
• Created a Require-Compliant-Devices Conditional Access policy for all cloud apps
• Debugged MDM URL issues, enrollment failures, and BitLocker ISO conflicts