Intune Proactive Remediations: Automating Issue Detection and Fix
Which THREE actions are available in Microsoft Intune's proactive remediations for Windows devices?
Quick Answer
The answer is running a remediation script to fix issues, which is one of the three core actions available in Intune proactive remediations for Windows devices. This is correct because proactive remediations operate as a two-script workflow: a detection script first scans the device for specific problems—like registry misconfigurations or missing files—and returns an exit code; if that code signals an issue, the remediation script automatically executes to resolve it without user intervention. On the Microsoft 365 Endpoint Administrator MD-102 exam, this concept tests your understanding of how Intune shifts from reactive to automated issue detection and fix, often appearing in scenario-based questions where you must choose the correct sequence. A common trap is confusing detection scripts with remediation scripts—remember, detection only identifies, remediation actually fixes. For a memory tip, think “Detect then Correct” to recall that the detection script must run first and return a non-zero exit code before the remediation script triggers.
⚠ Common exam trap
Many candidates confuse proactive remediations with compliance policies or alerting features, assuming that failed remediation can automatically trigger non-compliance or email notifications, but Intune separates these functions into distinct policies and requires additional configuration for alerts.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Run a detection script to identify issues.
Proactive remediations in Microsoft Intune are designed to detect and automatically fix common issues on Windows devices without requiring user intervention. Option A is correct because the workflow begins with a detection script that runs on the device to identify specific problems, such as registry misconfigurations or missing files. This script must return an exit code indicating whether an issue exists, which then triggers the remediation script if needed.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Run a detection script to identify issues.
Why this is correct
Detection scripts identify problems.
- ✗
Send email alerts when issues are detected.
Why it's wrong here
No alerting capability.
- ✓
Schedule scripts to run at regular intervals.
Why this is correct
Scheduling is supported.
- ✓
Run a remediation script to fix issues.
Why this is correct
Remediation scripts fix issues.
- ✗
Mark devices as non-compliant if remediation fails.
Why it's wrong here
Proactive remediations do not affect compliance.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
Key term
Remediation script
A remediation script is an automated set of instructions that detects and fixes common IT security or configuration issues without manual intervention.
About these practice questions
One of 942 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on MD-102
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which TWO actions can you perform in Microsoft Intune to remediate a noncompliant Windows device that has been marked as noncompliant due to missing antivirus? (Choose two.)
medium- A.Send a sync command to the device to re-evaluate compliance.
- ✓ B.Deploy a proactive remediation script to detect and install antivirus.
- C.Send a notification to the user to install antivirus via Windows Security.
- ✓ D.Run a PowerShell script from Intune to install the missing antivirus.
- E.Create a Conditional Access policy to block the device until fixed.
Why B: Proactive remediations in Microsoft Intune allow you to deploy a detection and remediation script pair that can automatically detect the absence of antivirus and install it, ensuring compliance without user intervention. This leverages Intune's built-in remediation capabilities for Windows devices, which run on a schedule and can fix common compliance issues like missing security software.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.