Remediate Non-Compliant Windows Devices
Which THREE actions can you perform from the Microsoft Intune admin center to remediate a non-compliant Windows device?
Quick Answer
The answer is Sync, Retire, and Wipe. These three actions directly remediate a non-compliant Windows device from the Microsoft Intune admin center because they enforce immediate policy refresh, remove corporate access, or factory reset the device to restore compliance. Sync triggers a policy refresh so the device re-evaluates its compliance status, Retire removes the device from management and wipes corporate data, and Wipe performs a full factory reset to eliminate any non-compliant configuration. On the MD-102 exam, this question tests your ability to distinguish device-level remediation actions from policy-level tasks; a common trap is confusing the Sync action with a compliance policy assignment, which is a separate configuration step, not a remediation action. Remember that Retire and Wipe are destructive actions that cannot be undone, while Sync is a safe first step to force a compliance check. For a quick memory tip, think "SRW" — Sync, Retire, Wipe — the three direct remediation levers for a non-compliant Windows device in Intune.
⚠ Common exam trap
Many exam-takers confuse 'Assign a compliance policy' with a remediation action, but it is a configuration step that does not directly fix a non-compliant device; only enforcement actions like retire, wipe, or sync can remediate non-compliance.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Retire the device
The Retire action removes the device from Intune management and revokes corporate data access, which is a valid remediation for non-compliant Windows devices when the device cannot be brought back into compliance. This action is performed from the Microsoft Intune admin center under the device's compliance status.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Retire the device
Why this is correct
Retire removes managed data and enrollment.
- ✗
Remote lock
Why it's wrong here
Remote lock is available for iOS/Android, not for Windows.
- ✓
Wipe the device
Why this is correct
Wipe resets the device to factory settings.
- ✗
Assign a compliance policy
Why it's wrong here
Assigning a policy does not remediate a current non-compliance; it sets expectation.
- ✓
Sync the device
Why this is correct
Sync forces the device to check in and apply policies.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
About these practice questions
This MD-102 question is part of Courseiva's 942-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on MD-102
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A user reports that their Windows 11 device cannot access corporate resources after a recent update. The device is enrolled in Intune. You check the device compliance status and find it is marked as non-compliant. Which two actions should you take?
medium- A.Perform a 'Retire' action on the device
- ✓ B.Request the user to run the 'Sync' action from the Company Portal
- C.Use the 'Reset' action to re-enroll the device
- ✓ D.Run a compliance check from the Intune console
Why B: The correct actions are B and D. When a device is marked non-compliant after an update, the user can trigger a manual sync from the Company Portal (option B) to force a compliance check and policy refresh. Additionally, an administrator can run an on-demand compliance check from the Intune console (option D) to immediately re-evaluate the device's status. Option A (Retire) would remove the device from management, and option C (Reset) would wipe the device, both of which are overly drastic for this scenario.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.