DV-01: Require Compliant Devices for Admin Access

DV-01 is a security control that a compromised or unmanaged device can have keyloggers, malware, or screen capture tools. requiring managed, compliant devices for admin access ensures that privileged actions occur from endpoints you control and monitor. It requires that a conditional access policy requires compliant or entra hybrid-joined devices for admin portals and policy targets microsoft admin portals app or specific admin urls, unmanaged personal devices cannot access admin functions.

A compromised or unmanaged device can have keyloggers, malware, or screen capture tools. Requiring managed, compliant devices for admin access ensures that privileged actions occur from endpoints you control and monitor.

TrueConfig provides one-click remediation for DV-01. Creates a Conditional Access policy requiring device compliance. PREREQUISITE: Intune must be configured first.

This control requires Azure AD Premium P1 (included in Microsoft 365 E3) or higher.

DV-01 is included in the Enhanced Security baseline (Level 2). This level adds stricter controls for security-conscious organizations.