> "As a specific example, I'm looking at a device compliance policy which is assigned to all users. Most of my computers show the status for that policy as Not Evaluated. When I go to assign compliance policies in Intune, there is no option for "All Devices", only "All Users" or specific groups, so I assigned the policy to all users. "
In this scenario you should be assigning the policy to a group consisting of your co-managed devices for the policy to start evaluate. The compliance workload is moved to Intune for the devices, not the users :-)
> "Are you saying that's expected? If so, do you know of any explaination for why it would work that way? It seems very counter-intuitive."
That's exactly what I see in several tenants. Co-managed (hybrid joined) are not initially shown when browsing the user in AAD. Only AAD joined and AAD registered devices are. There's a drop down allowing you to show all devices where you will find your hybrid joined devices as well. I don't have any explanation for either, but I have been working with co-management since day one, and it's always been like this. In both cases :-)
Martin Bengtsson | Blog:
www.imab.dk | Twitter:
@mwbengtsson
If a post helps to resolve your issue, please remember to click Mark as Answer.