Jamf / Intune conditional access - encryption problem

@George-x.chan We have currently 550 +- devices succesfully registered in Intune, and the issue you mention also occurs sometimes in our organisation.

mostly, this happens when an external disk, or Recovery / Preboot volume is mounted and listed in the disks encryption overview.
Jamf then reports as "Boot disk encrypted" and it look likes Intune not always likes this.

So till this buggy has been fixed created an Self Service item for the users they can trigger. You can place this in an category Device compliance remediation for instance.

Self Service script

#!/bin/sh

disk2s2=$(mount | grep /Volumes/Preboot | awk '{print $3}')
disk2s3=$(mount | grep /Volumes/Recovery | awk '{print $3}')


    # Check if Preboot volume is mounted
    if [[ $disk2s2 =~ "Preboot" ]] ; then
        echo "Preboot volume is mounted, going to unmount"
        diskutil unmount disk2s2
    else
        echo "Preboot volume is not mounted"
    fi

    # Check if Recovery volume is mounted #
    if [[ $disk2s3 =~ "Recovery" ]] ; then
        echo "Recovery volume is mounted, going to unmount"
        diskutil unmount disk2s3
    else
        echo "Recovery volume is not mounted"
    fi

# Recon to update inventory and send info to AAD.
/usr/local/bin/jamf recon


exit 0

thanks @txhaflaire - i will give this a try :)

By the way, have you had many issues with the Jamf / intune intergration overall? it seems like we're encountering various issues and there isn't much help online.

Thanks
George.