How to Remediate macOS Device Compliance to Access Microsoft

Can't access your Stanford Microsoft 365 email or other Microsoft apps on your Windows device? It may be because your device doesn't meet university compliance and security requirements.

Your device must be registered in Intune

This is required. To access Stanford Microsoft 365, including your Stanford email in Outlook, you must register your device in Intune. 

• Not registered yet? Follow the instructions in to register a macOS device in Intune.
• Please allow up to one hour for a device's compliance status to be updated after completing registration.

Security requirements overview 

In addition to being registered in Intune, your device must meet university compliance requirements. Here's what Stanford checks to make sure your device is compliant:

1. Operating system (OS) version: Your device must run an updated OS version as defined by the Service and Software Sunset Schedule.
2. Device encryption: Your macOS device must be encrypted with FileVault 2 to meet university compliance requirements.
3. Stanford Device Registration: You must have run Stanford Device Registration (SDR) at least once to meet compliance requirements. See the SDR for macOS User Guide for details.
4. Last report time: Your device must check in regularly with Stanford management systems to ensure the security controls are up-to-date.

Fix specific compliance issues

Below are additional instructions to remediate specific issues you may encounter.

How to check and update your OS version

Stanford's device compliance policy follows the publicly available Service and Software Sunset Schedule, which includes a review of supported versions. The policy for minimum operating system versions at Stanford is N-2, the current version plus the two most recently supported versions available.

How to check your OS version

To check your OS version, follow these steps:

1. Click the Apple menu in the top left corner of your screen.
2. Select About This Mac.
3. Your macOS version is listed under the serial number.

Note: The following screenshots are from macOS Sequoia 15.

How to update your OS version

To update your OS version, follow these steps:

1. Click the Apple menu in the top left corner of your screen.
2. Select System Settings.
3. Select General, then select Software Update.
4. Any available updates or upgrades will be listed on this page.
   Note: If no updates are available and your device is below the minimum supported OS version per the Service and Software Sunset Schedule, your device may not be compatible with newer OS versions and therefore cannot meet compliance requirements.
5. After completing an OS upgrade, it is recommended that you run a "Send Jamf Inventory update." Choose one of the following methods:
   1. Option A: Direct Link
      • Open the following link: jamfselfservice://content?entity=policy&id=734&action=view
      • Click Send
   2. Option B: Self Service App
      • Open the Self Service application
      • Open the Utilities category
      • Select Send Jamf Inventory
      • Click Send

How to check your FileVault Encryption

To check FileVault status, follow these steps:

1. Click the Apple menu in the top left corner of your screen.
2. Select System Settings.
3. Select Privacy and Security, then select FileVault. The page will display whether your device is encrypted with FileVault.

If you need to enable FileVault

It is highly recommended to use the Stanford Device Registration (SDR) application to enable FileVault. Running SDR at least once is also required for a device to meet compliance criteria. Learn more from the SDR for macOS User Guide.

Stanford SWDE compliance flag

Running the SDR application at least once is a requirement to meet compliance at Stanford. Information on running SDR can be found in the SDR for macOS User Guide.

Last Seen

If a device has not been used for an extended period of time, it may fall out of compliance due to a lapse in communication with Stanford management systems. This issue will typically resolve itself within 24 hours. 

To expedite this process, choose one of the following methods:

1. Option A: Direct Link
   1. Open a link to the Jamf Self Service application
   2. Click Send, Receive
2. Option B: Self Service App
   1. Open the Self Service application
   2. Open the Utilities category
   3. Select Send Jamf Inventory, Receive Pending Policies
   4. Click Send, Receive

Need Help?

If you encounter any issues during this process, please submit a Help request for assistance.