Support 57 People Used
Intune Compliance policy for Windows devices allows an administrator to specify that a device should have one or more of three security-related elements supported and checked by the Windows Device Health Attestation (DHA) service. These include: Require Code Integrity Require Secure Boot Require BitLocker Encryption
Preview / Show details
Device 54 People Used
Here comes to rescue, the Windows Device Health Attestation (DHA), a feature that was released with the first version of Windows 10 (v1507 or codename TH1), with the sole purpose of ensuring that the device boot phase is not compromised and the device boots to a trusted state. DHA in itself does not secures the Windows boot process.
Preview / Show details
Missing 39 People Used
I'm evaluating the Health Attestation functions in SCCM CB (1610) and having difficulty getting it going. It seems fairly straight forward; if you have Internet access just configure the client policy to Yes for "Enable communication with Health Attestation Service" and away you go. That did remove warning from the Monitoring page that said "no device health …
Preview / Show details
SCCM 52 People Used
In the SCCM console, go to the Monitoring workspace. Expand Client status, and select the Client health dashboard node. SCCM Client Health Dashboard in SCCM 1906 Client Health Dashboard Filters The top row in the dashboard contains the filters. You can filter the view by several attributes to see any potential issues by OS and client versions.
Preview / Show details
Health 61 People Used
The Health Attestation feature thinks that the ELAM feature is not enabled on my computer (on any computer). However, I checked this morning and it is enabled on my computer and reporting it is not compliant/healthy because of ELAM. I also did a few config manager tasks to update policies on the client and to do new hardware & software inventories. No change after.
Preview / Show details
FIX 52 People Used
FIX SCCM Client Issues. In my experience, this tool will be able to resolve 20-30% of client issues without any manual intervention. Following thirty (29) tasks are included in SCCM 1802 health evaluation (ccmeval.exe) tool:-. Verify WMI service exists. Verify/Remediate WMI service startup type.
Preview / Show details
Enabling 49 People Used
Device Health Attestation ( DHA) is a new Windows 10 feature that allows Windows 10 to do a health check to the cloud or to an on-premises server (requires Windows Server 2016) before gaining access to internal resources. It is a new health status that can be used as a rule in Conditional Access for Windows 10 devices. Note
Preview / Show details
Device 51 People Used
Device Health Attestation Sccm - healthy-care.net. Health (6 days ago) Device Health Attestation Sccm Healthycare.net. Device Healthy-care.net Show details . 6 hours ago 2 hours ago Device Health Attestation (DHA) is a new Windows 10 feature that allows Windows 10 to do a health check to the cloud or to an on-premises server (requires Windows Server 2016) …
Preview / Show details
Device 58 People Used
On the Select destination server page, click Select a server from the server pool, select the server, and then click Next. On the Select server role s page, select the Device Health Attestation check box. Optional: Click Add Features to install other required role services and features. Click Next. On the Select feature s page, click Next.
Preview / Show details
Windows 34 People Used
Configuring an on-premises Device Health Attestation … (8 days ago) On the Select role services page, click Next. On the Device Health Attestation Service page, click Next. On the Confirm installation selections page, click Install. When the installation is done, click Close. Add the SSL certificate to the certificate store of the server.
Preview / Show details
Manager 46 People Used
Device health attestation data managed via Management Points. There is an option to validate device health attestation data via management points. This option is available under Management point component properties > Advanced Options. To configure on-premise device health attestation service URL, click Add button and provide the URL.
Preview / Show details
Upgrading 58 People Used
Windows 10 Device Health Attestation Reporting: Conditional Access for PCs Managed by Configuration Manager: You can now use conditional access capabilities to help secure access to Office 365 and other services on PCs managed with Configuration Manager agent. Conditions that can be used to control access include: Workplace Join, BitLocker, …
Preview / Show details
To view the device health attestation view, in the Configuration Manager console go to the Monitoring workspace of, click Security node, and then click Health Attestation. Device Health Attestation is displayed. Configuration Manager Device Health Attestation displays the following:
Currently only available for Windows 10 devices that are managed via OMA-DM. It adds the ability to create compliance policies that require Windows 10 devices to report as healthy. Device health attestation can be used to ensure that the following trustworthy configurations are enabled:
It will not just show a non-compliant device, it will actually show which configuration is reported as not healthy by the Health Attestation Service. For more information about conditional access, Windows 10 device health attestation and the HealthAttestation CSP, please refer to:
Starting with Windows Server 2016, you can now run the DHA service as a server role within your organization. Use this topic to learn how to install and configure the Device Health Attestation server role. Overview You can use DHA to assess device health for: Windows 10 and Windows 10 Mobile devices that support TPM 1.2 or 2.0.