NexlinksField Notes from a CTO & CISO
Menu
Practical perspectives on Microsoft technology and hybrid infrastructure. Read the October 2026 newsletter ↗

COMMUNITY QUESTIONS

Microsoft 365 & Security: Questions & Answers

Practical answers to questions I have received through LinkedIn, this website, community meetings, and online webinars.

Answers by Phil Kinsley. Collected February 2025 through October 2026.

Contributor names and identifying handles are omitted because permission to publish them was not requested at the time. Questions are edited for clarity.

Existing answers reviewed October 18, 2026; webinar answers reviewed November 2, 2026. Original submission dates and webinar provenance are shown below.

Licensing, supported platforms, and tenant configuration can change. Check the requirements that apply to your environment before making changes.

Have a question?

Send it privately to Phil. You can choose whether it may be published anonymously.

Ask a question ↗

Page 6 of 6 · Question 76 of 76

Questions on this page
  1. Does the Intune Endpoint Readiness Collector change tenant settings?

QUESTION 76 · Conditional Access and Intune

Does the Intune Endpoint Readiness Collector change tenant settings?

Does the Intune Endpoint Readiness Collector change tenant settings?

Phil Kinsley:

The collector is designed to retrieve evidence through Microsoft Graph using read-only permissions. It writes local JSON, not tenant configuration, and does not deploy policies, remediate devices or calculate readiness scores. Review the current README and requested permissions before running it. Graph beta dependencies, permissions, scope tags and failed queries can reduce the evidence collected.

← Back to Community & Technical Resources