Over the past weeks I’ve seen a lot of chatter around policy refresh intervals on Twitter and in various forums. In most of the cases, the response has been with an URL to a blog post on TechNet where a member has posted a table of policy refresh intervals for different types of platforms. Recently my fellow blogger Gerry Hampson wrote about the same topic, referencing the blog post from TechNet. I myself had not found any official documentation of these policy refresh intervals, up until today when I stumbled upon the following TechNet documentation:
https://technet.microsoft.com/en-us/library/dn743712.aspx
On this documentation page from TechNet, that was updated today in fact, we can clearly see that the policy refresh intervals are well documented for various platforms. It also appears that previous mentioned intervals were correct, just not documented to my knowledge. I’ve copied the tables from the documentation page and inserted them below for your convenience:
Platform | Check-in frequency after initial notification |
iOS | Every 6 hours |
Android | Every 8 hours |
Windows Phone | Every 8 hours |
Windows PCs enrolled as devices | Every 24 hours |
In addition to the mentioned policy refresh intervals above, there are also a set of other intervals worth mentioning if the device has recently enrolled into Microsoft Intune:
Platform | Frequency |
iOS | Every 15 minutes for 6 hours and then every 6 hours |
Android | Every 3 minutes for 15 minutes then every 15 minutes for 2 hours, and then every 8 hours |
Windows Phone | Every 5 minutes for 15 minutes then every 15 minutes for 2 hours, and then every 8 hours |
Windows PCs enrolled as devices | Every 3 minutes for 30 minutes, and then every 24 hours |
So what happens if an administrator were to deploy an app or a policy to a device, when will the device receive a notification about the new policy or app? Immediately after the deployment has taken place, Intune will attempt to notify the device that it should check-in with the Intune service. This process normally takes less than 5 minutes. But if the device would not check in to get the new policy, Intune will attempt to notify the device 3 more times. In the case that the device does not receive any of those notifications, the device will get the new policy on its next scheduled check-in with the Intune service accordingly to the tables above.
I hope this helps spreading some light on how the policy refresh (check-in) intervals are configured for devices managed by Microsoft Intune.
Does the policy only work if the owner of the device is the one logged in to the machine? It works for the account used to join the device to AD but not for user assigned to use the device.
Thanks for this. Despite multiple searches on TechNet/Docs I couldn’t find this!
[…] The duration until this happens can vary. More about the Policy Refresh, can be found on Nickolaj Andersen blog: Policy refresh intervals for Devices managed by Microsoft Intune […]
[…] The duration until this happens can vary. More about the Policy Refresh, can be found on Nickolaj Andersen blog: Policy refresh intervals for Devices managed by Microsoft Intune […]
[…] Policy refresh times are frankly the bane of my life when it comes to doing demos. I’m constantly outfoxed by them. This excellent article, by shoud-be-MVP Nickolaj, is all you ever need to know about policy refresh cycles! […]
Hi Nickolaj. Great article. But I have one doubt, does the intune service tries to notify the devices every 6/8/24 hours respectively or the devices try to fetch those policies at the time specified?
Nice info, is this relevant to standalone and on-prem InTune deployments?
Hi Carl,
This information is for stand-alone deployments of Microsoft Intune.
Regards,
Nickolaj