Hello, posting this here but it is related to some conflict between the ASR Policy in Intune and what Defender is reporting. We are moving towards more Intune management of our devices from SCCM. We are currently set up as Co-Management between Intune/SCCM. We created an ASR policy in Intune and pushed it out to all devices. When we look at the Vulnerability Management section in Defender 365 Admin, we see these ASR rules not being applied on about 200/650of our devices. I have confirmed that many of these devices are still in use daily, they are all Windows 10/11 devices.
I've done some troubleshooting and MS KB article scouring but I'm still not finding a solution.
Currently we have the following configured (as well as our Connection to SCCM)
Intune > Endpoint Security > AntiVirus
Real Time Monitoring = Allowed
Defender > Settings >...