ne of the easiest Microsoft Intune concepts to confuse is the difference between a compliance policy and a configuration profile.

Both deal with device settings.

But they serve different purposes.
Configuration Profile

Think of a configuration profile as:

“I want the device configured this way.”

The administrator defines settings and Intune attempts to apply those settings to the targeted device or user.

For example, you might configure Windows security settings or OneDrive behavior.

Compliance Policy

A compliance policy answers a different question:

“Does this device satisfy the conditions required by the organization?”

The purpose is primarily to evaluate the device against requirements.

Depending on Microsoft’s supported settings and your organization, this could involve criteria relating to operating-system or security state.

Configuration vs Evaluation

This distinction is the easiest way to remember the difference:

Configuration profile = configure

Compliance policy = evaluate

The concepts can work together, but they should not be treated as interchangeable.

Add Conditional Access

It becomes even more powerful when Microsoft Entra Conditional Access is introduced.

Conceptually:

Intune compliance evaluates the device.

Entra Conditional Access makes the access decision.

For example:

The device enrolls in Intune.
Compliance policies evaluate it.
The device reports a compliance state.
A user attempts to access a protected cloud application.
Conditional Access evaluates applicable requirements.

This demonstrates why modern Microsoft administration increasingly requires knowledge across several products.

Why Administrators Get Confused

The confusion is understandable because sometimes a security objective involves both configuration and compliance.

For example, an administrator may want devices to use a particular security capability.

One policy may configure the endpoint.

Another may evaluate whether the endpoint meets organizational requirements.

Understanding the objective of each policy is more important than simply memorizing menu locations.

Final Thoughts

When designing your Intune environment, ask two questions:

Am I trying to configure something?

Use the appropriate configuration mechanism.

Am I trying to determine whether the endpoint meets an organizational requirement?

Investigate compliance policy.

Once that distinction becomes clear, Intune policy design becomes considerably easier to understand.