6 Ways to Manually Sync Intune Policies on Windows Devices

Let’s see how to manually sync Intune policies using multiple methods on Windows 10 and Windows 11 devices. Syncing forces your device to connect with Intune to get the latest updates, requirements, and communications from your organization.

According to Microsoft, the Company Portal app regularly syncs devices with Intune as long as you have a Wi-Fi connection. However, if you ever need to disconnect for an extended period of time, you can manually sync to get any updates you missed when you return.

Synchronizing policies between devices and Microsoft Intune is one of the most common tasks performed by Intune administrators following the deployment of a policy or app. This is true for application deployments, PowerShell script deployments, custom OMA-URI policy deployments, and various other scenarios.

What happens when you force a device to sync policies with Intune?

When you initiate a sync on a device, Intune notifies the device to check in to receive the latest updates and policies. Intune will attempt to check with this device. If successful, it will sync current actions or policies to the device. For example, if you have deployed a Win32 app to a Windows device group, running a sync will force devices to check with Intune if there are any deployments. In a nutshell, the sync action forces the devices to connect to the Intune service and download the most recent policies and deployments.

Requirements for Syncing Intune Policies on Windows Devices

To begin Intune policy sync on Windows devices, they must be enrolled in Intune and online. If the Intune company portal app is installed on devices, it makes it easy to perform Intune policy sync.

You can refer to the below guides for enrolling Windows 10 and Windows 11 devices in Microsoft Intune.

• Enroll Windows 10 devices in Microsoft Intune
• Enroll Windows 11 devices in Endpoint Manager

You can also sync Intune policies on macOS devices. You can do so through the company portal app, which is installed on Mac devices that are enrolled in Intune.

When should you manually sync policies for devices?

There are four reasons why you would manually sync the Intune policies from enrolled devices in Microsoft Intune:

1. When you want to test the Intune policies ASAP on the user’s device, you can force the Intune policy update on devices. Be it Intune application deployment or other policy changes, you want to sync Intune policies on devices as soon as possible.
2. Manually syncing the policies is a common step in troubleshooting an issue on a user’s Intune-managed device.
3. If you’re experiencing slow or unusual behavior while installing or using a work app, try syncing your device to see if an update or requirement is missing.
4. Syncing can also help resolve work-related downloads or other processes that are in progress or stalled.

Ways to Force Intune Sync Manually from Windows device

We will use the following methods in this article to force sync Intune policies on Windows devices:

• Company Portal app
• Desktop taskbar or Start menu
• Using the Settings app
• Sync Action in Intune Admin Center
• Refresh Intune Policies on Cloud PCs and Windows devices using Bulk Device Actions
• Use PowerShell to trigger Intune Policy Sync on a single Windows device and all Windows devices

Intune Default Policy Sync Interval

Do you know how long it takes for devices to receive an Intune policy, profile, or app after they are assigned? The answer is 8 hours. This is known as the Intune Policy refresh cycle. Microsoft has already specified the default Intune policy time intervals for various device types.

Here is a table that lists the default Intune policy sync interval based on device type.

Device Type	Default Intune Policy Refresh Intervals
Windows 10/11 PCs enrolled as devices	Every 8 Hours
Android	Every 8 Hours
macOS	Every 8 Hours
Windows 8.1	Every 8 Hours
iOS/iPadOS	Every 8 Hours

Note: The Intune management extension (IME) policy cycle is set to run every 60 minutes. If devices recently enroll in Intune, then the compliance, non-compliance, and configuration check-in runs more frequently.

Intune Policy Refresh Intervals for Recently Enrolled Devices

The table below shows the frequency of Intune device check-ins based on device type.

Platform	Intune Device Check-In Frequency
Windows 10/11 PCs enrolled as devices	Every 3 minutes for 15 minutes, then every 15 minutes for 2 hours, and then around every 8 hours
Android	Every 3 minutes for 15 minutes, then every 15 minutes for 2 hours, and then around every 8 hours
macOS	Every 15 minutes for 1 hour, and then around every 8 hours
iOS/iPadOS	Every 15 minutes for 1 hour, and then around every 8 hours
Windows 8.1	Every 5 minutes for 15 minutes, then every 15 minutes for 2 hours, and then around every 8 hours

We will now look at different methods with which you can manually sync Intune policies on Windows devices.

1. Manually Sync Intune Policies from Device Taskbar or Start menu

On a Windows device, you can manually sync Intune policies from the Taskbar or Start Menu. Click Start and type “Company Portal” in the search box. Right-click the Company Portal app and select “Sync this device“.

The Sync this device action should be available for the company portal app installed on Windows 10 and Windows 11 devices. If the company portal app is pinned to the taskbar, you won’t get the sync device action.

The Company Portal app opens to the Settings page and initiates the policy sync with Microsoft Intune. If the Intune Policy sync is successful, you should see the message “Sync Successful” on the same screen.

2. Sync Intune Policies from Company Portal App

You can quickly initiate the Intune Policy Sync from the Company Portal app. This method requires you to launch the company portal app and select the Sync option from the Settings menu.

Click Start and launch the Company Portal app. Click on Settings and select Sync to synchronize your device with the latest updates from MS Intune.

The Company Portal app initiates the sync. It takes a while to synchronize the latest Intune policies. The line “Last Sync on Date Time was successful” confirms the policy synchronization is successfully completed.

3. Manually Sync a device from Intune Admin Center

In the Intune admin center, the Sync device action forces the selected Windows device to immediately check in with Intune. When a device checks in, it immediately receives any pending actions or policies that have been assigned to it.

Tip: The Sync device action is also available for cloud PCs. With Cloud PC Remote Actions, you can remotely manage Cloud PCs in Intune just like any other managed device.

Intune currently supports the following device types for the Sync device action:

• Windows
• iOS
• macOS
• Android (Device administrator and Android for Work only)

To sync a remote Windows device from Intune, follow these steps:

• Sign in to the Microsoft Intune admin center.
• Select Devices > Windows > All Devices.
• In the list of devices you manage, select a device to open its Overview pane, and then select Sync. To confirm Sync, select Yes.

A message box appears when you initiate a device sync from the Intune admin center. Intune will attempt to check in with this device. If successful, it will sync current actions or policies to the device. Would like to continue. Select Yes.

4. Perform Intune Policy Sync using Settings App

You can manually sync to refresh Intune policies on Windows devices using the Settings App. On your device, select Start > Settings. Select Accounts. Under Accounts, select Access Work or School. Select the account that has a briefcase icon next to it. Click Info.

Under Device Action Status, select Sync. This will sync the latest security policies, network profiles and managed applications from Intune.

5. Force Intune Policy Sync using PowerShell

You can use Microsoft Graph and PowerShell to force Intune policy sync on Windows devices. With PowerShell, you can choose to refresh Intune policies on a single Windows device or on all Windows devices. We will look at both examples in this article. The below commands are taken from the Microsoft Graph PowerShell SDK documentation.

Step 1: Install Microsoft Graph Intune Module

In this step, we will install Microsoft.Graph.Intune PowerShell module. Launch PowerShell as an administrator and enter the below PS command.

Install-Module -Name Microsoft.Graph.Intune

Step 2: Connect to Microsoft Graph

Once you have installed the Intune PowerShell SDK, we will use it to perform some basic tasks. The Connect-MgGraph cmdlet is used to connect to Microsoft Graph via PowerShell.

Connect-MgGraph

You’ll need to sign in with an admin account to consent to the required scopes. On the resulting web page, sign in to your tenant with a user account that has the appropriate read and write permissions. We are using a global administrator account in this example.

Step 3: Connect to Device Management scopes

Run the below PowerShell command to connect to the required device management scopes. This is required to read the properties of the objects managed by Intune. You’ll need to sign in with an admin account to consent to the required scopes.

Connect-MgGraph -scope DeviceManagementManagedDevices.PrivilegedOperations.All, DeviceManagementManagedDevices.ReadWrite.All,DeviceManagementManagedDevices.Read.All

Step 4: Check Last Sync Date and Time of Windows Device

Before invoking an Intune policy on a Windows device, run the following command to determine when the device was last synced.

Get-MgDeviceManagementManagedDevice -Filter "contains(deviceName,'CLOUDVM1')" | fl lastsyncdatetime

Step 5: Invoke Intune Sync on a single Windows Device

The Get-MgDeviceManagementManagedDevice cmdlet lets you read properties and relationships of the managed device object in Microsoft Intune. In this step, we will run the following PowerShell command to invoke Intune sync on a given Windows device.

Sync-MgDeviceManagementManagedDevice -ManagedDeviceId deviceID

Step 6: Invoke Intune Policy Sync on all Windows Devices

In this step, we will run the following PowerShell script to invoke Intune sync on a all Windows devices.

$Windowsdevices = get-MgDeviceManagementManagedDevice | Where-Object {$_.OperatingSystem -eq "Windows"}

Foreach ($device in $Windowsdevices) {
    Sync-MgDeviceManagementManagedDevice -ManagedDeviceId $device.id
    write-host "Sending device sync request to" $device.DeviceName -ForegroundColor red
}

Step 6: Run Intune Policy Sync on Windows, Mac, iOS, Android devices using PowerShell

If you want to sync Intune policies on all devices that are enrolled in Intune (Windows, Android, Mac, iOS, Android), you can run the below PowerShell script.

$Alldevices = get-MgDeviceManagementManagedDevice -All

Foreach ($device in $Alldevices) {
    Sync-MgDeviceManagementManagedDevice -ManagedDeviceId $device.id
    write-host "Sending device sync request to" $device.DeviceName -ForegroundColor yellow
}

6. Use Bulk Device Actions to Force Intune Policy Sync

This method uses the bulk device action to sync Intune policies on multiple Windows devices. If you want to trigger policy sync on multiple Windows PCs in your organization, bulk device actions should be used. You can initiate the policy sync on numerous physical Windows devices, including Windows 365 cloud PCs.

In the Intune Admin Center, go to Devices > Windows > Windows Devices. Select Bulk Device Actions.

On the Basics tab, select the following:

• OS: Windows
• Device type: Physical devices or Cloud PCs
• Device action: Sync.

Click Next.

On the Devices tab, click on the option “Select devices to include” and choose the Windows devices on which you want to manually sync Intune policies. Click Next.

On the Review + Create tab, select Create. On selected Windows devices, the latest policies are now synchronized with Intune.

Monitor Intune Policy Sync in Event Viewer

Either of these things can happen when you perform an Intune policy sync on a Windows device. The policy sync is either successful or unsuccessful. The deployment of a configuration profile, a Win32 app, or a script to your Windows devices may fail. The Event Viewer lets you troubleshoot issues related to company portal sync.

Launch the Event Viewer and go to Application and Services Logs. Select Microsoft > Windows > DeviceManagement-Enterprise-Diagnostics-Provider > Admin. Review each event to identify the cause of Intune policy sync failures.