Windows 10 device with Secure Boot enabled shows as Not Compliant in Intune

Even if Secure Boot is ON in BIOS settings, Intune will report that there is a compliant issue with that.

Of course you can follow this troubleshooting steps from Microsoft https://learn.microsoft.com/en-us/troubleshoot/mem/intune/device-protection/secure-boot-enabled-device-shows-not-compliant but this will only show you that there is indeed an issue with the Secure Boot setting.

What really worked for me were the following:

1. BIOS – Security – Secure Boot – Restore Factory Keys – Enter
2. BIOS – Restart – OS Optimized Defaults – Enabled
3. BIOS – Restart – Load Setup Defaults – Enter
4. Go to BIOS – Main and check if UEFI Secure Boot is ON.

Hope it helps you too!