You have a Microsoft 365 tenant with devices enrolled in Microsoft Intune. A conditional access policy named Policy1 is assigned to Group1 and blocks noncompliant devices from accessing OneDrive for Business. How can you determine which noncompliant devices tried to access OneDrive for Business?

The Conditional Access Insights and Reporting workbook in the Microsoft Entra admin center is the correct tool because it provides detailed logs and insights into conditional access policy evaluations, including attempts to access resources and the resulting outcomes (e.g., blocked due to noncompliance). This workbook specifically tracks which policies were applied, the conditions met, and the access decisions made, making it ideal for identifying devices blocked by Policy1. The other options are less suitable: The Device compliance report in Intune shows the overall compliance status of devices but doesn't detail access attempts or conditional access policy enforcement. The Noncompliant devices report in Intune lists devices that are out of compliance but doesn't show which of those devices specifically tried to access OneDrive for Business or were blocked by a conditional access policy. The Setting compliance report in Intune focuses on the compliance of specific settings on devices, not on conditional access policy outcomes.