WHY INTUNE DEVICES BECAME NONCOMPLIANT AFTER THE JULY WINDOWS UPDATE

Summary from the TLDR IT newsletter

A Windows regression caused some newly enrolled or recovered Intune devices to incorrectly report BitLocker, Secure Boot, and Code Integrity as noncompliant, even when those controls were enabled. Microsoft initially reduced the impact through an Intune service change and recommends installing preview update KB5101684 for the complete Windows-side fix.