Do we have to manage the contractor's laptop?

No. You don't enroll it in your MDM or take remote control of it.

What happens if the laptop fails a check?

The contractor sees which requirement failed and what to fix. After fixing it, they run the check again.

How does this work with Microsoft Entra?

Your team gets the device-check result in Microsoft Entra and keeps using the access rules you already have.

Does it work with Windows 365?

Yes. PosturePass checks the physical Windows or Mac laptop the contractor uses to connect to Windows 365.

What information can our team see?

You can see the security information needed for your required checks and the result of each check. You do not get access to the contractor's personal files or browsing activity.

Do we get a record of the checks?

Yes. Your team can see what was checked, when it was checked and whether the device passed.

For Microsoft 365 contractor access

Check contractor laptops without managing them.

With PosturePass, your team can check encryption, antivirus, firewall, software updates and screen lock on contractor laptops you don't manage.

You keep using Microsoft Entra to control access to Microsoft 365 and Windows 365.

No MDM enrollment. No remote control of the laptop.

Book a demo How it works

1.4M+ devices checked

PosturePass app on a laptop showing a compliant contractor device and its Microsoft Entra connection

Works with Microsoft Entra

Used by contractors from

Microsoft EntraWindows + macOSNo MDM enrollment

Your employees use laptops you manage. Your contractors don't.

You already manage employee laptops.

Contractors use laptops owned by them or managed by their employer. You still need to know whether those laptops meet your security requirements before they access your applications.

PosturePass lets you check the laptop without taking over its management.

Two cards side by side. Employee laptop: managed by your company, you manage it, your usual controls apply. Contractor laptop: not managed by your company, you don't manage it, you still need to check it, PosturePass checks it.

Employee laptop card: managed by your company. You manage it. Your usual controls apply.

Contractor laptop card: not managed by your company. You don't manage it. You still need to check it. PosturePass checks it.

How PosturePass works

Run the check

The contractor opens PosturePass on the Windows or Mac laptop they use for work.

Check the device

Your required security settings are checked, including encryption, antivirus, firewall, updates and screen lock.

Your team gets the result in Microsoft Entra.

Use your existing access rules

You keep using your existing Microsoft Entra access rules.

If the device passes, the contractor can continue into Microsoft 365 or Windows 365. If something fails, they see what needs fixing.

Your team also gets a record of each check, including what was checked, when it was checked and the result.

The contractor experience

If a check fails, the contractor can see why.

If something is wrong, the contractor sees which setting failed and how to fix it.

After fixing it, they run the check again.

Two PosturePass windows side by side. Left: Device does not meet requirements, with anti-malware and firewall turned off and steps to open each setting. Right: Device meets requirements, with every check passed.

PosturePass window showing Device does not meet requirements. Anti-malware and firewall are turned off, each with a link to open its settings, and a Recheck button.

PosturePass window showing Device meets requirements. Every check is passed, with a Check again button.

Scope

Check the security settings you need, without taking over the device.

What you can check

PosturePass checks the security settings you care about before the contractor accesses your applications.

Encryption
Antivirus
Firewall
Software updates
Screen lock
Password requirements
Remote-access tools

See all supported checks

What you don't get access to

Personal files
Browsing activity
Remote control of the device
MDM enrollment

PosturePass does not wipe, lock or remotely control the contractor's device.

Customer-reported results

How an insurance company moved 2,000+ contractors off VDI and into Microsoft 365

The migration took eight weeks and was completed in February 2025.

2,000+

contractors migrated

8 weeks

from start to completion

Read the full case study

Common questions

Using a virtual desktop mainly to control contractor access? See how PosturePass fits into a Microsoft 365 or Windows 365 environment.

Want to learn more?

Book a 30-minute demo with our team.

Book a demo