Do we have to manage the contractor's laptop?

No. You don't enroll it in your MDM or take remote control of it.

What happens if the laptop fails a check?

The contractor sees which requirement failed and what to fix. After fixing it, they run the check again.

How does this work with Microsoft Entra?

Your team gets the device-check result in Microsoft Entra and keeps using the access rules you already have.

Does it work with Windows 365?

Yes. PosturePass checks the physical Windows or Mac laptop the contractor uses to connect to Windows 365.

What information can our team see?

You can see the security information needed for your required checks and the result of each check. You do not get access to the contractor's personal files or browsing activity.

Do we get a record of the checks?

Yes. Your team can see what was checked, when it was checked and whether the device passed.

For Microsoft 365 contractor access

Check contractor laptops without managing them.

With PosturePass, your team can check encryption, antivirus, firewall, software updates and screen lock on contractor laptops you don't manage.

You keep using Microsoft Entra to control access to Microsoft 365 and Windows 365.

PosturePass doesn't enroll the laptop in MDM or let anyone control it remotely.

Book a demo How it works

1.4M+ devices checked

PosturePass app on a laptop showing a compliant contractor device and its Microsoft Entra connection

Works with Microsoft Entra

Used by contractors from

Windows, macOS and LinuxNo MDM enrollment

Your employees use laptops you manage. Your contractors don't.

You already manage employee laptops.

Contractors use laptops owned by them or managed by their employer. You still need to know whether those laptops meet your security requirements before they access your applications.

PosturePass lets you check the laptop without taking over its management.

Two cards side by side. Employee laptop: managed by your company, you manage it, your usual controls apply. Contractor laptop: not managed by your company, you don't manage it, you still need to check it, PosturePass checks it.

Employee laptop card: managed by your company. You manage it. Your usual controls apply.

Contractor laptop card: not managed by your company. You don't manage it. You still need to check it. PosturePass checks it.

How PosturePass works

Sign in as usual

The contractor signs in to Microsoft 365 or Windows 365 the same way they normally would.

They don’t need to open PosturePass.

Check the device in the background

The required security settings are checked, including encryption, antivirus, firewall, updates and screen lock.

Your team gets the result in Microsoft Entra.

Keep using your existing access rules

You keep using the Microsoft Entra access rules you already have.

If the device meets your requirements, the contractor continues as normal. If something fails, they see what needs fixing.

Your team also gets a record of each check, including what was checked, when it was checked and the result.

The contractor experience

If a check fails, the contractor can see why.

If something is wrong, the contractor sees which setting failed and how to fix it.

After fixing it, they run the check again.

Two PosturePass windows side by side. Left: Device does not meet requirements, with anti-malware and firewall turned off and steps to open each setting. Right: Device meets requirements, with every check passed.

PosturePass window showing Device does not meet requirements. Anti-malware and firewall are turned off, each with a link to open its settings, and a Recheck button.

PosturePass window showing Device meets requirements. Every check is passed, with a Check again button.

Check the security settings you need, without taking over the device.

What you can check

PosturePass checks the security settings you care about before the contractor accesses your applications.

Encryption
Antivirus
Firewall
Software updates
Screen lock and password
Remote-access tools

See all supported checks

What you don't get access to

Personal files
Browsing activity
Keystrokes
Screenshots
Remote control of the device
MDM enrollment

PosturePass does not wipe, lock or remotely control the contractor's device.

Customer-reported results

How a regulated U.S. company in the insurance industry moved 2,000+ contractors off VDI and into Microsoft 365

The migration took eight weeks and was completed in February 2025.

2,000+

contractors migrated

8 weeks

from start to completion

Read the full case study

Common questions

Using a virtual desktop mainly to control contractor access? See how PosturePass fits into a Microsoft 365 or Windows 365 environment.

Want to learn more?

Book a 30-minute demo with our team.

Book a demo