I've found an Intune deployment option that could prepare devices with policies and updates before users receive them, cutting down the wait for compliance. I got a go-ahead, but security has asked me to stop until they can review it, potentially not until next year.
Is that kind of delay normal, or is there a better way to handle this?
The review itself sounds reasonable. A change to how devices are provisioned can affect security controls, even if the feature is built into Intune. The length of the delay is a separate question.
Ask what needs to be reviewed and whether there are regulatory requirements, maintenance windows, or other projects driving the schedule. Those details matter more than whether the setting looks simple.
The conflicting approvals are the bit I'd fix first. Whoever gave the initial go-ahead may not have had authority to approve the security side. Put in a change request that identifies the owners who need to sign off, the proposed deployment method, and how you'd test and roll it back.
If there's no defined process for this kind of change, ask your manager to help establish one. Finding out after you start that another team can stop it is frustrating for everyone.
A year is a long time to leave a potentially useful improvement sitting in a queue. Document how long deployments currently take, how often you do them, and the expected time savings. Ask for a review date and have your manager raise the competing priorities with security management.
That doesn't mean skipping the review. It gives both teams something concrete to use when deciding where the work belongs in the queue.
I wouldn't jump from this delay to saying the security team doesn't know what they're doing. They might be short on review capacity or working on changes that affect the deployment process. Still, they should be able to explain the blocker and give you a way to get the request prioritized.
Answers are reviewed before publication.
9.paces.in:
I'd also ask whether a small pilot can be reviewed sooner than a full rollout. They may still need the same review, but it's worth asking.