unused computer devices - administrator approach.

What is your general approach to end user devices (Windows Laptops) that have not logged into your private network for a significant period of time? For as long as they are offline, they are obviously falling behind on updates/AV signatures etc, and therefore I presume there becomes a period of time whereby action needs to be taken by an administrator.  
I recall when our devices were joined to on-premises AD, the admins would disable the devices after a pre-defined number of days of no login activity, in the same way they would stale accounts. Now the devices are in InTune/Endpoint Manager, I am not so sure if that system naturally manages unused devices (and how), or if there is still an onus on an administrator to take some form of remedial or preventative action – hence querying – what is your approach?