Endpoint Privilege Management - Comprehensive guide to the setup and client testing

Рет қаралды 8,871

Жыл бұрын

In this video I walk through how to setup the new Endpoint Privilege Management feature to be added into the Intune suite. This is in public preview at this time and free to use without a license.
You will find content for setting up and testing both Elevation rules and Elevation settings policies.

Пікірлер: 29

@farrukhaari810 3 ай бұрын

Excellent videos about EPM setup.

@cipher_ali Жыл бұрын

Nice video - please keep on top of this, I expect more functionality will be added overtime

@theCMC Жыл бұрын

I agree, thanks

@khalidhussein4521 11 ай бұрын

Great video, thank you!

@pandastory-abookseriesabou8568 Жыл бұрын

👌🏻 Like it! 🚀

@sjoerdw2 Жыл бұрын

Great video, thanks!

@theCMC Жыл бұрын

Thanks

@sfwplant 3 ай бұрын

Great scenes!

@666gene 10 ай бұрын

Thank you!

@amualla Жыл бұрын

🙏 thank you

@RPG_ash Жыл бұрын

Really looking forward to this. Does this only work for new program installs that require admin rights, or does it also include running an already installed program that requires admin rights to open and use? (e.g. something like Win32disk imager or RSAT - Regression Suite Automation Tool) Also, after you added the rule policy, did you change the settings policy back to deny all? As you had "require user confirmation" which you still had from previous. If you have specific apps in the rule policy, wouldn't you change the settings policy back to "deny all" so all other programs are blocked except the one in the rule policy?

@theCMC Жыл бұрын

Hi, to my knowledge at this early preview stage it works with new installs and any existing apps or files that require admin rights to open/run. Good spot on the settings policy I should have made it clear. Yes I switched back to deny all.

@Baaklund Жыл бұрын

Great walkthrough - only thing missing would be license/ price info :)

@theCMC Жыл бұрын

Rasmus its available as an add-on or part of the full Intune suite license. pricing was unclear at the time of recording. www.microsoft.com/en-us/security/business/microsoft-intune-pricing?rtc=1

@JB-fe6vg Жыл бұрын

Thank you for this guide: Must in a Co-Management Env. a Workload-Type point to Intune? I have the issue that my device is showing "not applicable"

@mustafashawer6677 10 ай бұрын

Excellant

@theCMC 10 ай бұрын

Thank you

@hitmansnipes6445 Жыл бұрын

I also got a VM on VMWare on my Win11 machine and so far it has not taken the policy on the endpoint side, Intune shows the device succeeded but the prompt to block does not come up.

@tanketime 5 ай бұрын

Hi great video! but, I cant Accept o Denied on Console a program that a user tries to install, only can run reports about how was istalled by elevated rights? Thats correct?

@MonsterMey 10 ай бұрын

I am kind of lost, I followed your video. Everything worked on a test system I created. I made the Elevation rule. And I created a policy that worked with certificates to check if it was allowed to run the application. I had re-set the system on which I had tested this all. No I am using a different system. Its still a dell and running windows 11 with all the latest updates. I deployed the EPM rules and policy's. They all deployed successfully as shown in azure. And when I go to C:\Programfiles I can see the EPM Agent folder looking good. Somehow when I right click on installers (the same I used to test on the other device that is now wiped) the "Run with elevated access" button is just not coming up. Any ideas to what this could be? I am kind of lost!!