Blog Post

Microsoft Intune Blog
5 MIN READ

Enable Windows standard users with Endpoint Privilege Management in Microsoft Intune

Matt_Call's avatar
Matt_Call
Icon for Microsoft rankMicrosoft
Mar 01, 2023
The landscape for cyberattacks has become more complex in recent years. In 2022, Microsoft security researchers tracked a 130% increase in organizations that encountered ransomware over the last yea...
Updated Mar 02, 2023
Version 4.0
microsoft intune
DKEVINZ's avatar
DKEVINZ
Brass Contributor
Apr 05, 2023

Cool feature, I have been waiting for this.

 

However, I have the following questions:

- Can we allow temporary elevation not just on files but also specific configuration settings, e.g. so users can edit their network configuration, firewall rules, etc.? Maybe we can add a rule for the corresponding control panel applet to start elevated?

- Can we allow for temporary elevation of en entire installation source directory, for instances where the installation source consists of multiple files and subdirectories.

- Can we allow for temporary elevation of subprocesses that are started by the main process when we run the executable? E.g. if a .exe installer unpacks a .msi file, will that .msi file be elevated as well?

- Can we allow for temporary elevation of not only .exe installer files but also other filetype extensions, e.g. .MSI, .ZIP, etc.?

- Allow of temporary elevation to other secure directories like e.g. C:\Users or C:\Window or C:\Program Files (for manual placement of config or license files).