Forum Discussion

chrisp1992's avatar
chrisp1992
Brass Contributor
Apr 06, 2023

EPM not showing Elevation Denials in the Elevation Report

In our testing, we were expecting to see elevation denials shown in the Elevation Report - but that hasn't been our experience so far. We see successful elevations with business justification and credentials, but when the Settings policy is set to "Deny all requests" or "Not Configured", and we get an elevation denial, it doesn't show up in the report after 24 hours (over 48 hours now). 

 

I can't find anything in the docs about whether or not denials are in the reports, but I assumed they would be. Any ideas?

  • chrisp1992's avatar
    chrisp1992
    Brass Contributor
    To add onto this - all of our elevation attempts are no longer being reported on. We have the Elevation Settings Policy properly configured and assigned, and we have one rule which is allowing for one app to be elevated with justification and one app to be auto-elevated. These elevations are not showing up in our reports.
    • KB850VR's avatar
      KB850VR
      Brass Contributor
      We're seeing similar behavior in this implementation, as well as when the settings are explicitly enforced.
      • chrisp1992's avatar
        chrisp1992
        Brass Contributor
        In our ticket with Intune, they also seem to be experiencing the issue, so reporting seems broken. It's certainly not showing up within 24 hours as promised. Some of our elevations are taking days or weeks to show up in reports.

Resources