Forum Discussion
Microsoft EPM – Random CMD / PowerShell / OpenConsole popups
Hello everyone, we are currently testing Microsoft Endpoint Privilege Management (EPM) and are seeing some unexpected behavior on several devices. Symptoms Users occasionally see random: CMD win...
Correlate the popup timestamp with process-creation events in Event Viewer and Intune Endpoint analytics. Review EPM elevation rules, path and hash conditions, and the execution user; compare a scoped audit-mode policy with the enforced policy. Do not grant broad elevation while the cause is unknown; send the device, policy ID, and timestamps to Microsoft Support.