Event banner

From admin to standard user with Endpoint Privilege Management

Event Ended
Monday, Mar 03, 2025, 11:30 AM PST
Online

Event details

In today's digital landscape, managing user privileges effectively is crucial for maintaining security and productivity. Don’t miss actionable insights and practical tips for deploying Endpoint Privilege Management using Microsoft Intune. Learn how to start the process of removing local admin privileges and implementing the principle of least privilege, while ensuring standard user accounts can still perform necessary tasks through controlled elevation. Join to gain the knowledge and tools needed to implement Endpoint Privilege Management effectively, ensuring a secure and efficient IT environment.


Speakers: Mike Danoski, Don Brown

 

 

This session is part of Microsoft Technical Takeoff: Windows and Intune.

Pearl-Angeles
Updated Mar 12, 2025

32 Comments

Comments have been turned off for this event
  • fjansson's avatar
    fjansson
    Brass Contributor

    Another question, will you be releasing some built-in way for administrators to receieve notifications when a new support approval request has arrived?

    • Mike-Danoski's avatar
      Mike-Danoski
      Icon for Microsoft rankMicrosoft

      This is feedback we've received in the past. There isn't anything planned for now, but the list can be pulled via graph and there are some community tools that wrap notifications around that. 

  • fjansson's avatar
    fjansson
    Brass Contributor

    Will you be supporting other filetypes in the future (other than exe/msi/.ps1), for example running built-in Windows components that require administrative rights? Examples: "Advanced system settings".

    • Don Brown's avatar
      Don Brown
      Icon for Microsoft rankMicrosoft

      We're investigating other file types. The example you cite, "Advanced system settings"... might these be settings/tools like Disk Manager? We're close to having file parameter support, so in the Disk Manager example, you'd create the rule like "mmc.exe %windir%\system32\diskmgmt.msc". Other advanced system settings would map to different command line parameters, of course, so would need additional rules to pinpoint.

      Please keep an eye on the "What's New Blog" and the "In Development" blogs for details of what is on the near-term release schedule.

    • Olaf_Thyssen's avatar
      Olaf_Thyssen
      Brass Contributor

      This sounds like support of UAC prompt which I'm desperately waiting for .....

      • Don Brown's avatar
        Don Brown
        Icon for Microsoft rankMicrosoft

        We're evaluating this, too. Hooking UAC events is a very sensitive security bit of work with Windows, but we're partnered closely with Windows to implement a solution that is secure and meets needs. Stay tuned!

Date and Time
Mar 3, 202511:30 AM - 12:00 PM PST