Event details
7 Comments
Policy configuration shouldn’t be an ai wizard, it should be a dsc configuration and reports to show devices failing to meet the desired state. There should be policy templates that actually align to benchmarks like cis, just like Open Intune Baseline, but produced and delivered by Microsoft. Not the impossible to maintain baseline policies.
This all feels cart before the horse. We’ve got AI, how can we use that in Intune? As an example, you are pushing it to do reporting. In most cases reports are “static”, we run them every week, I don’t want or need generative ai to do such reporting. I do want good quality build it reports, and tooling to modify such reports. AI is not a golden bullet to fill in gaps in the current tooling, poor UI choices, or missing reports. There are so many gaps and opportunities to improve Intune, the core product, and only few of these require any kind of AI. I get you want to sell me the new shiny, extract more cash, but Microsoft seem to be neglecting good old fashioned product design and engineering. Why are there 2 Autopilots? Why aren’t there proper reliable Secure Boot reports for the new certs? Built in policy to push deployment? Yes, there are some secure boot tools coming, but they are buggy and months late to the party. Why is the device inventory information not available in reports or accessible through graph? Why are there no built in conflict discovery and remediation tooling built in?
- tvanhollebeke
Microsoft
Thanks for the candid feedback! Capabilities like clear operational controls and reporting are foundational for the day-to-day of IT admins, and we continue to invest in those critical areas. Here are some recent updates:
- admin tasks in Intune - brings together high‑impact approvals and remediation workflows into a single, prioritized queue, helping admins quickly see and act on what matters most.
- General availability of Windows Autopatch update readiness - includes the ability to create a Windows Autopatch management status report.
- What's New in Intune - February - each month, you can read this blog to keep up on the latest. Last month we shared a few updates including additional options for multi-admin approval flows.
We're actively taking in customer input to understand where AI is most valuable and can improve the day-to-day work for IT admins. So, we welcome any additional thoughts - thank you!
- LiMiller
We published new guidance for Secure Boot certs with Intune.
- Microsoft Intune method of Secure Boot for Windows devices with IT-managed updates
- New! Applying Secure Boot certificate update settings using model-based targeting in Microsoft Intune
- Monitoring Secure Boot certificate status with Microsoft Intune remediations
- Secure Boot status report in Windows Autopatch
- LiMiller
Specifically for the Autopilot question:
There are currently two provisioning approaches available within Autopilot, designed for different deployment scenarios. I'll explain quickly below, but I recommend reading more here: Deep dive into Windows Autopilot
- Autopilot device preparation – the newer user-driven experience designed to simplify setup and reduce deployment complexity
- Autopilot – the original experience needed for scenarios like pre-provisioning, self-deploying, or hybrid join
- Heather_Poulsen
Community Manager
Thanks for joining today’s session on “The AI-powered admin: emerging trends in endpoint management” at Microsoft Technical Takeoff. Q&A will remain open through Friday so keep your comments and questions coming! Up next: Eliminating NTLM in Windows.
- Pearl-Angeles
Welcome to “The AI‑powered admin: emerging trends in endpoint management” at Microsoft Technical Takeoff. Q&A is open now and throughout the week. Please post any questions or feedback here in the Comments. [Note: If your organization’s policies prevent you from seeing the video on this page, you can also tune in on LinkedIn.]
