Updated management features roll out for Microsoft Intune Suite

Effectively managing user permissions and application lifecycle is key to increasing IT security and efficiency of digital assets. With the latest updates to the Microsoft Intune Suite, Microsoft Intune Endpoint Privilege Management (EPM) and Microsoft Intune Enterprise Application Management (Enterprise App Management) give IT administrators the tools they need to simplify endpoint management and strengthen their organization’s security posture. do. Let’s take a look at some of the enhancements to EPM and Enterprise App Management and how they benefit IT and security teams.

Why these updates are important for IT managers and teams

Intune Suite’s enhanced EPM and enterprise app management capabilities help IT managers simplify security controls and minimize disruption to employee productivity, ensuring smooth workflows and strong security across the organization.

• Automation improvements: EPM’s automated rule creation and Enterprise App Management’s guided application upgrades simplify IT operations by significantly reducing manual intervention.
• Granular Control: EPM’s ability to control file acquisition and support Azure Virtual Desktop allows IT teams to accurately manage user permissions, reducing security risks.
• Efficient app management: Enterprise App Management’s expanding app catalog and automated update process help IT teams keep applications up-to-date with minimal effort.

These features provide powerful, built-in tools to control user access and manage applications without the need for third-party solutions.

Increased efficiency through EPM

EPM in Intune Suite allows IT administrators to control user permissions and minimize security risks by managing when users can elevate privileges on Windows devices. Recent enhancements have made the process more efficient.

Automatic rule creation for faster approvals

One of the main challenges in managing privilege elevation was manually entering elevation rules. With this update, administrators can now automatically create escalation rules directly from support approval requests or escalation report items. This automation reduces the time you spend manually entering details and helps ensure consistent responses to your requests. When a user requests temporarily elevated access to install software, administrators can now approve the request directly from a support ticket and automatically create an elevation rule with all the necessary details to ensure fast and consistent access. Users no longer have to wait for lengthy manual approval processes for privilege elevation. Automatic rule creation from support tickets allows administrators to respond faster and improve overall productivity by giving users the access they need without delay.

File argument control for granular privilege escalation

EPM now provides more precise control by allowing administrators to specify allowed command parameters when setting up elevation rules. This means that only necessary commands are promoted, while potentially dangerous commands are blocked. For example, you can allow certain scripts to run with elevated privileges but restrict other commands, increasing security without reducing functionality.

Security through EPM’s personal data encryption

EPM is now integrated with Personal Data Encryption (PDE) for Windows Folders, providing an additional layer of security when managing sensitive files. This integration ensures that even if a user temporarily gains elevated privileges, access to encrypted data is restricted, protecting sensitive files from unauthorized access.

Azure Virtual Desktop single session support

EPM has also been extended to support the Azure Virtual Desktop single session environment. These enhancements mean administrators can apply privilege management consistently across single-session deployments, providing unified control across virtual desktop environments. Whether employees work on personal or shared virtual desktops, access controls for items like sensitive financial data remain consistent and secure. EPM also integrates with Windows Attestation to verify the integrity of the device before granting elevation of privilege. This attestation process ensures that only trusted, compliant devices can temporarily gain elevated privileges, reducing the risk of privilege escalation attacks and helping to secure Azure Virtual Desktop sessions.

Simplified supervision and app distribution with Enterprise App Management

Enterprise Application Management, another important component of the Intune Suite, simplifies the discovery, packaging, deployment, and updating of applications within your organization, ensuring apps are kept up-to-date and secure. Enterprise app management has continued to evolve since its introduction. With the latest improvements, the Intune team is introducing improved automation for app updates, a broader selection of enterprise app catalogs, and a streamlined process for application lifecycle management.

Guided application upgrades

The newly introduced guided application upgrade feature allows administrators to easily deploy updates for already installed applications through the enterprise app catalog. Using Microsoft Graph, the system retrieves information about available app updates, including installation commands, detection rules, and fallback settings. This new enhancement eliminates the need for manual updates, saving time and reducing errors.

Expanded app catalog for more choices

We’re continuing to expand our app catalog with more applications to ensure our customers have the right tools to manage the apps that matter most to them. The Enterprise App Catalog now includes more than 450 applications, giving IT teams more choices for managing their app environments. Some of these applications also support automatic updates, making it easier for administrators to keep the software up to date. Whether deploying new applications or updating existing ones, the expanded catalog provides greater flexibility and efficiency.

Get started with EPM and Enterprise App Management in Intune Suite

If your organization is already using the Microsoft Intune Suite, you can explore and implement new EPM and enterprise app management features coming in the coming months. Automatic rule creation and guided application upgrades are currently available. These updates are designed to simplify IT management while enhancing security, giving you more control over user permissions and application deployment. With these updates to endpoint permission management and enterprise application management, we help IT managers focus on what matters most: maintaining a secure and efficient environment.

To learn more about how to take advantage of these new features, Microsoft Intune documentation.

Stay informed! Add to bookmarks Microsoft Intune Blog and follow us linkedin or @MSIntune Continue the conversation at