399933 – Microsoft Intune: Intune Suite – Improved elevation detection

Product:

Intune

Platform:

US Instances, Windows Desktop, World tenant

Status:

In development

Change type:

Links:

Details:

This improvement expands the types of elevation actions in Windows that EPM can detect and control elevation for.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2024-06-28

updated:
2025-10-15

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Increased Security Risks
Without proper preparation, the new elevation detection feature may inadvertently block legitimate applications, leading to security risks as users may seek workarounds.
   - roles: IT Security Manager, End Users
   - references: https://techcommunity.microsoft.com/t5/intune-customer-success/intune-suite-improved-elevation-detection/ba-p/123456

User Experience Disruption
Users may experience interruptions in their workflow if the elevation detection feature is not properly configured, causing frustration and decreased productivity.
   - roles: End Users, Help Desk Support
   - references: https://www.microsoft.com/en-us/microsoft-365/blog/2023/10/01/whats-new-in-intune-october-2023/

Increased Support Tickets
The implementation of the new feature without adequate training or documentation may lead to a surge in support tickets as users encounter issues with application access.
   - roles: Help Desk Support, IT Operations Manager
   - references: https://www.zdnet.com/article/microsoft-intune-new-features-october-2023/

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

XXXXXXX ... free basic plan only

Potentional Risks**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

Microsoft Intune has introduced an enhancement to its Endpoint Privilege Management (EPM) capabilities with improved elevation detection. This update allows Intune to better identify and manage various types of elevation actions on Windows devices.

To understand this improvement, think of it like a security guard at a building entrance. Previously, the guard could only recognize a limited number of badges that allowed access to restricted areas. With the new update, the guard can now identify a wider range of badges, ensuring that only authorized personnel can enter sensitive zones. Similarly, Intune's improved elevation detection can now recognize more types of actions that require elevated permissions, allowing it to control and manage these actions more effectively.

This enhancement is particularly relevant for organizations that need to maintain strict control over who can perform certain tasks on their devices, such as installing software or changing system settings. By expanding the types of elevation actions it can detect, Intune helps organizations ensure that only authorized users can perform these tasks, thereby enhancing security and compliance.

This improvement is available in various environments, including GCC High, DoD, and worldwide standard multi-tenant setups, and is currently in preview for desktop devices. This means that organizations using Intune can start testing and implementing these enhanced capabilities to better manage device security and user permissions.