Endpoint Privilege Management
The idea of Endpoint Privilege Management (EPM) is to allow standard users to run tasks that require administrative rights, without assigning local administrative rights. These tasks could be anything from installing applications on the desktop to updating drivers.
The following are the requirements for EPM:
- One of the following licenses:
- Microsoft Intune plan 1
- A standalone license for EPM
- License for the Microsoft Intune suite
- Microsoft Entra joined or Microsoft Entra Hybrid joined
- Enrolled in Microsoft Intune or co-managed
- Make sure that the operating system is supported for EPM with one of the following versions:
- Windows 11 v22H2 or later, with KB5022913
- Windows 11 v21H2 or later, with KB5023774
- Windows 10 v22H2 or later, with KB5023774
- Windows 10 v21H2 or later, with KB5023774
- Windows 10 v20H2 or later, with KB5023774
- Windows 365 is supported
- Azure Virtual Desktop is not supported
EPM is configured via Microsoft Intune...