Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
Microsoft Introduces New Windows Enrollment Attestation Feature in Intune

Microsoft Introduces New Windows Enrollment Attestation Feature in Intune

Written By Anoop C Nair
Last Updated July 24, 2026
Posted In Intune
SHARE

Microsoft is Introducing a New Windows Enrollment Attestation in Intune. Today, many users are facing security problems. Security is critical, so we have to keep our data safe from threats. Microsoft Intune always brings the best security features.

This time, Intune is introducing a New Windows Enrollment Attestation. Windows Enrollment Attestation helps organizations verify the security of devices at a hardware level, offering more defence against cyber threats.

The June 2024 public preview of Windows Enrollment Attestation is rolling out. I think this is the best security enhancement. Windows device enrollment attestation is a new security check that ensures devices are safe when they join a network.

Windows Device Enrollment Attestation ensures that it’s done safely when a computer or device joins a company’s system. That means Windows device enrollment attestation helps you understand which computers or devices are to be easily attacked.

Patch My PC
Index
Microsoft Introduces New Windows Enrollment Attestation Feature in Intune
Microsoft Introduces New Windows Enrollment Attestation Feature in Intune – Table.1

What is Windows Enrollment Attestation in Microsoft Intune?

Windows Enrollment Attestation in Microsoft Intune is a security feature that keeps a device’s enrollment details safe by keeping them in its hardware. It uses the Trusted Platform Module (TPM) 2.0 chip to store the private keys for the enrollment certificate securely.

Microsoft Introduces New Windows Enrollment Attestation Feature in Intune

Another part is the Windows enrollment attestation feature in Microsoft Intune, which started rolling out. The report provides detailed insights into the security status of enrolled devices.

  • You can check the device attestation report through Microsoft Intune.
  • Open the MS Intune admin centre.
  • Then click on the option Report, which shows the screenshot below.
New IntuneFeatureInfo
Windows Enrollment AttestationThis feature ensures that Windows devices store their enrollment credentials securely in the TPM 2.0 hardware chip. Intune checks this secure storage, which confirms that the device has enrolled safely.
Microsoft Introduces New Windows Enrollment Attestation Feature in Intune- Table.1

Note: Windows Enrollment Attestation will be available in public preview by the end of June.

Microsoft Introduces New Windows Enrollment Attestation Feature in Intune-Fig.1
Microsoft Introduces New Windows Enrollment Attestation Feature in Intune-Fig.1

This new update also Introduces a new feature to enhance security by ensuring critical sign-up details are kept in a particular secure part of the device called TPM 2.0.

See more: FIX Intune Windows Enrollment Invalid_Client Error.

  • The attestation process is a security check that ensures a device is safe in a company’s network.
  • Devices that pass the attestation are shown as completed in the report.
  • The device needs a special security chip called TPM 2.0 for this check. 
  • TPM 2.0 will sign up for information safely.
  • If it’s not secure, you can try again with the “Device Attest” option.
Microsoft Introduces New Windows Enrollment Attestation Feature in Intune-Fig.2 Creds to MS
Microsoft Introduces New Windows Enrollment Attestation Feature in Intune-Fig.2 Creds to MS

After checking all the devices in your organization, you can select a new check called isTpmAttested to make your network safer. This check can stop a device from joining your network if it doesn’t pass a security test when it tries to sign up.

  • The screenshot below is an example of enrollment restriction filters.
Microsoft Introduces New Windows Enrollment Attestation Feature in Intune-Fig.3 Creds to MS
Microsoft Introduces New Windows Enrollment Attestation Feature in Intune-Fig.3 Creds to MS

Reference

What’s new in Microsoft Intune June 2024

We are on WhatsApp now. To get the latest step-by-step guides, news, and updates, Join our Channel. Click here. HTMD WhatsApp.

Author

Anoop C Nair is Microsoft MVP! He is a Device Management Admin with more than 20 years of experience (calculation done in 2021) in IT. He is a Blogger, Speaker, and Local User Group HTMD Community leader. His main focus is on Device Management technologies like SCCM 2012, Current Branch, and Intune. He writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc.

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Intune

Simplify Windows Devices to Run Only the Required Applications using Intune

Key Takeaways Hey, let’s learn about Simplify Windows Devices to Run Only the Required Applications using Intune. This policy lets administrators replace the default windows shell with a custom or lightweight shell. it improves performance by using system resources and is useful for devices that run a dedicated application. If the policy is disabled or […]

AC Anoop C Nair 8 min read
Intune

Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune

Key Takeaways In this post we are discussing about Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune. Microsoft has announced the general availability of Custom Compliance Settings for macOS in Microsoft Intune. The feature helps organizations strengthen security controls while supporting many types of macOS management scenarios. […]

AC Anoop C Nair 4 min read
Intune

Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune

Key Takeaways In this post we are discussing Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune. Microsoft Intune has received a new update that expands firmware management capabilities for Samsung Galaxy devices through Firmware Versionsintegration. This enhancement gives IT administrators more control over firmware and operating system updates, helping them […]

AC Anoop C Nair 4 min read
Intune

MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys

Key Takeaways Microsoft Intune 2607 introduces Windows Registry Data collection in Device Inventory, allowing IT admins to verify actual device configurations without relying on custom discovery or remediation scripts. Using the Properties Catalog, admins can collect registry information through Single Value, All Values Under a Key (Non-Recursive), or Same Value Across Subkeys. MS Intune Adds […]

AC Anoop C Nair 5 min read