Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
Intune Endpoint Security Policies Microsoft Endpoint Manager Updates

Intune Endpoint Security Policies Microsoft Endpoint Manager Updates

Written By Anoop C Nair
Last Updated July 8, 2024
Posted In Intune
SHARE

Let us learn about Intune Endpoint Security Policies and Microsoft Endpoint Manager Updates.

Sneak peek of Microsoft Endpoint Manager security topics discussed in the section hosted by Paul Mayfield, Terrell Cox, and Micro-Scott.

You can utilize Intune endpoint security policies to manage device security settings effectively. Each endpoint security policy can support one or more profiles, akin to a device configuration policy template and encompass a logical group of related settings.

More details about the session and Intune Endpoint Security are given below.

Patch My PC
Index
Intune Endpoint Security Policies Microsoft Endpoint Manager
Two Personas and Two Portals
Security Baselines Overview
Encryption Management Overview
Disk Encryption – Bitlocker or File Vault
Encryption Recovery Keys Experience
Encryption Key Rotation – Bitlocker Options
Intune Endpoint Security Policies Microsoft Endpoint Manager Updates – Table.1

Ignite 2019 Coverage

  1. Microsoft Endpoint Management SCCM Intune Windows Updates
  2. Microsoft Endpoint Manager is the future of SCCM Intune MEMMI MEMCM
  3. iOS Android macOS Mobile Enrollment Options with Intune
  4. Basics of Windows Dynamic Update Explained Update Management
  5. WVD End User Experience Availability Updates
  6. MSIX Updates from Ignite Reliability Network Disk-space
  7. Microsoft Learning Certification Exams Updates
  8. On-Prem WVD Options Azure Quantum Qualys Scan Integration
  9. Intune Reporting Strategies Advanced Reporting
  10. Intune Endpoint Security Policies Enhancements

Intune Endpoint Security Policies Microsoft Endpoint Manager

Following are the key pillars of Microsoft Endpoint Manager security enhancements announced in Microsoft Ignite.

  • Dedicated Sec Admin node workspace
  • Cross persona workflows
  • Covers both cloud and on-premises endpoints (SCCM and Intune)
  • Integrated with Microsoft Defender ATP

Two Personas and Two Portals

  • Endpoint Management (Device Management) and Security Admin -The team manages both devices and security applications.
Intune Endpoint Security Policies Microsoft Endpoint Manager Updates - Fig.1
Intune Endpoint Security Policies Microsoft Endpoint Manager Updates – Fig.1
  • Only Security Admin (manage only security products like ATP, Symantec, etc.)

This team can log in to the following URL and work accordingly – https://security.microsoft.com/homepage

Intune Endpoint Security Policies Microsoft Endpoint Manager Updates - Fig.2
Intune Endpoint Security Policies Microsoft Endpoint Manager Updates – Fig.2

Security Baselines Overview

Intune’s security baselines are preconfigured settings representing best practices from Microsoft security teams. They can be used to quickly deploy recommended device and application settings for protection. Intune is compatible with Windows 10 version 1809 and later and Windows 11.

Following are the security configuration policy options (Security baselines) from Microsoft Endpoint Manager(MEM).

  • Microsoft Recommended Settings
  • Baseline Drift Reports
  • Windows 10 and Defender ATP are available
  • Edge and Office Pro Plus (Coming Soon)
Intune Endpoint Security Policies Microsoft Endpoint Manager Updates - Fig.3
Intune Endpoint Security Policies Microsoft Endpoint Manager Updates – Fig.3

Encryption Management Overview

  • Windows, macOS, iOS, Android
  • Cloud and on-premises
  • Key recovery and rotation
  • Rich configuration and reporting
Intune Endpoint Security Policies Microsoft Endpoint Manager Updates - Fig.4
Intune Endpoint Security Policies Microsoft Endpoint Manager Updates – Fig.4

Disk Encryption – Bitlocker or File Vault

The encryption policy option for macOS and Windows is available in the Microsoft Endpoint Portal.

  • macOS – File Vault
  • Windows – Bitlocker
Intune Endpoint Security Policies Microsoft Endpoint Manager Updates - Fig.5
Intune Endpoint Security Policies Microsoft Endpoint Manager Updates – Fig.5

Encryption Recovery Keys Experience

You can go to the troubleshooting + support node from Microsoft Endpoint Manager and select a macOS or Windows device to see the recovery key. This would be very useful for the helpdesk team.

URL -> https://devicemanagement.microsoft.com/#blade/Microsoft_Intune_DeviceSettings/SupportMenu/troubleshooting

Intune Endpoint Security Policies Microsoft Endpoint Manager Updates - Fig.6
Intune Endpoint Security Policies Microsoft Endpoint Manager Updates – Fig.6

Encryption Key Rotation – Bitlocker Options

Bitlocker key rotation is also available from the Troubleshooting + support node in Microsoft Endpoint Manager. Go to Overview of Windows device -> click on ….More -> select “Bitlocker key Rotation” option.

Intune Endpoint Security Policies Microsoft Endpoint Manager Updates - Fig.7
Intune Endpoint Security Policies Microsoft Endpoint Manager Updates – Fig.7

Resources

We are on WhatsApp. To get the latest step-by-step guides and news updates, Join our Channel. Click here –HTMD WhatsApp.

Author

Anoop C Nair is Microsoft MVP! He is a Device Management Admin with more than 20 years of experience (calculation done in 2021) in IT. He is a Blogger, Speaker, and Local User Group HTMD Community leader. His main focus is on Device Management technologies like SCCM 2012, Current Branch, and Intune. He writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc.

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Intune

Simplify Windows Devices to Run Only the Required Applications using Intune

Key Takeaways Hey, let’s learn about Simplify Windows Devices to Run Only the Required Applications using Intune. This policy lets administrators replace the default windows shell with a custom or lightweight shell. it improves performance by using system resources and is useful for devices that run a dedicated application. If the policy is disabled or […]

AC Anoop C Nair 8 min read
Intune

Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune

Key Takeaways In this post we are discussing about Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune. Microsoft has announced the general availability of Custom Compliance Settings for macOS in Microsoft Intune. The feature helps organizations strengthen security controls while supporting many types of macOS management scenarios. […]

AC Anoop C Nair 4 min read
Intune

Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune

Key Takeaways In this post we are discussing Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune. Microsoft Intune has received a new update that expands firmware management capabilities for Samsung Galaxy devices through Firmware Versionsintegration. This enhancement gives IT administrators more control over firmware and operating system updates, helping them […]

AC Anoop C Nair 4 min read
Intune

MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys

Key Takeaways Microsoft Intune 2607 introduces Windows Registry Data collection in Device Inventory, allowing IT admins to verify actual device configurations without relying on custom discovery or remediation scripts. Using the Properties Catalog, admins can collect registry information through Single Value, All Values Under a Key (Non-Recursive), or Same Value Across Subkeys. MS Intune Adds […]

AC Anoop C Nair 5 min read