Security Copilot in Intune agents are available for public preview

Week of November 17, 2025
Device management
Security Copilot in Intune agents are available for public preview
Security Copilot agents in Intune are AI-powered assistants that specialize in specific scenarios. The Intune agents are available in the Intune admin center > Agents, and are available for Security Copilot users.

The following Intune agents are available:

• The Change Review Agent evaluates Multi Admin Approval requests for Windows PowerShell scripts on Windows devices. It provides risk-based recommendations and contextual insights to help admins understand script behavior and associated risks.
• These insights can help Intune admins make informed decisions more quickly about whether to approve or deny requests. This agent supports Intune-managed devices running Windows.
• The Device Offboarding Agent identifies stale or misaligned devices across Intune and Microsoft Entra ID. It provides actionable insights and requires admin approval before offboarding any devices. This agent complements existing Intune automation by showing insights and handling ambiguous cases where automated cleanup isn't enough.
  The agent supports Intune-managed devices running Windows, iOS/iPadOS, macOS, Android, and Linux. During public preview, admins can directly disable Microsoft Entra ID objects, with additional remediation steps provided as guidance.
• The Policy Configuration Agent analyzes uploaded documents or industry benchmarks and automatically identifies matching Intune settings. Admins can upload their requirements, like compliance standards or internal policy documents, and the agent intelligently shows relevant settings from the Intune settings catalog.

The agent also guides you through policy creation and helps you configure each setting that best suits your organization's needs. This agent supports devices running Windows.

Intune support for iVerify as a mobile threat defense partner
You can now use iVerify Enterprise as a mobile threat defense partner (MTD) for enrolled devices that run the following platforms:

• Android 9.0 and later
• iOS/iPadOS 15.0 and later

Tenant administration
Manage tasks and requests from the centralized Admin tasks node in Microsoft Intune (public preview)
The new Admin tasks node in the Intune admin center provides a centralized view to discover, organize, and act on security tasks and user elevation requests. Located under Tenant Administration, this unified experience supports search, filtering, and sorting to help you focus on what needs attention—without navigating across multiple nodes.

The following task types are supported:

• Endpoint Privilege Management file elevation requests
• Microsoft Defender security tasks
• Multi Admin Approval requests
  Intune only shows tasks you have permission to manage. When you select a task, Intune opens the same interface and workflow you'd use if managing the task from its original location. This ensures a consistent experience whether you're working from the admin tasks node or directly within the source capability.