Use Microsoft Security Copilot with Endpoint Privilege Manager to help identify potential elevation risks

Week of February 5, 2025 (Service release 2501)

Microsoft Intune Suite
Use Microsoft Security Copilot with Endpoint Privilege Manager to help identify potential elevation risks

When your Azure Tenant is licensed for Microsoft Security Copilot, you can now use Security Copilot to help you investigate Endpoint Privilege Manager (EPM) file elevation requests from within the EPM support approved work flow.
With this capability, while reviewing the properties of a file elevation request, you'll now find option to Analyze with Copilot. Use of this option directs Security Copilot to use the files hash in a prompt Microsoft Defender Threat Intelligence to evaluate the file potential indicators of compromise so you can then make a more informed decision to either approve or deny that file elevation request. Some of the results that are returned to your current view in the admin center include:

• The files’ reputation
• Information about the trust of the publisher
• The risk score for the user requesting the file elevation
• The risk score of the device from which the elevation was submitted
  EPM is available as an Intune Suite add-on-capability. To learn more about how you can currently use Copilot in Intune, see Microsoft Copilot in Intune.

App management
Update to Apps workload experience in Intune
The Apps area in Intune, commonly known as the Apps workload, is updated to provide a more consistent UI and improved navigation structure so you can find the information you need faster. To find the App workload in Intune, navigate to Microsoft Intune admin center and select Apps.

Device configuration
New settings available in the Windows settings catalog to Configure multiple display mode
The Settings Catalog lists all the settings you can configure in a device policy, and all in one place.

There are new settings in the Settings Catalog to Configure Multiple Display Mode for Windows 24H2. To see available settings, in the Microsoft Intune admin center, go to Devices > Manage devices > Configuration > Create > New policy > Windows 10 and later for platform > Settings catalog for profile type.

The Configure Multiple Display Mode setting allows monitors to extend or clone the display by default, facilitating the need for manual setup. It streamlines the multi-monitor configuration process, ensuring a consistent and user-friendly experience.

Applies to:

• Windows

Device security
Updated security baseline for Microsoft Edge v128
You can now deploy the Intune security baseline for Microsoft Edge version 128. This update brings support for recent settings so you can continue to maintain best-practice configurations for Microsoft Edge.

View the default configuration of settings in the updated baseline.

Applies to:

• Windows

Intune apps
Newly available protected app for Intune
The following protected app is now available for Microsoft Intune:
MoveInSync by MoveInSync Technologies