Event banner
Event details
- Why Bitlocker recovery keys are NOT saved to Entra ID randomly (around 3 out of 10 machines) ? Several of my customers have this issue? Is it a known issue?
Amit-GhodkeMicrosoft
Hi Damien, hard to comment without knowing the full details, there could be different reasons as to why this may be happening, your best bet is to review the logs and work with support team to find out why it may be occurring in the environment. If the bitlockers leys were already set, one of the ways to try to rotate them (which can be done via Intune) or send a script to them to force them to save their keys to AAD. have a look here https://learn.microsoft.com/en-us/mem/intune/protect/encrypt-devices, for more info. "BackupToAAD-BitLockerKeyProtector" PowerShell cmdlet can help through a script.
- Heather_Poulsen
Community Manager
That concludes the on camera portion of today’s Unlocking Copilot in Intune AMA. Thanks to everyone who was able to join us live - and to those catching up on demand! We’ll leave Q&A open until 12:00 p.m. PT on Friday, October 4th.
- Will copilot be able to explore client issues (For example by checking for errors in C:\ProgramData\Microsoft\IntuneManagementExtension\Logs\IntuneManagementExtension.log) across the environment to detect trends and anomalies?
- Amit-GhodkeGreat question, we are actively discussing this scenario internally. Stay tuned for the suture.
- Sorry what is scu? Or how is it spelled and what is it stand for?
- Amit-GhodkeSecurity Compute unit Security compute units are the required units of resources that are needed for dependable and consistent performance of Microsoft Copilot for Security. https://learn.microsoft.com/en-us/copilot/security/get-started-security-copilot#security-compute-units
- Heather_Poulsen
We're almost halfway through today's AMA. Keep your questions coming. Thanks!
- What is your road map and ETA for the following 1) Configuration and Compliance policy creation by CoPilot on its own 2) CoPilot integration with XDR and Intune to do auto remediation of vulnerabilities using EAM (Enterprise Application Management?
- Amit-GhodkeCopilot is assisting today during the config/compliance policy creation, working on the copilot create experience. Thank you for the feedback on the EAM integration, that is something we are discussing.
- Ankur_GoyalWe are actively exploring how we could use Copilot to assess the impact of CVEs on devices, and perform remediation all while integrating with MDE.
- can i use intune on copilot to send custom notifications and the user can interact with natural languaje?
- Ankur_GoyalNot at the moment but this is something we are actively discussing.
- Amit-GhodkeWhile we are discussing on in console capabilities available natively, one can use the logic app connector to achieve what you just described, here is the documentation on using logic apps https://learn.microsoft.com/en-us/copilot/security/connector-logicapp
- Will CoPilot be able to provide better explanations for the "Not Applicable" configuration policy errors when enrolling devices to mitigate issues faster?
- Amit-GhodkeWork in progress, Dano also described perhaps solving this natively from the console itself.
- How dependent is copilot for security on using MS AV\EDP; we use a 3rd party
- Amit-GhodkeCopilot for security today supports various M365 first party products, it also has 3rd party plugins and more are being built, here is a full list of supported 3rd Party plugins, https://learn.microsoft.com/en-us/copilot/security/plugin-other, also customers have the ability to write their own custom plugins, https://learn.microsoft.com/en-us/copilot/security/custom-plugins
- 1) Is manual prompt available for Intune copilot, so we can prompt more questions that can overcome very limited guided prompt? 2) Can we query on all systems with device query option instead of querying the system one by one?
- Amit-GhodkeYes, the manual prompt is available today through the standalone console, the admins can go to securitycopilot.microsoft.com and experience open prompt. For the Intune console based embedded experiences, we are working on bringing a similar hybrid chat experience soon. The Copilot into device query experience available today is supporting the already available single device query feature. The multi device query feature is in works and the copilot experience to support it will be released once that feature goes live. Stay tuned it is coming soon.
