Introducing advanced endpoint management solutions for Microsoft Intune

I'll let Matt jump in if there's anything to share from his perspective on this, but my take is that this seems like a security concern that would allow you to circumvent all the reasons why you want users to be standard users in the first place. I would now have a 10 minute window to install anything I want that could be malware or make my machine less performant, or even open a PSH prompt and make myself admin on the box. I think the policy path that allows more specific actions is the more secure approach.