Event banner
Event details
- The Device Scope addresses a gap in the current RBAC options that does not exist for reporting. We have different departments running the platforms and multiple companies in one tenant that should not see or influence other companies' devices/users/settings. So, we built RBAC w/ custom roles, dynamic groups, and scope tags. But in Endpoint Analytics reports we couldn't give dedicated reports to the companies. I hope Device Scopes will come to regular Endpoint Analytics and all other reports. Still need to test if Device Scope is respecting the underlying Scope tag limitation (Company A operators have access only to Scope tag 'Company A', so they should see only Device Scope 'Company A' in the selection
amitgupta9Microsoft
Thank you for great presentation. Are there any difference between the data collected or services used by Endpoint Analytics and Device Diagnostics?- Joe_Lurie
amitgupta9 I'll reach out to you privately for more information on this. Thaks for the question.
- Zach & Lavanya - Thank you for a great presentation, it was very helpful. My organization currently uses a 3rd party DEX solution together with Intune. Would the Endpoint Analytics Suite bring in capabilities to replace a 3rd party solution or more focused on our M365 app perimeter?
- Zach DvorakEA includes insights related to 1st and 3rd party apps 🙂
- Zach thank you for your quick reply 🙂 excited to test out the new capabilities. Employee experience and automated remediations is a top priority for our org (the reason why we had onboarded the DEX solution 3 years ago). Should we expect EA to be on par with the DEX vendors in the upcoming releases especially on the remediation front?
- I'm testing Endpoint privilege management on a few machines in a test environment. The elevation settings policy isn't deploying when "send data to microsoft" is selected, the error received mentions an "Allow Device Health Monitoring" error, but that settings is correctly deployed via configuration profiles. Also can't find any info about that in the logs. If I deselect "send data to microsoft" then the policy is deployed successfully, but in reality the app is not installed on the target devices (so no right click options about EPM).
- Matt_CallYou're failing to enable EPM. You see this because the device health monitoring setting is the first setting we try and configure (data management). Check to see that you can successfully communicate to this endpoint without SSL inspection -> https://learn.microsoft.com/en-us/mem/intune/fundamentals/intune-endpoints#microsoft-intune-endpoint-privilege-management
- We are not using any firewall to allow the URL basically all users are getting connected to open internet in this case how can we overcome this
- Heather_Poulsen
Community Manager
Thanks for joining us! We’ll continue to answer questions here in the chat for the rest of the hour and we’ll check back through the end of the week. If you missed the live broadcast, don’t worry – you can watch it on demand.
And, if you’ll be in San Francisco for RSA 2023 later this month, join us at the Secure and Connected Endpoints Breakfast.
- Intune Suite as an add on and not included with the E5 is a terrible idea. E5 is a tough sell, but at least it used to cover near everything. Now there are a ton of add ons to it. It will be harder and harder to sell Microsoft services to executives when compared to cheaper options
JaminAlmondRecently Forrester conducted a total economy analysis of Microsoft Intune Suite. TEI study: https://aka.ms/IntuneSuite_ForresterTEI- That presumes best case implementation. Watering down the value of an E5 is going to eventually turn people off of that license level. Cheaper to move away from a platform approach and do an E3 with other vendors for security, management, analytics, etc. Or even move away from Microsoft entirely. JMO
- What is the maximum number of devices and number of days if we need to get the endpoint analytics score on mnaged devices
- Zach Dvorak
EA can support all of your Intune devices - we have tenants with hundreds of thousands of devices enrolled. You can expect to start seeing data in EA within 48-72 hours of enrollment. More information on data flow can be found here: https://learn.microsoft.com/mem/analytics/data-collection.
- Heather_Poulsen
Hope you are enjoying Prioritize the user's technology experience with advanced Endpoint analytics. What do you like about the Tech Accelerator so far? Share your feedback here in the Comments and help shape the direction of future Intune events on the Tech Community!
- I think this is headed in the right direction. It would be great for a proof of concept group as well as a pilot. I can see it being a great tool for production but where would it fit into the support process? Would it be like monitoring for level 3 will it have alerting?
- Zach DvorakHey Danea, thanks for the question. Many customers use the enhanced device timeline as a "starting point" for support scenarios. When a user calls into the helpdesk, the techs are able to pull up their device and see recent events, quickly determine if any anomalies have been detected recently, etc. If you have additional thoughts about what you'd like to see, I'm all ears!
- After watching, right now these features should not be behind any additional subscriptions. There is not too much more there right now as of today. Maybe add some automation then that makes sense.
- Joe_Lurie
We have a Total Economic Impact (TEI) study that shows the cost savings that you may not see when only looking at licensing. Also not everything coming to Intune is an added price - we have lots of new features each month that are part of the base Intune P1 price. Check out https://aka.ms/IntuneNew and https://aka.ms/IntuneDev.
And here's the TEI study: https://aka.ms/ForresterTEI_IntuneSuite
