Event banner
Event details
That concludes this AMA! Thanks for joining us, and we hope you enjoyed this session.
If you missed the live broadcast, don’t worry – you can watch it on demand.
Stay up to date on the latest in Windows! Bookmark the Windows IT Pro Blog and follow MSWindowsITPro on X and LinkedIn. Want more tips, tricks, and insights from the experts? Tune in to Windows Office Hours each month here on the Tech Community.In addition to the questions posted on this page, we also answer questions posted in reply to the event on LinkedIn and X (Twitter). Here are the questions we answered today:
From LinkedIn -- There was a lot of talk at Build about cloud-native app development -- Does that add more complications for us as an enterprise? Should we be encouraging our ISVs to pursue this as we update our LOB apps? - answered at 7:30
From LinkedIn -- I'm confused on the difference between Copilot in Intune and Security Copilot, which is also in Intune? What's the role of each? Are they integrated, or do they operate separately? - answered at 23:35
From LinkedIn -- Is there an open prompting experience in Intune - so we can more easily figure out what we need to know without having to figure out where in Intune it is? - answered at 34:15
Question -- Now that the approach in Danny's "The Big 3" (cloud attach) is dead (R.I.P.), what's the new "big 3" for cloud native? - answered at 42:40
How is Microsoft going to implement training for all user Education and Training in EPM or with Intune ? ex 1#. Security Awareness like train users about the risks of administrative privileges and safe computing practices. ex #2 Phishing Training where you can regularly conduct phishing simulations and educate users on identifying phishing attempts.
- How do I know when a new setting is added to the Settings Catalog? The learn documentation seems to update for Android, Mac, iOS, but not Windows.
We're halfway through the AMA: Finding your way to “cloud first”! Keep your questions coming. Thanks!
- What is the best way to prevent giving users local admin rights. I know there are solution on the horizon like Endpoint Privilege Management but still only covering a small portion like exe. What is the best approach till EPM is fully featured and covers "all" scenarios? Just adding a user account to local admin group?
Thanks for participating in today's session of AMA: Finding your way to “cloud first”! For reference, the panel covered your question at 28:40.
- This is something we are just working through also. We looked at EPM and PAM. I have now suggested that the endpoints arent used for developement and instead we are going to remove their local admin rights on the endpoint and all developement work will move to Cloud PCs/AVD setup.
- Have you looked at Windows LAPs?
- Is there likely to be a solution for patching 3rd party application easier within Intune. I know we have winget but its doesnt help for all apps. There are 3rd party soltions to easily update these apps but it would be good to be able to update apps within Intune
Thanks for participating in today's session of AMA: Finding your way to “cloud first”! For reference, the panel covered your question at 38:50.
- Yes, looked at that and it looks great but the inventory is limited at the moment
- In CM, I can create collections based off huge variety of factors. Entra is limited in this, filters is even more limited. Will we ever see an increase on what we can target with groups/filters?
Thanks for participating in today's session of AMA: Finding your way to “cloud first”! For reference, the panel covered your question at 21:10.
TylerPlesetzMicrosoft
Hey Joe! We're constantly investigating ways to help bridge gaps between Configuration Manager and Intune. Your feedback is super valuable here. What sort of filters/factors for group creation in Entra ID do you feel are missing today that would help you?- Since we're still hybrid, the main one that I see missing is domainName/OU name. We have multiple forests, being able to group devices based off that would be helpful. Targeting policies if apps/settings are present is another big one.
Hi, I am helping customers to transition away from SCCM/GPO to Intune. There are still pains around missing features in Intune. Any chance we will ever see: - Policy Priorities? (Link Order/Enforce in GPO) - Create Registry keys in an easy way using settings catalog? - Drive/Printer mappings I know this is basic stuff, but things would be so much easier if we had this in place
Thanks for participating in today's session of AMA: Finding your way to “cloud first”! For reference, the panel covered your question at 12:30.
- Basic stuff, that most every organization uses.
- I find mapped drives for legacy apps and unique workflows(micro databases sqllite) to be a real pain point. Using SSE/SASE solutions has helped overcome a lot of hurdles I'm hoping Private Access pricing will eventually be released.
Welcome to the AMA: Finding your way to “cloud first”. Let's get started! Post your questions in the Comments. We'll be answering questions in the live stream and in chat.
- Can you give a quick description of how Lighthouse can also be used not only to manage Office 365, but to also create new user accounts in On-prem hybrid environments using Automation through Azure Arc and sync to Azure using cloud sync?
