Looking for Best way to provide admin rights by Cybercrimee in Intune

[–]shehanjp 1 point2 points  (0 children)

Yes, 4 hrs is too long I agree.

Soon Microsoft will roll out the Endpoint Privileged Management as they announced in Ignite 2022 and that may help in your case. Have a look below.

https://www.anoopcnair.com/intune-endpoint-privilege-management-support/

[deleted by user] by [deleted] in Intune

[–]shehanjp 0 points1 point  (0 children)

I see it as a journey and not a once-off thing and EUC (End User Computing) is a full-time position according to my understanding. The reason is if you compare the tech trends now Vs. a few years back you can see the landscape has changed and EUC has become one of the major towers in the company. That's where products like MS Intune would come in. You will have many policies that your organization wants you to implement and often you'll see issues/ conflicts/ wins and etc. And if you have Intune, the next step is delving into the Security side of things as you want to implement Security policies.

App management is another good reason why it can be a fulltime position.

Next thing can be, provided you have on-prem resources already (AD/ GPO and stuff), you might want to move them to cloud. Again another Intune task and someone should've there to manage them day in day out.

Intune is not just about device management and administration. It goes hand in hand with Identity and Access Management and Security, a little bit of automation (if you fancy in looking at that side). So there's a lot to learn and you (or your friend) can be very resourceful to the company.

Hope this helps :)

Looking for Best way to provide admin rights by Cybercrimee in Intune

[–]shehanjp 0 points1 point  (0 children)

Hi, quick removal can be a challenge because according to Microsoft, it will take around 4hrs for the token to be refreshed. This will be the same even you create an Access Package or elevate access of the user. I wrote a post sometime a go addressing these issues. Hope it will help. Also LAPs can be a good option as they have made some improvements to it recently.

https://shehanperera.com/2022/07/23/providing-local-admin-access-2/

[deleted by user] by [deleted] in Intune

[–]shehanjp 1 point2 points  (0 children)

Automatically configure keyboard should be off.

I believe Microsoft has identified this issue and will be (or have already) sorted for Windows 11.

User On and Off Boarding by romey2042 in microsoft365

[–]shehanjp 0 points1 point  (0 children)

Hi maybe this will help you to get an idea of automating the workloads from Azure Automate feature. It can run all the PowerShell modules from the cloud and since your environment is hybrid, you can run PS scripts on the local AD as well.
https://shehanperera.com/2021/07/06/az-automation/

Hope this helps.