Implementing Endpoint Privilege Management in Microsoft 365

Learn how to enhance security in Microsoft 365 by implementing Endpoint Privilege Management! Watch this video to discover best practices and step-by-step instructions. #Microsoft365 #EndpointPrivilegeManagement #intune

🆓 FREE Facebook Group
From security to productivity apps to getting the best value from your Microsoft 365 investment, join our Microsoft 365 Mastery Group

🆓 FREE Microsoft 365 Guide
Our FREE Guide - Discover 5 things in Microsoft 365 that will save your business time and money….. and one feature that increases your Cyber Security by 99.9%

💻 Want to Work Together?

😁 Follow on Socials
TikTok @bearded365guy
Instagram @bearded365guy

📽️ Video Chapters
00:00 Introduction
01:08 Local Admin Accounts
02:26 Licensing Requirements
03:10 Demo
03:42 Create Elevation Settings Policy
06:09 User Experience
09:47 Create Elevation Rules Policy
14:29 Final Thoughts

[RyanLunaPhotography]

Very cool. So this is very similar to Group Policy "Software Restriction Policy" only more robust. I used to whitelist apps in that.

[parsley]

This is insane, I was setting this up a few days ago, if you uploaded this video sooner it would save me hours :D

[Sergio-Here-In-Community]

Excellent video,
Very very good how you do the demo, that is very important to understand the concept.

excellent video


😁😁😁😁😁

[Wahinies]

This is amazing John especially the part with deny and using that to filter a lot of junkware! This is a first party alternative to Admin By Request which has been great where I have used it as well. Ill have to look, did you do one on PIM too?

[Dirkie]

At my previous company they used AutoElevate for this, I'm not sure how to compare licensing/pricing but AutoElevate does have a few more additional features eg. mail notification to admins as requested below. But very interesting video thank you Jonathan

[patrick__]

Great video! What is the great benefit over this instead of publishing the allowed apps via Company Portal as available? The first part about the idea of blocking is great.

[townnine]

Thank you for the excellent video, it was very informative. I use the company portal where applications are available for users to install since both .exe files and the Microsoft Store are blocked for me.

The issue is that the new Microsoft Teams has to be installed separately. Could you create a video on how to install custom applications using the company portal?

[addictedtotreasuretrash]

Hej . I have followed your instructions and made a back up disk to a spare external HD. Great, now how do i use it if something goes wrong on my laptop ? I have another laptop that had the ususal updates etc and after updates the screen went black, well you can see some kind of bluish black on the screen but i cant get into it. Is there a way i can get into my laptop without taking it into a repair shop ? Thanx

[louisayoub]

This falls short of something like ThreatLocker, doesn't it?

[codeforwhat]

i have q about this :) is there any mail notifications for admins about user request to install an app?

[systech]

what about an app you gave elevated permissions to install. What if you want to allow the same user to be able to uninstall ? I am running into that now, where it's asking for admin credentials for uninstallation.

[morpk]

this is unreal, but from an MSP point of view how to we know that a support request has gone to enpoint manager, can an email be sent to our helpdesk as a ticket so we know to go review and approve