Published: Jul 26, 2024
Key Takeaways:
- Microsoft Intune now uses Copilot to generate Kusto Query Language (KQL) queries, making it easier for IT admins to access real-time device data.
- IT admins can allow macOS users to download unmanaged apps directly through the Intune Company Portal app.
- A new update for the Windows 365 security baseline offers an improved reporting experience and faster deployment of baseline updates.
Microsoft has unveiled several enhancements to its Intune service, aimed at streamlining endpoint management for commercial customers. These updates reduce the time spent on routine tasks, allowing administrators to focus on other priorities.
Earlier this year, Microsoft introduced a device query feature in Intune Advanced Analytics that allows administrators to access real-time data on device status and configuration. This feature uses device queries written in Kusto Query Language (KQL), which is a specialized language not all IT admins may know.
To simplify this process, Microsoft Intune admins can now use Copilot to request device information and context. The Copilot AI assistant generates KQL queries that can be used in Intune device queries. For example, admins can ask, “Show me expired certificates on this device” or “Does this device support TPM 2.0?” This feature is currently available in public preview for customers with an Intune Advanced Analytics license.
“This equips admins without comprehensive knowledge of KQL to get the data they need more quickly—and is an ideal example of how Copilot can and will continue to empower IT admins of all skill levels to perform advanced tasks with ease, thus improving the endpoint management experience,” Microsoft explained.
Microsoft has introduced a new feature that allows IT admins to let macOS users download unmanaged applications in DMG and PKG formats through the Intune Company Portal app. This highly requested feature eliminates the need for line-of-business app workflows or third-party tools to deploy optional applications.
Lastly, Microsoft has released a new update for the Windows 365 security baseline. A security baseline is a set of recommended configuration settings to help organizations protect their devices and applications against emerging threats. This new security baseline, which is built on a new technology, provides an improved user interface and reporting experience.
Furthermore, the Windows 365 security baseline ensures faster deployment of updates and more consistent naming across the Intune portal. It also allows administrators to use assignment filters for profiles. Microsoft notes that enterprise admins will need to update their customizations from the previous baseline manually, and more details are available on the support page.