Microsoft Intune's October update introduces new security features and tools to manage shift workers' access to apps.
Published: Oct 21, 2024
Key Takeaways:
Microsoft has published a roundup of all the new capabilities added to its Microsoft Intune service this month. The first new security feature that the company highlighted today will enable administrators to block certificate spoofing in on-premises environments.
Microsoft will add a new Security Identifier (SID) variable in Simple Certificate Enrollment Protocol (SCEP) profiles as part of the SAN value in certificates. A Security Identifier uniquely identifies users, groups, or computer accounts in Windows environments, while the SCEP protocol simplifies the process of enrolling devices for certificates.
This new feature is now available for Windows, iOS/iPadOS, and macOS devices, with Android support expected next month. Microsoft advises administrators to thoroughly test the feature before rolling it out widely across their organization.
The latest Microsoft Intune update allows IT admins to mute notifications and block access to Microsoft Teams for shift workers. However, IT admins will need to ensure that the Working Time API must be integrated within their tenant.
Microsoft explains that this new feature helps organizations prevent issues with employees requesting extra pay for using work apps outside of their working hours. It can also be used to restrict access to these apps when employees are off duty.
When Microsoft Intune mutes notifications, employees won’t see pop-up windows or notification badges on app icons for new messages. They will need to open the Microsoft Teams app to view these messages. If a shift worker tries to access the app outside of working hours, the app will check their status and display a message indicating that access is blocked.
Microsoft has introduced Windows Autopilot device preparation for customers in China. Previously, IT administrators had to manually configure each new device, which was time-consuming. This update is expected to significantly reduce the time needed to prepare devices for end users.