Security Copilot Launches in Microsoft Intune and Entra for Smarter IT Management

Microsoft has announced the general availability of Security Copilot capabilities in Microsoft Intune and Microsoft Entra. This release helps organizations leverage intelligent automation to streamline operations, strengthen security, and make faster, smarter decisions.

“Organizations using Security Copilot have seen a 54% reduction in time to resolve device policy conflicts, and a 22.8% drop in alerts per incident within three months of adoption, freeing up teams to focus on more strategic work,” said Dorothy Li, Corporate Vice President, Microsoft Security Copilot and Ecosystem.

How does Security Copilot in Microsoft Intune work?

Microsoft has introduced a dedicated page that allows administrators to query data, take actions, and manage endpoints using natural language commands directly within their workflows. This new feature is designed to help IT admins with time consuming tasks, including analyzing security posture, managing updates, troubleshooting issues, and generating custom reports.

The new Explorer experience in Intune now supports Windows 365 Cloud PCs, allowing administrators to view and manage both cloud and physical devices. Moreover, Security Copilot will soon offer AI-powered insights into Cloud PC connectivity, performance, and licensing to enhance virtual desktop management.

This release also introduces chat-based contextual assistance and integration with Microsoft Intune and Microsoft Intune Suite tools. It helps IT admins write complex KQL queries and analyze app risks for privilege elevation. In the Surface Management Portal, Security Copilot enhances IT efficiency by integrating AI-driven insights directly into Surface device management workflows.

Security Copilot in Microsoft Entra

Security Copilot provides natural language prompts, AI-powered reasoning, and real-time insights across their identity and access estate directly within the Microsoft Entra admin center. Copilot in Entra enables IT admins to leverage AI and Microsoft Graph data to streamline identity and access management tasks. It helps to investigate users, troubleshoot sign-in issues, manage access reviews and entitlements, monitor tenant health and service-level agreement (SLAs), optimize license usage, as well as analyze role assignments and recommendations.

Last but not least, Microsoft has announced that the Conditional Access Optimization Agent in Microsoft Entra is now generally available for commercial customers. This new AI-powered tool is designed to help organizations strengthen their security posture by ensuring all users and applications are properly protected by Conditional Access policies. It scans the environment for newly added users and apps, evaluates existing policies, and recommends improvements based on Microsoft’s Zero Trust principles and best practices.