What’s New in Microsoft Endpoint Manager – 2112 (December) Edition
Intune
Microsoft Endpoint Manager (MEM) is a unified cloud-based management solution for PCs and mobile devices that helps organizations protect, manage, and secure their endpoint devices. The 2112 (December) edition of MEM includes several new features and updates that are designed to improve the user experience and simplify the management of devices. Here, we will take a look at some of the new features that have been added to MEM.
New Device Policies
MEM now supports more than 50 new device policies, including policies to control the use of certain applications, restrict device access, and prevent users from taking screenshots. These policies can be used to ensure that users are adhering to corporate security and compliance requirements. Additionally, MEM now supports the ability to deploy and manage macOS devices with Intune.
Advanced Security Options
MEM now supports advanced security options such as device encryption and secure boot. Device encryption helps protect data if a device is lost or stolen, and secure boot helps prevent malicious code from running on the device. Additionally, MEM now supports Windows 10 Credential Guard, which helps protect against credential theft.
Improved Device Management
MEM now supports the ability to deploy and manage Windows 10 devices with Intune. Additionally, MEM now supports the ability to manage Windows Autopilot devices, which allows organizations to quickly and easily deploy new Windows 10 devices. MEM also now supports the ability to manage Windows 10 policies directly from the Intune console.
Simplified User Experience
MEM now supports the ability to provide users with a simplified enrollment experience. This includes the ability to set up and configure devices remotely, as well as the ability to access corporate resources without having to enter a username and password. Additionally, MEM now supports the ability to provide users with an intuitive and streamlined user interface, making it easier for users to access and manage their devices.
PowerShell Script Example
The following PowerShell script can be used to quickly deploy Windows 10 Credential Guard on Intune-managed devices:
$CredentialGuard = New-IntuneDeviceConfigurationPolicy -Name “Enable Credential Guard” -EnableCredentialGuard 1
Set-IntuneDeviceConfigurationPolicy -Id $CredentialGuard.ID
For more information on MEM and its features, please visit Microsoft’s Endpoint Manager documentation [https://docs.microsoft.com/en-us/mem/intune/].
Conclusion
The 2112 (December) edition of Microsoft Endpoint Manager is a comprehensive and powerful solution for managing and securing endpoint devices. With its wide range of features, MEM is an invaluable tool for organizations looking to improve their security posture and ensure compliance with corporate policies. MEM is also a great way for organizations to simplify the management of their devices and provide users with a better user experience.
