Uploaded July 2025 | Updated September 2026, 1 week ago
Configure Explicitly Deny EPM Rule with Microsoft Intune | New Updates | Demo by Vaishnav #msintune
Learn how to configure an "Explicitly Deny" Endpoint Privilege Management (EPM) rule using Microsoft Intune. This video delves into the latest update in EPM capabilities, focusing on how to effectively block specific applications from elevating privileges on Windows 10 and Windows 11 devices.
We'll cover:
What EPM is and its core functionalities.
Prerequisites and requirements for implementing EPM.
Understanding Elevation Rule Policies.
Deep dive into the new "Explicitly Deny Elevation" feature.
Utilizing the EPM Tools PowerShell Module for diagnostics and building detection rules.
A practical, step-by-step demo on creating and deploying an Explicitly Deny EPM Rule Policy.
Observing the end-user experience when a denied application attempts elevation.
This session is crucial for IT administrators looking to enhance their organization's security posture by implementing a Zero Trust principle with granular control over application elevation.
#htmdcommunity #EPM #MicrosoftIntune #EndpointPrivilegeManagement #WindowsSecurity #Intune #Security #ITAdmin #DeviceManagement #ZeroTrust
Video Timeline:
0:00:00 Introduction to the session: Configure Explicitly Deny EPM Rule with Microsoft Intune
0:00:05 Speaker Introduction: Vaishnav K, 11+ years of experience in SCCM, Device Management, and Automation Solutions.
0:00:40 Agenda for the session
0:01:59 What is Endpoint Privilege Management (EPM)?
0:03:21 Prerequisites and Requirements for Endpoint Privilege Management
0:05:22 Important Points to Note about EPM (e.g., supported OS, Cloud PC, AVD, Government Cloud, RBAC roles)
0:07:03 What is an Elevation Rule Policy?
0:07:48 Deep Dive into EPM Rules: Explicitly Deny Elevation and Child Process Controls
0:09:37 Understanding the EPM Tools PowerShell Module
0:11:03 Key Commandlets in the EPM Tools PowerShell Module
0:11:43 Live Demo: Configuring Explicitly Deny EPM Rule with Microsoft Intune
0:11:56 Navigating to Endpoint Security - Endpoint Privilege Management in Intune Admin Center
0:12:17 Reviewing existing policies, including the Default Elevation Settings Policy.
0:13:35 Creating a new Elevation Rule Policy for "Explicitly Deny"
0:15:38 Defining the Elevation Type as "Deny"
0:16:11 Setting Child Process Behavior to "Deny all"
0:17:02 Demonstrating how to obtain the file hash using PowerShell (Get-FileAttributes and Get-FileHash)
0:22:14 Pasting the file hash into the policy configuration
0:23:48 Assigning the policy to a group (My CPC - Windows 11)
0:24:08 Reviewing and creating the policy
0:24:49 Verifying the newly created "Explicitly Deny EPM Elevation Rule Policy"
0:25:07 Demonstrating the end-user experience with a previously allowed application (WinRAR) - it now requires business justification
0:26:08 Demonstrating the end-user experience with the explicitly denied application (VNC Viewer) - it now shows "You can't run this app as administrator" error.
0:27:08 Final confirmation of the configured policy
0:28:12 Q&A and Thank You
Feel free to ask if you need any adjustments or further assistance!
==
More Blog posts related to SCCM/Intune/Windows 11/Cloud PC/AVD/Hyper-V/Cloud/IT Pro/Azure -
✔ anoopcnair.com/windows-365
👉 Stay Connected - howtomanagedevices.com/stay-connected 👉 howtomanagedevices.com/sccm/1791/how-to-manage-devices-live-digital-events-weekend-learning
#CloudPC #Windows365 #W365
howtomanagedevices.com
Learn SCCM Read anoopcnair.com/sccm
anoopcnair.com/learn-sccm-intune
Learn Intune Read - anoopcnair.com/intune
anoopcnair.com/learn-microsoft-intune
Learn Windows 10 Read - anoopcnair.com/windows-10
Learn Hyper-V Read - anoopcnair.com/hyperv-2
Learn About Cloud Read - anoopcnair.com/cloud
Learn about Azure Read - anoopcnair.com/cloud/azure
Learn About IT Pros Events - anoopcnair.com/itpro
Learn about me - anoopcnair.com/about
#SCCM #ConfigMgr #SCCMVideos #SCCMTutorials #SCCMStudyVideos #SCCMFreeTraining #SCCMTraining #HowtoManageDevices
#Intune #MicrosoftIntune #IntuneVideos #IntuneTutorials #IntuneGuide #IntuneStudy #MSIntune #IntuneTraining #HowtoManageDevices
Configure Explicitly Deny EPM Rule with Microsoft Intune | New Updates | Demo by Vaishnav #msintune
Learn how to configure an "Explicitly Deny" Endpoint Privilege Management (EPM) rule using Microsoft Intune. This video delves into the latest update in EPM capabilities, focusing on how to effectively block specific applications from elevating privileges on Windows 10 and Windows 11 devices.
We'll cover:
What EPM is and its core functionalities.
Prerequisites and requirements for implementing EPM.
Understanding Elevation Rule Policies.
Deep dive into the new "Explicitly Deny Elevation" feature.
Utilizing the EPM Tools PowerShell Module for diagnostics and building detection rules.
A practical, step-by-step demo on creating and deploying an Explicitly Deny EPM Rule Policy.
Observing the end-user experience when a denied application attempts elevation.
This session is crucial for IT administrators looking to enhance their organization's security posture by implementing a Zero Trust principle with granular control over application elevation.
#htmdcommunity #EPM #MicrosoftIntune #EndpointPrivilegeManagement #WindowsSecurity #Intune #Security #ITAdmin #DeviceManagement #ZeroTrust
Video Timeline:
0:00:00 Introduction to the session: Configure Explicitly Deny EPM Rule with Microsoft Intune
0:00:05 Speaker Introduction: Vaishnav K, 11+ years of experience in SCCM, Device Management, and Automation Solutions.
0:00:40 Agenda for the session
0:01:59 What is Endpoint Privilege Management (EPM)?
0:03:21 Prerequisites and Requirements for Endpoint Privilege Management
0:05:22 Important Points to Note about EPM (e.g., supported OS, Cloud PC, AVD, Government Cloud, RBAC roles)
0:07:03 What is an Elevation Rule Policy?
0:07:48 Deep Dive into EPM Rules: Explicitly Deny Elevation and Child Process Controls
0:09:37 Understanding the EPM Tools PowerShell Module
0:11:03 Key Commandlets in the EPM Tools PowerShell Module
0:11:43 Live Demo: Configuring Explicitly Deny EPM Rule with Microsoft Intune
0:11:56 Navigating to Endpoint Security - Endpoint Privilege Management in Intune Admin Center
0:12:17 Reviewing existing policies, including the Default Elevation Settings Policy.
0:13:35 Creating a new Elevation Rule Policy for "Explicitly Deny"
0:15:38 Defining the Elevation Type as "Deny"
0:16:11 Setting Child Process Behavior to "Deny all"
0:17:02 Demonstrating how to obtain the file hash using PowerShell (Get-FileAttributes and Get-FileHash)
0:22:14 Pasting the file hash into the policy configuration
0:23:48 Assigning the policy to a group (My CPC - Windows 11)
0:24:08 Reviewing and creating the policy
0:24:49 Verifying the newly created "Explicitly Deny EPM Elevation Rule Policy"
0:25:07 Demonstrating the end-user experience with a previously allowed application (WinRAR) - it now requires business justification
0:26:08 Demonstrating the end-user experience with the explicitly denied application (VNC Viewer) - it now shows "You can't run this app as administrator" error.
0:27:08 Final confirmation of the configured policy
0:28:12 Q&A and Thank You
Feel free to ask if you need any adjustments or further assistance!
==
More Blog posts related to SCCM/Intune/Windows 11/Cloud PC/AVD/Hyper-V/Cloud/IT Pro/Azure -
✔ anoopcnair.com/windows-365
👉 Stay Connected - howtomanagedevices.com/stay-connected 👉 howtomanagedevices.com/sccm/1791/how-to-manage-devices-live-digital-events-weekend-learning
#CloudPC #Windows365 #W365
howtomanagedevices.com
Learn SCCM Read anoopcnair.com/sccm
anoopcnair.com/learn-sccm-intune
Learn Intune Read - anoopcnair.com/intune
anoopcnair.com/learn-microsoft-intune
Learn Windows 10 Read - anoopcnair.com/windows-10
Learn Hyper-V Read - anoopcnair.com/hyperv-2
Learn About Cloud Read - anoopcnair.com/cloud
Learn about Azure Read - anoopcnair.com/cloud/azure
Learn About IT Pros Events - anoopcnair.com/itpro
Learn about me - anoopcnair.com/about
#SCCM #ConfigMgr #SCCMVideos #SCCMTutorials #SCCMStudyVideos #SCCMFreeTraining #SCCMTraining #HowtoManageDevices
#Intune #MicrosoftIntune #IntuneVideos #IntuneTutorials #IntuneGuide #IntuneStudy #MSIntune #IntuneTraining #HowtoManageDevices
