Share via

Endpoint Privilege Management (EPM) limitations

Joel Kettukorpi 20 Reputation points
2025-04-01T09:33:18.6833333+00:00

Hey.

My organisation is considering deploying EPM to our devices and I was wondering if Endpoint Privilege Management can elevate requests for tasks other than launching applications and adjusting some Windows settings? Specifically, I'm interested in understanding if it can handle other administrative tasks, like uninstalling applications through Apps - Installed apps or change configurations like network adapters, which currently require administrative rights.

Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
2,062 questions
0 comments
Accepted answer
  1. Crystal-MSFT 53,811 Reputation points Microsoft External Staff
    2025-04-02T02:26:35.2033333+00:00

    @Joel Kettukorpi, Thanks for posting in Q&A. Currently EPM supported to elevate PowerShell script.

    https://call4cloud.nl/epm-msi-file-extensions/

    Note: None-Microsoft link, just for the reference.

    You can write PowerShell script to open Settings or Control Panel.

    https://codesteps.com/2021/11/15/powershell-how-to-display-and-open-control-panel-items/#:~:text=To%20open%20control%20panel%20items%2C%20PowerShell%20provides%20Show-ControlPanelItem,enter%20the%20text%20Sound%20for%20the%20-Name%20parameter.

    https://everything-powershell.com/how-to-open-up-settings-in-windows-11-using-powershell/

    Note: None-Microsoft link, just for the reference.

    After that, you can try to configure elevation rules to elevate PowerShell scripts with EPM.

    You can try the above suggestion and if there's any update, feel free to let us know.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Alex Burlachenko 4,225 Reputation points
    2025-04-01T10:58:26.2633333+00:00

    Hi Joel,

    Thanks for your question here at Q&A! Yes, Endpoint Privilege Management (EPM) can handle elevation requests beyond just launching apps. It supports administrative tasks like:

    Uninstalling applications (via Settings > Apps > Installed apps)

    Modifying network adapter settings (IP, DNS, enabling/disabling adapters)

    Other system configurations (disk management, printers, Windows Update)

    However, some complex or multi-step operations (e.g., certain driver installations) may still require full admin rights. For best results, we recommend testing your specific scenarios in a pilot group first.

    Best regards,

    Alex

    P.S. If my answer help to you, please Accept my answer

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.