Did you see the EPM docs got updated silently... without a real announcement? There’s now a new System settings policy in Endpoint Privilege Management. Instead of only elevating an EXE, EPM can now let a standard user change a specific Windows system setting. Think more along the lines of the kind of setting you would normally change through Windows Settings or the old Control Panel. The first documented example is Network Settings, which lets users change things like IPv4, IPv6, and DNS without giving them local admin rights. The Company Portal becomes the entry point, and behind the scenes EpmElevate.exe provides the dedicated elevated experience. I took a closer look at how the policy, the Company Portal, and EpmElevate.exe all fit together. And another System Settings scenario is also hiding in there that Microsoft still hasn’t documented yet... #Intune #MSIntune #Windows11 #EPM patchmypc.com/blog/manage-sy…