Rolling out EPM

Rolling out EPM in a production environment involves multiple steps, as illustrated in the block diagram below. On the device side, it’s essential to ensure that all EPM prerequisites are fulfilled and that the device is enrolled in Intune. On the administrative side, the Intune administrator must deploy EPM by configuring the appropriate policies. Finally, the rollout progress can be monitored by reviewing the logs discussed earlier in this chapter.

Figure 2.36: Block diagram illustrating the steps for EPM rollout

In this section we are going to focus on the Task at admin end for onboarding devices to EPM.There are two steps involved in the process as explained below:

Step 1: Creating the EPM Elevation Setting policy (which is same as the one discussed in the previous section)

This policy is going to enable the EPM functionality in the device. It is going to install the EPM agent and send diagnostic information from the device to Intune service. Creating this...