Modern Management Summit 2026

As endpoint environments grow more complex, controlling high impact administrative actions—such as privilege elevation, sensitive configuration changes, and security critical operations—has become just as important as managing devices themselves. In this session, we’ll take a deep dive into how Endpoint Privilege Management (EPM), Multi Admin Approval (MAA), and Admin Tasks work together in Microsoft Intune to provide strong governance, visibility, and operational control—with and without AI.
We’ll start with the non AI foundations, explaining how EPM enforces least privilege access through policy based elevation, how MAA protects sensitive actions by requiring approvals, and how Admin Tasks centralize these requests into a single, actionable workflow. Attendees will gain a clear understanding of where each capability applies, how they interoperate, and how they support auditability, compliance, and Zero Trust principles in real world Intune environments.
From there, we’ll explore how AI and agent assisted capabilities enhance—but do not replace—these controls. We’ll look at how AI can provide contextual insights, impact analysis, and recommendations for elevation requests and approval workflows, helping admins make faster, better informed decisions while keeping humans firmly in control. We’ll also discuss how agent generated recommendations surface alongside traditional tasks, and how organizations can adopt these capabilities incrementally without disrupting existing governance models.

In this session we will see:
- What is Log Analytics
- How to use the Log Analytics API
- Securing your API calls (Azure Automation or Azure function)
- Sending data from your devices
- Sending data from Azure Automation
- Creating reports (drivers, BSOD, warranty)

As you probably know I have a weekly Intune newsletter so I see a LOT of content.

In this session I will run through what I think were the most impactful contributions made in 2025. You may have missed some, you may disagree, you may have some I have missed, it's a shared learning session.

- Graph API basics
- What is Azure Automation
- What is a managed identity
- Why to use managed identity
- Create our first automation account
- Runbook and PowerShell
- Graph API in Azure Automtion
- Schedule tasks with Azure Automation
- Modular runbooks in Azure automation
- Call runbook on-demand from devices
- Secure a bit more API calls
- Cloud automation samples