Issue with Intune Endpoint Privilege Management

Question

We are experiencing issues with Intune Endpoint Privilege Management (EPM) not working on laptops that are Microsoft Entra hybrid joined. EPM is only enabled if the laptops are Microsoft Entra joined. Additionally, we noticed that the EPM agent is not installed on those laptops. We checked the IntuneManagementExtension.log and found this entry:

<![LOG[[eventListener] Skipping EPM Scenario logging as PrivilegeManagement flag is not set for GUID:e4cd0c46-8d75-4d93-b5ac-99cf25388591]LOG]!><time="19:22:12.3517831" date="5-6-2024" component="IntuneManagementExtension" context="" type="1" thread="4" file="">

We contacted Microsoft support for help with the issue but did not receive satisfactory support. Any advice or solutions would be appreciated.

Answer 1

Hi ! :) .. It sounds a bit like this issue

https://call4cloud.nl/2024/05/remember-remember-the-hybrid-device-the-mdm-only-enrollment-treason-and-the-epm-agent/

As it depends on how you enroll those hybrid devices into Intune... If you used a DEM account or used the enroll in devicemanagement only... the mmpc enrollment will not happen and the epm agent will not be installed

Feel free to contact me if you have any questions.