Microsoft has been shipping updates to the Intune Suite at a steady pace, and February 2026 brings a batch of changes that IT admins will want to know about. From tighter Remote Help session controls to new Endpoint Privilege Management (EPM) policies, here is what landed this month and what it means for your environment.
Remote Help gets granular session controls
Remote Help has been a solid alternative to third-party remote support tools since its introduction, but one common complaint was the lack of granular session permissions. This month, Microsoft added the ability to define session-level permissions based on Entra ID groups. That means you can now restrict which helpdesk technicians can request elevated access during a session and which can only view the remote screen.
In practice, this is a big deal for organizations with tiered support models. Your L1 techs can connect and observe or guide users through tasks, while only L2 or L3 engineers can take full control or request admin elevation. Session audit logs now include the specific permission level used, which is useful for compliance reporting.
Endpoint Privilege Management: new elevation rules
EPM continues to mature as a replacement for blanket local admin rights. The February update introduces support-approved elevation rules, where an end user can request elevation for a specific application, and a designated approver receives a notification to approve or deny the request in real time.
This approval workflow was one of the most-requested features on the Intune feedback portal. Previously, you could either allow or block elevation based on file hash, publisher, or file path, but there was no middle ground for edge cases. Now, if a user needs to install a one-off application that does not match your existing rules, they can submit a request instead of calling the helpdesk to log in with admin credentials.
A few things to note:
- Approvers are notified via the Company Portal app and email. Response time SLAs are configurable.
- Approved elevations are time-boxed (default: 1 hour) and logged in the Intune admin center.
- You can require business justification text from the user before the request is submitted.
Expanded platform support for advanced analytics
Intune Advanced Analytics, part of the Intune Suite add-on, now supports macOS and iOS devices in addition to Windows. Device health scoring, app reliability metrics, and anomaly detection are now available cross-platform. If you have been managing a mixed fleet and relying on separate tools for Apple device telemetry, this consolidation is worth evaluating.
The macOS support covers hardware health (battery cycle count, storage health), OS update compliance, and application crash rates. iOS support is more limited at launch, focusing on OS version compliance and app installation success rates, but Microsoft has indicated that parity with the Windows feature set is on the roadmap.
What this means for your organization
If you are already licensed for the Intune Suite, these features are available now and require no additional cost. The Remote Help session controls and EPM approval workflows both require policy configuration in the Intune admin center before they take effect.
For organizations still on standalone Intune without the Suite add-on, these updates are another reason to evaluate the bundle. The combination of Remote Help, EPM, Advanced Analytics, and Tunnel for MAM provides capabilities that would otherwise require three or four separate vendor tools.
At BluetechGreen, we help organizations evaluate and deploy the Intune Suite as part of our managed services. If you are unsure whether the Suite add-on makes sense for your environment, we can run a quick cost-benefit analysis during a free assessment.
Action items
- Review your Remote Help policies and configure group-based session permissions.
- Evaluate EPM support-approved elevation rules for your organization's use cases.
- If you manage macOS or iOS devices, enable Advanced Analytics cross-platform reporting.
- Check your Intune Suite license status and consider the add-on if you are using standalone Intune.
We will keep covering Intune Suite updates as they ship. If you want a deeper dive into any of these features for your specific environment, reach out to our team.