When a user is blocked from adding software or peripherals to their work devices based on these policies, they need their helpdesk or IT assistance. However, many organizations have endpoint policies that require local administrator privileges to add software or drivers to corporate devices (to limit support costs, address app license liability or lower the risks of malware). When employees moved to remote work, many added additional peripherals such as printers, wireless mice, or keyboards to help their productivity. For example, IT administrators can limit the tier 1 helpdesk group to help all groups except the finance department.Īnother example of elevation is helping to install the right software or drivers remotely for an employees' enhanced work from home set-up. For example, if an organization has three tiers of helpdesk support, with RBAC the administrator can assign view-only permissions to tier 1 support, tier 2 can have full control permissions, and tier 3 could have the permissions required to elevate using their alternate local administrator credentials on the end user's device. For larger organizations with more detailed requirements, the RBAC capabilities can be set based on additional group parameters such as department or user work groups. The new remote help capabilities will also enable administrators to set up tiers of helpdesk associates, and then determine which tier of associates can help which group of users. Permissions can be set by administrators in Microsoft Endpoint Manager to limit the sessions to view-only, allow the associate to take full control of a user's device, or have the right to enter administrative credentials to perform specific actions (known as elevation). When we release role-based access controls for remote help in Microsoft Endpoint Manager, administrators can set parameters and define the actions that may be taken during a remote help session based on the helpdesk associate's role. Reporting: to identify recurring issues and potentially suspicious activity.Įnable remote help in the Microsoft Endpoint Manager console for enrolled and unenrolled devices Just right, just-in-time permissions.Compliance warnings: to help protect the organization from security risks, alerts are displayed to the helpdesk associate if a device is out of compliance and may introduce a security risk to the organization.Elevation: to help Administrators determine if helpdesk associates can use local administrative privileges to troubleshoot an employees' device, or if elevation of the task permissions is required.Role-based access control (RBAC) and permissions: to define who is authorized to support which user or groups of users.Specifically, we will introduce four new capabilities for remote help: We have developed new advanced endpoint management capabilities to meet the need for secure, connected experiences for IT administrators, helpdesk associates and Windows users on enrolled and unenrolled devices. Remote help allows helpdesk associates to view or control employees' Windows devices so they can quickly troubleshoot and resolve technical issues, wherever the employee is working from. Organizations need to ensure that their helpdesk associates can securely provide remote assistance to users, no matter where they are. We've also seen continued employee frustration when unresolved technical issues lower productivity and support is not simply onsite. This new cloud-based remote assistance solution will empower helpdesks to more securely support users of Windows devices.Įighteen months into the workforce changes brought by the pandemic, we continue to see increasing cybersecurity vulnerabilities, as the number of personal and company-owned devices continues to grow. To ensure helpdesks continue to improve their levels of support, we are pleased to announce the public preview of a new remote help capability in Microsoft Endpoint Manager. The pandemic reshaped the way we work as organizations struggled to support remote workers and had to quickly find solutions to help employees manage technical issues on their devices from afar rather than onsite. The global pandemic began and the world of work changed overnight as organizations scrambled to try and keep their workforces productive and their businesses running. March 2020 was the last time many people worked at their company's physical office buildings. Today we are announcing the plan to roll out the public preview of a new remote help capability in Microsoft Endpoint Manager.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |