Secure Unified Endpoint Management 24.0.1

General Enhancements

• Processing rules for the Enterprise Service Bus Extension
• Intune App import and assignment (Preview)

Bug Fixes

• See list of bug fixes

Updates after initial release

• UEM 24.0.1.39  (03.09.2024)
  • Display the associated Service Bus Node ID on Depot Servers in the Infrastructure Management view.
  • Add platform information to Intune Apps in Software Management.
  • Improved installation state for Intune App installation status mapping.
  • Removed activation of "Complete Inventory" action from legacy Empirum connector.
• UEM 24.0.1.34 / SUEM 24.0.1.3 (14.08.2024)
  •  PRB38180: Installation of UEM Extension destroys computer dialog defaults.
  • PRB38126: SUEM Activities: Sporadic errors during the execution of SUEM Automation Activities in workflows.
  • If there are no service connections configured in the system (which Package Cloud can use), skip sending http request.
  • Scheduler for Intune installation status import set to 60 minutes. Start time randomized.
  • Depot Servers in the Infrastructure Management list show the associated service bus node ID.
  • Assignments used for Intune can now contain spaces.
• UEM 24.0.1.24 (02.08.2024)
  • PRB38121: UEM console: Deletion of clients without corresponding authorization possible.
  • Intune App import fixed.
  • Intune App status import now possible.
• SUEM 24.0.1.2 (02.08.2024)
  • PRB38121: UEM console: Deletion of clients without corresponding authorization possible.

Known Issues

• Preview feature Intune Assignments: We discovered an error in the Intune app import which appeared with a change in DWP 12.0.5. Therefore the import will not be possible until we provide a fix for this.
• Workflow activities do not support Intune assignments.
• The Intune Data Provider to import devices should be scheduled to run after Empirum Inventory Data Provider to allow co-managed devices being assigned in Intune.

Processing rules for the Enterprise Service Bus Extension

Processing rules allow to limit the processing of messages which do not have dedicated handlers and therefor are processed by the generic message handling. Limiting the scope can be useful to increase performance or prevent overwriting data from distinct sources.

By not updating the many multi fragments in a message like hard disks, network cards or processors the processing time and load can be significantly reduced.

Basic function:

1. Each processing rule defines the data which is considered for a given configuration item (CI). This works as a white list. Not provided data definitions and properties will be ignored.
2. Several rules can be configured per CI and platform combination but only one can be enabled at a time.
3. Each rule apples for a platform (i.e. Empirum, Silverback)
4. If no processing rule exists for a CI the generic processing will be used.

The UEM 24.0.1 Extension provides predefined processing rules which filters all but the basic required information to create and update devices. They are disabled by default.

See the dedicated article for more information and configuration.

Intune App import and assignment (Preview)

Intune Apps can now imported and assigned in UEM assignments to deploy apps to Intune or co-managed managed devices.

Prerequisite is the correct configuration of the Intune Inventory Data Provider.

A new data provider "Intune Import for UEM" installed with the UEM Extension collects all Apps from Intune and provides them with the object type "Intune App" and management type "Modern" in the software library. 

The preview of the Apps shows basic information like name, version, description and App Type. In addition the supported platform is displayed.

Assignment can now also contain Intune managed and co-managed (Empirum and Intune) computers and Intune Apps. Assignments for Intune will create groups in Entra which will be added to the App as "Required" or "Uninstall" depending on the setting of the assignment. The group names are based on the following naming schema "MX42-ASSIGMENTNAME-Required" or "MX42-ASSIGNMENTNAME-Uninstall". Devices are added if the assignment is active.

Details are provided in the knowledge base article Microsoft Intune Integration.

The data provider "Intune Integration"  needs to be configured to use a service connection to Microsoft 365 (Intune) as it is described in the Intune Inventory Data Provider documentation which is used to import computer objects.