Intune Issue

Question

I want to do below task. Step 1: import a cert Step 2: Installing to a PC Step 3: Send a request from PC to Intune Step 4: Intune said OK Step 5: Can go to Corporate networ Please guide me how to create this policy or custom policy for intune. Thanks.

Answer 1

Hi James,

I would recommend taking a look at this documentation:

Trusted root certificate profiles for Microsoft Intune

https://learn.microsoft.com/en-us/mem/intune/protect/certificates-trusted-root

When using Intune to provision devices with certificates to access your corporate resources and network, use a trusted certificate profile to deploy the trusted root certificate to those devices. Trusted root certificates establish a trust from the device to your root or intermediate (issuing) CA from which the other certificates are issued.

You deploy the trusted certificate profile to the same devices and users that receive the certificate profiles for Simple Certificate Enrollment Protocol (SCEP), Public Key Cryptography Standards (PKCS), and imported PKCS.

To create a trusted certificate profile

https://learn.microsoft.com/en-us/mem/intune/protect/certificates-trusted-root#to-create-a-trusted-certificate-profile

If this is helpful please accept answer.

Answer 2

@James Chan_110, Thanks for posting in Q&A. From the tasks you provided, it seems you want Intune to approve corporate network access in the process. Based as I know, Intune currently does not have such feature to approve the request.

Based on my researching, I find Microsoft Purview can manage workflow requests and approvals

https://learn.microsoft.com/en-us/purview/how-to-workflow-manage-requests-approvals

You can contact them to confirm if they can do what you want.

https://www.microsoft.com/en-us/security/business/microsoft-purview

Thanks for your understanding.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.