Intune EPM is documented for Windows. As of 18 October 2026, Microsoft's EPM overview lists Windows, and its deployment planning page lists Windows operating systems. This does not establish a future macOS release.
Altiward supports a different Mac workflow. SAP Privileges handles elevation on your managed Macs. Altiward checks actual admin membership, enforces recorded expiry and sends session evidence and findings to your SIEM. See how it works.
Add Altiward to Intune-managed Macs
For teams already deploying SAP Privileges through Intune, Altiward adds checks and enforcement without changing how people request temporary admin.
- Deploy the Altiward agent and profiles. Keep your existing elevation workflow and identify the accounts that should remain permanent admins.
- Run the Altiward server on your infrastructure. Review reported admin rights and request revocation from the console.
- Send evidence to your SIEM. Correlate session records and findings for unexpected admins, expiry enforcement and missing check-ins with your other security telemetry.
See what Altiward adds to SAP Privileges in enforcement, visibility and evidence.
Keep IT's managed admin account separate
Intune can create a managed local admin account on Macs and manage its password through macOS account configuration with LAPS. That account serves a different purpose from a person's temporary elevation.
List the managed account as a permanent admin in Altiward's configuration profile so it is excluded from unexpected-admin findings and enforcement. Our macOS LAPS guide explains that boundary.
Check Microsoft's current platform scope
The dated answer above is based on Microsoft's EPM overview and planning documentation. Check those sources for Microsoft's current platform support; Altiward does not make claims about Microsoft's release plans.