Microsoft Intune

1. In development

   Warning notifications for iOS apps running unsupported SDK versions

   We're continuing improvements to the Microsoft Intune mobile application management (MAM) service to ensure applications remain secure, reliable, and aligned with the latest platform capabilities. Starting in late June 2026, users opening iOS apps built with an Intune MAM SDK…

   DocsiOS/iPadOS App Protection Policy Settings

   iOS/iPadOS App Protection Policy Settings This article describes the iOS/iPadOS app protection policy (APP) settings for iOS/iPadOS devices.

   Listed as in development on Microsoft Learn
2. In development

   View eSIM profiles and deployment status for Windows devices

   Microsoft Intune will add Windows eSIM profile information and deployment status to the Properties Catalog. This visibility will make it easier to identify devices that require follow-up and validate profile deployment across your managed Windows estate. Applies to: Windows

   Listed as in development on Microsoft Learn
3. In development

   Updated minimum supported version for macOS

   Microsoft Intune will update its minimum supported macOS version after Apple releases macOS 27. Intune, the Company Portal, and the Intune management agent will support macOS 15 and later. Devices running macOS 14 or earlier that are already enrolled will…

   Listed as in development on Microsoft Learn
4. In development

   Update to the latest Intune Company Portal for Android, Intune App SDK for iOS, and Intune App Wrapper for iOS

   Starting January 19, 2026 , or soon after, we're making updates to improve the Intune mobile application management (MAM) service. To stay secure and run smoothly, this update will require iOS wrapped apps, iOS SDK integrated apps, and the Intune…

   DocsConditional Access - Require approved app or app protection policyUpdated·Action Required: Update the MAM SDK in your application to avoid end …·Action Required: Wrap your application with version 20.8.1+ to avoid …·v20.8.0 - Release 20.8.0 - microsoftconnect/ms-intune-app-sdk-ios | …

   Conditional Access - Require approved app or app protection policy Create a custom Conditional Access policy require approved app or app protection policy

   Listed as in development on Microsoft Learn Action may be required
5. In development

   Update to the latest Intune App SDK and Intune App Wrapper for Android 15 support

   We've recently released new versions of the Intune App SDK and Intune App Wrapping Tool for Android to support Android 15. We recommend upgrading your app to the latest SDK or wrapper versions to ensure applications stay secure and run…

   DocsIntune App SDK for Android·Intune App Wrapping Tool for Android

   Listed as in development on Microsoft Learn Action may be required
6. In development

   Update to support statement for Windows 10 in Intune

   Windows 10 has reached end of support on October 14, 2025 . Windows 10 no longer receives quality or feature updates. Security updates are only available to commercial customers who have enrolled devices into the Extended Security Updates (ESU) program…

   DocsWindows 10 - release informationNew·Windows 11 - release informationNew·Stay secure with Windows 11, Copilot+ PCs, and Windows 365 before …·Windows 10 reaching end of support

   Windows 10 - release information Learn release information for Windows 10 releases

   Listed as in development on Microsoft Learn
7. In development

   Update firewall configurations to include new Intune network endpoints

   As part of Microsoft's ongoing Secure Future Initiative (SFI) , starting on or shortly after December 2, 2025 , the network service endpoints for Microsoft Intune will also use the Azure Front Door IP addresses. This improvement supports better alignment…

   DocsAzure service tags overviewNew·Network endpoints for Microsoft IntuneUpdated·Secure Future Initiative (SFI)·Public Cloud from Official Microsoft Download Center

   Azure service tags overview Learn about Azure service tags and how they simplify security rule creation for Azure Virtual Networks. Discover benefits and best practices.

   Listed as in development on Microsoft Learn
8. In development

   Support for the KEYENCE OEMConfig app on Android Enterprise

   Microsoft Intune will add support for the KEYENCE OEMConfig app ( com.keyence.autoid.oemconfigs ) for Android Enterprise devices. You'll be able to use the app with Intune's OEMConfig workflow to configure the device settings that KEYENCE exposes through its app schema…

   Listed as in development on Microsoft Learn
9. In development

   Support for Intune Device control policy for devices managed by Microsoft Defender for Endpoint

   You'll be able to use the endpoint security policy for Device control (Attack surface reduction policy) from Microsoft Intune with the devices you manage through the Microsoft Defender for Endpoint security settings management capability. Device control policies are part of…

   DocsLearn about using Intune to manage Microsoft Defender settings on …Updated·Manage attack surface reduction settings with Microsoft Intune

   Learn about using Intune to manage Microsoft Defender settings on devices that aren't enrolled with Intune Learn how to use Intune policy to manage Microsoft Defender security settings on devices that aren't enrolled with Microsoft Intune.

   Listed as in development on Microsoft Learn
10. In development

    Share device diagnostics during Remote Help sessions on Windows

    Helpdesk agents will be able to request device diagnostics during an attended Remote Help session on Windows. After the person receiving help consents, the agent will be able to review diagnostic information, such as system details and resource usage, to…

    Listed as in development on Microsoft Learn
11. In development

    Scope tags support for Endpoint Privilege Management reports

    We're fixing how scope tags work with Endpoint Privilege Management (EPM) reports. With this change, EPM reports will respect the report viewer's assigned scope and display the details for only the users and devices that the report user is scoped…

    Listed as in development on Microsoft Learn
12. In development

    Remote Help support in GCCH

    You'll be able to use Remote Help in US Government Community Cloud High (GCCH) environments. This expansion extends the same secure, cloud-based remote assistance capabilities currently available in GCC to GCCH tenants. IT support staff will be able to establish…

    Listed as in development on Microsoft Learn
13. In development

    Plan for change: User alerts on iOS for when screen capture actions are blocked

    In an upcoming version (20.3.0) of the Intune App SDK and Intune App Wrapping Tool for iOS, support is added to alert users when a screen capture action (including recording and mirroring) is detected in a managed app. The alert…

    DocsNew block screen capture for iOS/iPadOS MAM protected apps

    Listed as in development on Microsoft Learn Action may be required
14. In development

    Plan for change: Intune is moving to support macOS 15 and higher later this year

    Later in calendar year 2026, we expect macOS Golden Gate 27 to be released by Apple. Microsoft Intune, the Company Portal app, and the Intune mobile device management agent support macOS 15 and later. Since the Company Portal app for…

    Listed as in development on Microsoft Learn Action may be required
15. In development

    Plan for Change: New settings for Apple AI features; Genmojis, Writing tools, Screen capture

    Today, the Apple AI features for Genmojis, Writing tools, and screen capture are blocked when the app protection policy (APP) "Send Org data to other apps" setting is configured to a value other than "All apps". For more details on…

    DocsPost Microsoft Intune support for Apple Intelligence·iOS/iPadOS App Protection Policy Settings

    Microsoft Intune support for Apple Intelligence Learn more about Intune support for Apple Intelligence.

    Listed as in development on Microsoft Learn Action may be required
16. In development

    Plan for Change: New Intune connector for deploying Microsoft Entra hybrid joined devices using Windows Autopilot

    As part of Microsoft's Secure Future Initiative, we recently released an update to the Intune Connector for Active Directory to use a Managed Service Account instead of a local SYSTEM account for deploying Microsoft Entra hybrid joined devices with Windows…

    DocsEnrollment for Microsoft Entra hybrid joined devicesNew·Microsoft Intune Connector for Active Directory security update

    Enrollment for Microsoft Entra hybrid joined devices Use Windows Autopilot to enroll Microsoft Entra hybrid joined devices in Microsoft Intune.

    Listed as in development on Microsoft Learn Action may be required
17. In development

    Plan for Change: Intune is moving to support iOS/iPadOS 18 and later

    Later in calendar year 2026, we expect iOS 27 and iPadOS 27 to be released by Apple. Microsoft Intune, including the Intune Company Portal and Intune app protection policies (APP, also known as MAM), requires iOS 17/iPadOS 17 and higher…

    DocsManage device operating system versions with IntuneUpdated·Operating systems and browsers supported by Microsoft Intune·this statement about ADE Userless support

    Manage device operating system versions with Intune Learn about the methods for managing device operating system versions supported by Microsoft Intune.

    Listed as in development on Microsoft Learn Action may be required
18. In development

    Plan for Change: Implement strong mapping for SCEP and PKCS certificates

    With the May 10, 2022, Windows update ( KB5014754 ), changes were made to the Active Directory Kerberos Key Distribution (KDC) behavior in Windows Server 2008 and later versions to mitigate elevation of privilege vulnerabilities associated with certificate spoofing. Windows…

    DocsKB5014754·Post Support tip: Implementing strong mapping in Microsoft Intune …

    Support tip: Implementing strong mapping in Microsoft Intune certificates Learn more about implementing strong mapping in Microsoft Intune certificates.

    Listed as in development on Microsoft Learn Action may be required
19. In development

    Plan for Change: Google Play strong integrity definition update for Android 13 or above

    Google recently updated the definition of "Strong Integrity" for devices running Android 13 or above, requiring hardware-backed security signals and recent security updates. For more information, see the Android Developers Blog: Making the Play Integrity API faster, more resilient, and…

    DocsHow to Monitor App Protection Policies·Android App Protection Policy Settings·Android Enterprise compliance settings in Microsoft Intune

    How to Monitor App Protection Policies This article describes how to monitor app protection policies in Intune.

    Listed as in development on Microsoft Learn Action may be required
20. In development

    Plan for Change: Blocking screen capture in the latest Intune App SDK for iOS and Intune App Wrapping Tool for iOS

    We recently released updated versions of the Intune App SDK and the Intune App Wrapping Tool. Included in these releases (v19.7.5+ for Xcode 15 and v20.2.0+ for Xcode 16) is the support for blocking screen capture, Genmojis, and writing tools…

    DocsConfiguration Policies for Intune App SDK Managed Apps·iOS/iPadOS App Protection Policy Settings·App Configuration Policies for Microsoft Intune

    Configuration Policies for Intune App SDK Managed Apps Learn how to configure policies for Intune App SDK managed apps.

    Listed as in development on Microsoft Learn Action may be required
21. In development

    Notices

    These notices provide important information that can help you prepare for future Intune changes and features.

    Listed as in development on Microsoft Learn
22. In development

    New endpoint security template for Microsoft Defender for Endpoint safe deployment settings

    We're working on a new endpoint security template in Intune dedicated to Microsoft Defender for Endpoint (MDE) safe deployment settings. This will give you a focused, purpose-built policy for managing how MDE updates roll out across your Windows devices. Microsoft…

    DocsLearn about using Intune to manage Microsoft Defender settings on …Updated·Use safe deployment practices to safeguard your environment

    Learn about using Intune to manage Microsoft Defender settings on devices that aren't enrolled with Intune Learn how to use Intune policy to manage Microsoft Defender security settings on devices that aren't enrolled with Microsoft Intune.

    Listed as in development on Microsoft Learn
23. In development

    New Linux antivirus settings for Microsoft Defender for Endpoint

    We're adding a new Microsoft Defender Updates template for Linux endpoint security antivirus policies. This template will include four new settings for managing Microsoft Defender for Endpoint agent auto-update behavior on Linux devices attached via MDE attach. You will be…

    Listed as in development on Microsoft Learn
24. In development

    Mark Windows devices noncompliant when prohibited AI agents are discovered

    Automatically mark Windows devices as noncompliant when prohibited local AI agents, such as OpenClaw, are discovered on the device. As an admin, you'll be able to configure a list of prohibited agents in a Windows compliance policy. When a prohibited…

    Listed as in development on Microsoft Learn
25. In development

    Maintenance windows for updates on Windows devices

    Microsoft Intune will introduce maintenance windows to help you schedule firmware, driver, and operating system updates on Windows devices. You'll be able to choose supported update operations and configure a start date, start time, duration, and repeat schedule. You'll create…

    Listed as in development on Microsoft Learn
26. In development

    Just-in-time registration automatically enabled for eligible iOS/iPadOS tenants

    Microsoft Intune will automatically enable just-in-time (JIT) registration for eligible iOS/iPadOS tenants with the 2611 release. This change will apply to tenants with Microsoft Authenticator deployed as a required app and an existing device single sign-on (SSO) extension policy that…

    Listed as in development on Microsoft Learn
27. In development

    JIT registration reminder during Apple MDM push certificate renewal for iOS and iPadOS

    Beginning with the November 2026 release, Intune will display a new acknowledgment when you renew an Apple MDM push certificate in the Microsoft Intune admin center. The acknowledgment will remind you to configure just-in-time (JIT) registration for iOS and iPadOS…

    Listed as in development on Microsoft Learn
28. In development

    Intune moving to support Android 10 and later for user-based management methods in October 2024

    In October 2024, Intune supports Android 10 and later for user-based management methods, which includes: Android Enterprise personally owned work profile Android Enterprise corporate owned work profile Android Enterprise fully managed Android Open Source Project (AOSP) user-based Android device administrator…

    DocsIntune moving to support Android 10 and later for user-based …·Manage device operating system versions with IntuneUpdated·Android App Protection Policy Settings

    Manage device operating system versions with Intune Learn about the methods for managing device operating system versions supported by Microsoft Intune.

    Listed as in development on Microsoft Learn
29. In development

    Disable MAC address randomization on macOS Wi-Fi profiles

    On macOS devices, the Disable MAC address randomization setting will be available for Wi-Fi profiles. Use this setting to disable MAC address randomization on managed macOS devices. When connecting to a network, devices can present a randomized MAC address instead…

    DocsConfigure Wi-Fi Settings for Apple Devices in Intune·Create a Wi-Fi profile for devices in Microsoft Intune

    Configure Wi-Fi Settings for Apple Devices in Intune Add or create a Wi-Fi configuration profile on iOS/iPadOS and macOS devices using Wi-Fi configuration settings in Microsoft Intune. Configure the connection details, authentication methods, SSIDs, security types, and proxy settings.

    Listed as in development on Microsoft Learn
30. In development

    Device query for multiple devices for app inventory on Windows

    Advanced Analytics will extend device query for multiple devices to cover app inventory data on Windows. Building on the existing multi-device query for hardware inventory, you'll be able to use Kusto Query Language (KQL) to investigate installed applications across your…

    Listed as in development on Microsoft Learn
31. In development

    Declarative VPP app download in Company Portal

    The iOS/iPadOS Company Portal will support Declarative Volume-Purchased Program (VPP) app downloads from the Apps tab. Declarative VPP apps provide an improved end-user experience by reducing app installation latency, allowing for automatic overnight app updates, and providing the end user…

    Listed as in development on Microsoft Learn
32. In development

    Controlled Configuration for Microsoft Defender Antivirus on Windows

    Intune will support Controlled Configuration for Microsoft Defender Antivirus settings on Windows. When you enable it, antivirus settings delivered by Intune or Microsoft Defender for Endpoint security settings management will take precedence over conflicting settings from Group Policy, Configuration Manager…

    Listed as in development on Microsoft Learn
33. In development

    Configure Quality Update approvals and policies for Quick Machine Recovery (QMR)

    Windows Autopatch currently offers limited control over the deployment of quality updates. Today, the expedite mechanism focuses on deploying the latest security update and doesn't let admins select specific quality update releases or apply different deployment schedules, which can limit…

    Listed as in development on Microsoft Learn
34. In development

    Automate tasks with local actions on Android Enterprise devices

    Microsoft Intune will introduce local actions for Android Enterprise fully managed and dedicated devices. With local actions, you'll be able to automate tasks directly on a device by configuring actions that run in response to supported events. Events will include…

    Listed as in development on Microsoft Learn
35. In development

    Agentic identity for the Policy Configuration Agent (public preview)

    The Intune Policy Configuration Agent will update to use a Microsoft Entra agentic identity instead of a human user identity. This enables the agent to run policy configuration actions securely and independently. For existing agents, admins will be able to…

    Listed as in development on Microsoft Learn

1. GA

   Newly available protected apps for Intune

   The following protected apps are now available for Microsoft Intune: Caju AI by Caju AI eYACHO for Biz 7 Intune by MetaMoJi Corporation (iOS) eYACHO Viewer 7 Intune by MetaMoJi Corporation (iOS) Harvey AI by Harvey AI (Android)…

   DocsSupported Microsoft Intune AppsUpdated

   Supported Microsoft Intune Apps This article provides lists of support partner and Microsoft apps that are commonly used with Microsoft Intune.

   Detected Nov 11, 2026 · listed under 8–14 Jun 2026
2. Updated

   Newly available protected apps for Intune

   The following protected apps are now available for Microsoft Intune: Notion by Notion Labs Superhuman Mail by Superhuman Labs Calven by Calven Pty Limited Heijmans by Heijmans Notability by Ginger Labs, Inc. (iOS) Ben for Intune by Thanks…

   DocsSupported Microsoft Intune AppsUpdated

   Supported Microsoft Intune Apps This article provides lists of support partner and Microsoft apps that are commonly used with Microsoft Intune.

   Detected Nov 11, 2026 · listed under 25–31 Aug 2026
3. Updated

   Newly available protected apps for Intune

   The following protected apps are now available for Microsoft Intune: eScription One by DeliverHealth Prisma Browser for Intune by Palo Alto Networks, Inc. Elevate UC for Intune by Serverdata.net, Inc. For more information about protected apps, see Microsoft…

   DocsSupported Microsoft Intune AppsUpdated

   Supported Microsoft Intune Apps This article provides lists of support partner and Microsoft apps that are commonly used with Microsoft Intune.

   Detected Nov 11, 2026 · listed under 26 Oct – 1 Nov 2026

1. New feature

   Updated Windows support for Administrator protection settings

   Microsoft Intune now supports two Administrator protection settings in the settings catalog on Windows 11 versions 24H2 and 25H2. Admins can configure the Administrator Approval Mode type and choose the elevation prompt behavior used with Administrator protection. For…

   DocsCreate a policy using settings catalog in Microsoft IntuneNew

   Create a policy using settings catalog in Microsoft Intune Use settings catalog in Microsoft Intune to configure thousands of settings for Windows 10/11, iOS/iPadOS, macOS, and Android client devices, including Microsoft Office apps, Microsoft Edge, administrative templates (ADMX), and more. Add these settings in a device configuration profile to…

   Listed under 26 Oct – 1 Nov 2026 on Microsoft Learn
2. Deprecation

   Setup Assistant legacy deprecation for Apple enrollment profiles

   Intune has ended support for Setup Assistant (legacy) authentication for iOS/iPadOS and macOS automated device enrollment (ADE) with user affinity to align with modern authentication standards. Existing profiles are automatically updated to Setup Assistant with modern authentication, and…

   Listed under 26 Oct – 1 Nov 2026 on Microsoft Learn
3. New feature

   STIG audit baselines for Windows devices in commercial tenants

   Microsoft Intune commercial tenants can now audit Windows devices against Security Technical Implementation Guide (STIG) recommendations. Review per-setting and per-device audit results to identify configuration gaps and prioritize remediation. The baseline evaluates supported automated checks without changing device…

   DocsUse Security Technical Implementation Guide audit baselines to assess …New

   Use Security Technical Implementation Guide audit baselines to assess Windows device compliance in Microsoft Intune Learn how to use the Security Technical Implementation Guide security baseline in Microsoft Intune to assess Windows device compliance against Security Technical Implementation Guide recommendations for Department of Defense organizations.

   Listed under 26 Oct – 1 Nov 2026 on Microsoft Learn
4. New feature

   Push notification support update for Windows devices

   We've improved connectivity for scenarios that rely on push notifications including Device actions , Win32 apps , PowerShell scripts and Remediations . For the best experience, we recommend updating firewall rules to include this new endpoint: *.trouter.communications.svc.cloud.microsoft For…

   DocsDevice Actions - Wipe, Lock, Locate, and MoreNew·Add PowerShell Scripts to Windows Devices in Microsoft IntuneUpdated·Network endpoints for Microsoft IntuneUpdated·Add and Assign Win32 Apps to Microsoft Intune

   Device Actions - Wipe, Lock, Locate, and More Discover how to use Microsoft Intune to remotely manage, wipe, lock, restart, and secure Android, iOS/iPadOS, tvOS, visionOS, macOS, Windows, and ChromeOS devices. Learn about available device actions, prerequisites, and bulk actions for IT admins.

   Listed under 26 Oct – 1 Nov 2026 on Microsoft Learn
5. New feature

   Manage referenced apps on AOSP devices

   Microsoft Intune now supports AOSP referenced app type that lets you identify an app by package name instead of uploading an APK on AOSP devices. You can assign Required or Uninstall intent to OEM, preloaded, or externally deployed…

   Listed under 26 Oct – 1 Nov 2026 on Microsoft Learn
6. Retirement

   Legacy Apple MDM software update workloads removed from Intune

   Microsoft Intune is removing legacy Apple MDM software update workloads after Apple retired the underlying commands and payloads in OS 27. Admins should use Apple declarative device management update policies to continue managing software updates. This keeps Intune…

   DocsPost Support tip: Move to declarative device management for Apple software …

   Support tip: Move to declarative device management for Apple software updates By: Benjamin Flamm – Product Manager | Microsoft Intune Apple recently announced at the Worldwide Developer Conference (WWDC) in June 2025 that mobile...

   Listed under 26 Oct – 1 Nov 2026 on Microsoft Learn
7. New feature

   Faster delivery of Windows scripts

   Microsoft Intune now uses push notifications for admin-initiated and service-side changes to Windows scripts. Managed devices can check in sooner after script changes, reducing delivery and refresh delays compared with waiting for the normal polling interval. This update improves…

   Listed under 26 Oct – 1 Nov 2026 on Microsoft Learn
8. New feature

   Enforce Routes capability in Apple VPN profiles

   Microsoft Intune now supports Apple's Enforce Routes capability in iOS/iPadOS and macOS VPN profiles. Admins define routing behavior with Include all networks and Exclude local networks , and Intune automatically derives the appropriate Enforce Routes configuration. This helps…

   DocsConfigure VPN settings for Apple devices in Microsoft IntuneUpdated

   Configure VPN settings for Apple devices in Microsoft Intune Add or create a VPN configuration profile on iOS/iPadOS and macOS devices using virtual private network (VPN) configuration settings in Microsoft Intune. Configure the connection details, authentication methods, split tunneling, custom VPN settings with the identifier, key and value pairs…

   Listed under 26 Oct – 1 Nov 2026 on Microsoft Learn
9. New feature

   Certificate connector health monitoring in the Microsoft Intune admin center

   The Certificate Connector for Microsoft Intune now surfaces health and status signals in the Microsoft Intune admin center, so you can spot certificate-issuance problems early. Clear indicators call out common failure conditions — such as the connector…

   DocsOverview of Certificate Connector for Microsoft IntuneUpdated

   Overview of Certificate Connector for Microsoft Intune Learn about the unified Certificate Connector for Microsoft Intune, which supports SCEP, PKCS, imported PKCS, and certificate revocation.

   Listed under 26 Oct – 1 Nov 2026 on Microsoft Learn
10. New feature

    Bulk manage eSIMs on corporate-owned Android Enterprise devices

    Microsoft Intune now supports bulk eSIM actions for corporate-owned Android Enterprise devices. From Devices > All devices > Bulk device actions , you can activate eSIMs on up to 100 selected devices running Android 15 or later by…

    DocsManage eSIM plans in Microsoft IntuneNew·Wipe devices with Microsoft IntuneNew

    Manage eSIM plans in Microsoft Intune Activate and remove eSIM cellular plans on supported Apple and Android Enterprise devices with Microsoft Intune device actions.

    Listed under 26 Oct – 1 Nov 2026 on Microsoft Learn
11. New feature

    Apple OS 27 DDM status data added to device inventory

    Microsoft Intune now adds Apple OS 27 declarative device management status data to device inventory. Admins can review new inventory for: device health for hardware components, enhanced logging sessions, content cache status, and Apple MDM and security states…

    Listed under 26 Oct – 1 Nov 2026 on Microsoft Learn
12. GA

    Agent runtime protection settings are generally available

    Microsoft Intune's endpoint security template for Microsoft Defender for Endpoint agent runtime protection settings is now generally available. Administrators can use the template to manage supported runtime protection settings for Windows devices without the preview designation, aligning Intune…

    Listed under 26 Oct – 1 Nov 2026 on Microsoft Learn
13. New feature

    Administrator protection settings in Account protection policies

    Microsoft Intune now includes two Administrator protection settings in endpoint security Account protection policies. On supported Windows 11 versions, admins can configure the Administrator Approval Mode type and choose the elevation prompt behavior for Administrator protection. For more…

    DocsManage account protection settings with endpoint security policies in …

    Manage account protection settings with endpoint security policies in Microsoft Intune Use Microsoft Intune endpoint security account protection policies to protect the identity and accounts of users.

    Listed under 26 Oct – 1 Nov 2026 on Microsoft Learn
14. New feature

    Add support for the MEFERI OEMConfig app on Android Enterprise

    Microsoft Intune now supports the MEFERI OEMConfig app ( com.meferi.oemconfig ) for Android Enterprise devices. Admins can use the existing Intune OEMConfig workflow to deploy settings exposed by MEFERI's OEM-provided schema, expanding supported device management options without custom…

    DocsUse OEMConfig on Android Enterprise devices in Microsoft IntuneNew

    Use OEMConfig on Android Enterprise devices in Microsoft Intune Use Microsoft Intune to manage and use devices running Android Enterprise with OEMConfig. See all the steps, including an overview, see the prerequisites, create the configuration profile in Intune, and see a list of supported OEMConfig apps.

    Listed under 26 Oct – 1 Nov 2026 on Microsoft Learn
15. New feature

    Unlimited licenses for Apple volume purchase program (VPP) apps

    You can now assign VPP apps with unlimited licenses from Apple Business and Apple School Manager, making it easier to deploy apps across your organization without managing license quantities. Applies to: iOS/iPadOS macOS

    Listed under 19–25 Oct 2026 on Microsoft Learn
16. GA

    New Remote Help for Windows version available

    [Advanced capabilities (formerly "Microsoft Intune Suite")] Remote Help for Windows version 5.2.1210.0 is now available. This release includes stability and observability improvements. Applies to: Windows

    Listed under 12–18 Oct 2026 on Microsoft Learn
17. GA

    Intune security baseline for Windows 11, version 26H2

    The Windows security baseline for Windows 11, version 26H2 is now available in Microsoft Intune. This baseline reflects current Microsoft security recommendations and is the latest available Windows security baseline in Intune. The Windows 11, version 26H2 security…

    DocsPost Windows 11, version 26H2 security baselineUpdated·Default configuration of Intune's Windows security baselinesNew·Configure security baseline policies in Microsoft Intune

    Windows 11, version 26H2 security baseline Update: The Windows 11, version 26H2 security baseline has been updated to reflect the general availability of Administrator protection. An updated v2...

    Listed under 5–11 Oct 2026 on Microsoft Learn

1. New feature

   Windows 11, version 26H2 Settings Catalog update

   Microsoft Intune provides day-zero support for validated Windows policy settings introduced with Windows 11, version 26H2 in the Settings Catalog. Admins can use the new and updated settings to manage Windows endpoints with the latest 26H2 capabilities. For…

   DocsPost Microsoft Intune Settings Catalog updated to support Windows 11, …Updated

   Microsoft Intune Settings Catalog updated to support Windows 11, version 26H2 10.06.26 Update: The Windows security baseline for Windows 11, version 26H2 is now available for all customers in Microsoft Intune. This baseline reflects...

   Listed under 28 Sep – 4 Oct 2026 on Microsoft Learn Related post
2. New feature

   Upgrade an existing Android Enterprise connection to a managed Google domain

   Microsoft Intune now supports an optional upgrade for tenants that connected Android Enterprise with a Gmail account. You can link the enterprise to a managed Google domain and manage the Google-Intune connection with your Microsoft Entra work account…

   DocsConnect Intune account to managed Google Play account

   Connect Intune account to managed Google Play account Learn how to connect your Intune account to your Managed Google Play account.

   Listed under 28 Sep – 4 Oct 2026 on Microsoft Learn
3. New feature

   Updated minimum supported version for iOS and iPadOS

   Microsoft Intune now requires iOS/iPadOS 18 or later for standard device-management, Company Portal, and app-protection scenarios. Administrators should identify and upgrade affected devices. Userless devices enrolled through Automated Device Enrollment have a separate support statement. Applies to: iOS/iPadOS

   Listed under 28 Sep – 4 Oct 2026 on Microsoft Learn
4. New feature

   Skip the Device Features Tour during Apple enrollment

   Microsoft Intune now includes the Device features tour Apple OS 27 Setup Assistant skip key in Automated Device Enrollment profiles. You can hide this pane to reduce setup interactions and provide a more streamlined enrollment experience on supported…

   DocsSet up automated device enrollment (ADE) for iOS/iPadOSNew

   Set up automated device enrollment (ADE) for iOS/iPadOS Learn how to enroll corporate-owned iOS/iPadOS devices into Microsoft Intune with Apple Automated Device Enrollment (ADE).

   Listed under 28 Sep – 4 Oct 2026 on Microsoft Learn
5. New feature

   Require Managed Home Screen authentication for protected app activities

   Microsoft Intune now helps prevent users from bypassing Managed Home Screen (MHS) authentication when they access protected activities in MAM-integrated apps. If MHS requires sign-in or a session PIN, the app redirects the user to MHS before allowing…

   DocsConfigure the Microsoft Managed Home Screen AppNew

   Configure the Microsoft Managed Home Screen App Learn how to configure the Microsoft Managed Home Screen app.

   Listed under 28 Sep – 4 Oct 2026 on Microsoft Learn
6. GA

   Remote Help support for GCCH environments

   [Advanced capabilities (formerly "Microsoft Intune Suite")] Remote Help is now available in US Government Community Cloud High (GCCH) environments. This expansion extends the same secure, cloud-based remote assistance capabilities currently available in GCC to GCCH tenants. IT support staff can…

   DocsPlan for Remote Help with Microsoft IntuneUpdated

   Plan for Remote Help with Microsoft Intune Learn about the requirements and capabilities of Remote Help with Microsoft Intune on Windows, macOS, and Android Enterprise.

   Listed under 28 Sep – 4 Oct 2026 on Microsoft Learn
7. New feature

   Onboard MDM compliance partners with new self-service functionality

   Microsoft Intune now supports bring-your-own connector functionality for MDM compliance partners. Partners can build, test, and onboard compliance connectors using Intune documentation, contracts, and validation hooks. As an admin, you can opt in to a partner connector by…

   DocsThird-party device compliance partners support in Microsoft IntuneUpdated

   Third-party device compliance partners support in Microsoft Intune Use a third-party device compliance partner as a source of compliance data for devices you manage with Intune.

   Listed under 28 Sep – 4 Oct 2026 on Microsoft Learn
8. GA

   Newly available protected app for Intune

   Microsoft Dragon Copilot by Microsoft Corporation is now available as a protected app for Microsoft Intune. You can apply Intune app protection policies to the app on supported Android and iOS/iPadOS devices, helping protect organizational data while clinicians…

   DocsSupported Microsoft Intune AppsUpdated

   Supported Microsoft Intune Apps This article provides lists of support partner and Microsoft apps that are commonly used with Microsoft Intune.

   Listed under 28 Sep – 4 Oct 2026 on Microsoft Learn
9. New feature

   New single device page becomes the default experience in the Intune admin center

   Microsoft Intune now uses the new single device page as the default experience for all admins, and the previous device page is no longer available. In Devices > All devices , select a device to view details and…

   DocsView device detailsUpdated

   View device details Learn how to access device details in the Microsoft Intune admin center, including hardware information, installed apps, and device properties.

   Listed under 28 Sep – 4 Oct 2026 on Microsoft Learn
10. New feature

    New Apple settings in the Settings Catalog for iOS/iPadOS and macOS

    Microsoft Intune now includes new Apple Settings Catalog options for supported iOS/iPadOS and macOS devices. You can configure additional controls for areas such as app settings, Apple Intelligence, network and web-content filtering, and the macOS login window by…

    DocsCreate a policy using settings catalog in Microsoft IntuneNew

    Create a policy using settings catalog in Microsoft Intune Use settings catalog in Microsoft Intune to configure thousands of settings for Windows 10/11, iOS/iPadOS, macOS, and Android client devices, including Microsoft Office apps, Microsoft Edge, administrative templates (ADMX), and more. Add these settings in a device configuration profile to…

    Listed under 28 Sep – 4 Oct 2026 on Microsoft Learn
11. GA

    Microsoft Cloud PKI support for US Government GCC High

    [Advanced capabilities (formerly "Microsoft Intune Suite")] Microsoft Cloud PKI is now available for Microsoft Intune tenants in the Microsoft Government Community Cloud High (GCC High) environment. You can create and manage a cloud-based public key infrastructure that automates certificate issuance…

    DocsMicrosoft Cloud PKI for Microsoft IntuneUpdated

    Microsoft Cloud PKI for Microsoft Intune An overview of the Microsoft Cloud PKI service, available with Microsoft Intune Suite or as a standalone capability.

    Listed under 28 Sep – 4 Oct 2026 on Microsoft Learn
12. New feature

    Faster delivery of Win32 apps

    Microsoft Intune now uses push notifications for admin-initiated and service-side changes to Win32 apps. Managed devices can check in sooner after app changes, reducing delivery and refresh delays compared with waiting for normal polling intervals. This update improves…

    Listed under 28 Sep – 4 Oct 2026 on Microsoft Learn
13. New feature

    Faster Win32 app delivery after Windows enrollment

    Microsoft Intune Management Extension now checks for Windows app assignments immediately after the Enrollment Status Page (ESP) completes. This reduces the delay before required Win32 apps that weren't installed during ESP begin installing on newly enrolled devices. For…

    DocsUnderstand Microsoft Intune Management ExtensionNew

    Understand Microsoft Intune Management Extension Understand Microsoft Intune management extension for Windows.

    Listed under 28 Sep – 4 Oct 2026 on Microsoft Learn
14. New feature

    Configure MDE AI agent runtime protection for Windows

    Microsoft Intune now includes Microsoft Defender for Endpoint AI agent runtime protection settings in the new endpoint security template for Windows. You can use Audit mode to detect and alert on unsafe AI agent activity without blocking it…

    DocsAI Agent Runtime Protection with Microsoft Defender for Endpoint …New

    AI Agent Runtime Protection with Microsoft Defender for Endpoint (Preview) Learn how Microsoft Defender for Endpoint provides runtime protection for local AI agents by detecting and blocking prompt injection attacks.

    Listed under 28 Sep – 4 Oct 2026 on Microsoft Learn
15. New feature

    Automatically launch Microsoft Defender for Endpoint during Android Enterprise device setup

    Microsoft Intune now supports automatically opening Microsoft Defender for Endpoint during out-of-box setup for supported corporate-owned Android Enterprise devices. After you configure the Defender for Endpoint connector, turn on Grant MTD role permissions , and assign the Defender…

    Listed under 28 Sep – 4 Oct 2026 on Microsoft Learn
16. New feature

    Assignment filters for Android Settings Catalog policies

    Microsoft Intune now supports assignment filters for Android Enterprise and Android Open Source Project (AOSP) Settings Catalog policies. You can include or exclude specific devices based on device properties, giving you more granular control over policy deployments and…

    DocsCreate assignment filters in Microsoft Intune

    Create assignment filters in Microsoft Intune Create assignment filters in Microsoft Intune to target policies based on device properties like OS version or manufacturer. Learn to create, update, and delete filters for managed devices and apps.

    Listed under 28 Sep – 4 Oct 2026 on Microsoft Learn
17. New feature

    Stage app and policy rollout with deployment plans

    Microsoft Intune now supports deployment plans, a new way to roll out apps and configuration policies in stages instead of all at once. From the new Deployments experience in the Intune admin center, you can stage a rollout…

    DocsDeployment plans and deployments overview in Microsoft IntuneUpdated

    Deployment plans and deployments overview in Microsoft Intune Learn how deployment plans and deployments provide gradual, controlled, ring-based rollouts of apps and policies in Microsoft Intune.

    Listed under 21–27 Sep 2026 on Microsoft Learn
18. New feature

    Faster compliance updates for Windows devices

    Microsoft Intune now supports client-driven compliance evaluation for Windows devices. Supported devices can detect changes to compliance signals, including firewall, antivirus, BitLocker, Microsoft Defender status, operating system build, real-time protection, and Secure Boot, and proactively request reevaluation rather…

    DocsCreate device compliance policies in Microsoft IntuneUpdated

    Create device compliance policies in Microsoft Intune Create device compliance policies for Microsoft Intune.

    Listed under 14–20 Sep 2026 on Microsoft Learn
19. GA

    New Remote Help for Windows version available

    [Advanced capabilities (formerly "Microsoft Intune Suite")] Remote Help for Windows version 5.2.1040.0 is now available. This release updates subscription metadata for E3, E5, and E7 licenses. Remote Help features are unchanged from version 5.2.1037.0. Applies to: Windows

    Listed under 7–13 Sep 2026 on Microsoft Learn

1. New feature

   Windows 365 for Agents security baseline

   Microsoft Intune now includes a security baseline for Windows 365 for Agents Cloud PCs. Administrators can deploy and customize recommended, device-scoped settings for Windows 11, Microsoft Edge, and Microsoft Defender for Endpoint to establish a consistent security posture…

   DocsWhat is Windows 365 for Agents?·Configure security baseline policies in Microsoft Intune

   What is Windows 365 for Agents? Overview of Windows 365 for Agents, a platform where customers can deploy computer-using agents securely and at scale on Cloud PCs.

   Listed under 25–31 Aug 2026 on Microsoft Learn
2. New feature

   View expanded SIM inventory for corporate-owned Android devices

   Microsoft Intune now surfaces expanded SIM inventory for corporate-owned Android Enterprise devices, including EIDs, multiple ICCIDs, and activation state. View these details under Devices > All devices > select a device > Hardware , and use the reported…

   Listed under 25–31 Aug 2026 on Microsoft Learn
3. New feature

   Unattended Remote Help sessions for Windows devices

   [Advanced capabilities (formerly "Microsoft Intune Suite")] Microsoft Intune now supports unattended Remote Help sessions on physical Windows devices. Authorized helpdesk agents can sign in to a remote device with their own credentials without requiring the user to be present or…

   DocsPlan for Remote Help with Microsoft IntuneUpdated

   Plan for Remote Help with Microsoft Intune Learn about the requirements and capabilities of Remote Help with Microsoft Intune on Windows, macOS, and Android Enterprise.

   Listed under 25–31 Aug 2026 on Microsoft Learn
4. New feature

   Skip new Apple Setup Assistant panes during enrollment

   Microsoft Intune now includes Apple OS 27 Setup Assistant skip keys for Liquid Glass and Accessibility Appearance in Automated Device Enrollment profiles. You can hide these panes to reduce setup interactions and provide a more consistent enrollment experience…

   Listed under 25–31 Aug 2026 on Microsoft Learn
5. New feature

   Separate device and work profile passwords on Android Enterprise devices

   Microsoft Intune now supports the Block one lock for device and work profile setting in the Android Enterprise settings catalog, letting you require separate locks for the device and work profile instead of a shared one. Set it…

   Listed under 25–31 Aug 2026 on Microsoft Learn
6. New feature

   Remove eSIMs during a device wipe with a settings catalog policy

   Microsoft Intune now supports the Remove all eSIMs during a device wipe setting in the Android Enterprise settings catalog. Set it to True to request removal of all eSIMs when a corporate-owned device is wiped while the policy…

   Listed under 25–31 Aug 2026 on Microsoft Learn
7. New feature

   Remove an individual eSIM from a corporate-owned Android device

   Microsoft Intune now lets you remove a single eSIM from a corporate-owned Android Enterprise device without wiping it. Turn on Preview new device view , select the device, copy the eSIM's ICCID from device inventory, then select Remove…

   Listed under 25–31 Aug 2026 on Microsoft Learn
8. GA

   Operating system version property in assignment filters is generally available

   The operatingSystemVersion property in assignment filters is now generally available for managed devices and managed apps. Use this property to create filter rules that scope your app and policy assignments to devices running a specific OS version or…

   DocsAssignment filter properties and operators referenceNew·Create assignment filters in Microsoft Intune

   Assignment filter properties and operators reference Reference guide for device and app properties, operators, and rule syntax when creating assignment filters in Microsoft Intune. Includes examples and supported values.

   Listed under 25–31 Aug 2026 on Microsoft Learn
9. GA

   Newly available protected apps for Intune

   The following protected apps are now available for Microsoft Intune: Notion by Notion Labs Superhuman Mail by Superhuman Labs Calven by Calven Pty Limited Heijmans by Heijmans Notability by Ginger Labs, Inc. (iOS) Ben for Intune by Thanks…

   DocsSupported Microsoft Intune AppsUpdated

   Supported Microsoft Intune Apps This article provides lists of support partner and Microsoft apps that are commonly used with Microsoft Intune.

   Listed under 25–31 Aug 2026 on Microsoft Learn
10. New feature

    New updates to the Apple settings catalog

    Microsoft Intune now supports new Settings Catalog options for testing on the OS 27 betas, covering Declarative Device Management areas such as App Settings , Web Content Filter , and Siri Settings for iOS/iPadOS and macOS. Configure them…

    DocsCreate a policy using settings catalog in Microsoft IntuneNew

    Create a policy using settings catalog in Microsoft Intune Use settings catalog in Microsoft Intune to configure thousands of settings for Windows 10/11, iOS/iPadOS, macOS, and Android client devices, including Microsoft Office apps, Microsoft Edge, administrative templates (ADMX), and more. Add these settings in a device configuration profile to…

    Listed under 25–31 Aug 2026 on Microsoft Learn
11. New feature

    New single device page in the Intune admin center

    The new single device page is turned on by default for all customers. You can use the Preview new device view toggle to turn it off and return to the original device page. In the Intune admin center…

    Listed under 25–31 Aug 2026 on Microsoft Learn
12. New feature

    New policy settings for Windows

    Microsoft Intune now includes new Windows settings catalog options across several administrative template refreshes. Highlights include Turn on Protected Mode controls for Internet Explorer security zones, new Microsoft Edge policies from the Edge 150 template refresh, and a…

    Listed under 25–31 Aug 2026 on Microsoft Learn
13. New feature

    Memory scan setting for Microsoft Defender Antivirus on Linux

    Microsoft Intune now supports a memory scan setting in the Microsoft Defender Antivirus template for Linux endpoint security antivirus policies. You can manage memory scan behavior on Linux devices managed through Microsoft Defender for Endpoint security settings management…

    Listed under 25–31 Aug 2026 on Microsoft Learn
14. New feature

    Limit how long an Android work profile can stay off

    Microsoft Intune now supports the Number of days work profile is allowed to be switched off setting in the Android Enterprise settings catalog, so you can limit how long a work profile stays turned off. Enter the maximum…

    Listed under 25–31 Aug 2026 on Microsoft Learn
15. New feature

    Keep Android device screens on while charging

    Microsoft Intune now includes a settings catalog option for keeping fully managed and dedicated Android device screens on while charging. Select one or more modes - AC , USB , or Wireless - to control when the screen…

    Listed under 25–31 Aug 2026 on Microsoft Learn
16. New feature

    Device inventory for personally owned devices on Android Enterprise

    Microsoft Intune now supports device inventory for personally owned Android Enterprise devices with a work profile managed by Android Management API. View these devices from the device's Inventory page alongside corporate-owned devices in Resource Explorer, and query them…

    Listed under 25–31 Aug 2026 on Microsoft Learn
17. New feature

    Declarative Device Management for Apple volume purchase program apps

    Microsoft Intune now supports Apple Declarative Device Management (DDM) for required volume purchase program (VPP) apps on devices running iOS/iPadOS 17.2 and later and macOS 26 and later. By changing the management type to DDM when you upload…

    Listed under 25–31 Aug 2026 on Microsoft Learn
18. New feature

    Configure screen timeout for corporate Android devices

    Microsoft Intune now supports a Screen timeout setting in the Android Enterprise settings catalog, letting you specify how many seconds pass before the screen turns off. Configure it under Devices > Manage devices > Configuration > Create >…

    Listed under 25–31 Aug 2026 on Microsoft Learn
19. New feature

    Collect enhanced diagnostic logs from supervised Apple devices

    Microsoft Intune now supports Apple's Enhanced Logging device action on supported supervised devices running a compatible OS release. Administrators can start an AppleCare diagnostic-log collection session using an AppleCare-provided token and monitor device-reported status through Declarative Device Management…

    Listed under 25–31 Aug 2026 on Microsoft Learn
20. New feature

    Choose whether to remove eSIMs when wiping one corporate-owned Android device

    Microsoft Intune now lets you choose whether to preserve or remove eSIMs when wiping one corporate-owned Android Enterprise device. Turn on Preview new device view , select the device, then select Wipe . By default, the wipe preserves…

    Listed under 25–31 Aug 2026 on Microsoft Learn
21. New feature

    Audit mode for the Microsoft Defender Antivirus template for Linux

    The Microsoft Defender Antivirus template for Linux, which is part of Intune's Endpoint Security Antivirus policy, now includes a new Audit value for the Enforcement level setting. When you set Enforcement level to Audit , the antivirus engine…

    DocsLearn about using Intune to manage Microsoft Defender settings on …Updated·Manage antivirus settings with endpoint security policies in Microsoft …

    Learn about using Intune to manage Microsoft Defender settings on devices that aren't enrolled with Intune Learn how to use Intune policy to manage Microsoft Defender security settings on devices that aren't enrolled with Microsoft Intune.

    Listed under 25–31 Aug 2026 on Microsoft Learn
22. New feature

    Activate an eSIM on a corporate-owned Android device

    Microsoft Intune now supports single-device eSIM activation for corporate-owned Android Enterprise devices running Android 15 and later. Turn on Preview new device view , select the device, then select Activate eSIM and enter the carrier activation code. Intune…

    Listed under 25–31 Aug 2026 on Microsoft Learn

1. New feature

   Updated Visual Studio administrative templates in the Windows settings catalog

   The Visual Studio administrative templates were refreshed to version 1.0.184.40051, which adds the latest Visual Studio policy settings to the Windows settings catalog. The new setting is: Disable Model Context Protocol (MCP) (DisableMCP) For more information, see the…

   DocsAdmin controls for GitHub Copilot in Visual Studio - Visual Studio …Updated·Administrative Templates (ADMX) - Visual Studio (Windows)Updated

   Admin controls for GitHub Copilot in Visual Studio - Visual Studio (Windows) Learn about the new features for administrators in GitHub Copilot for Visual Studio that enable admins to manage Copilot effectively.

   Listed under 27 Jul – 2 Aug 2026 on Microsoft Learn
2. New feature

   Skip Setup Assistant screens for tvOS and visionOS enrollment

   Microsoft Intune now supports hiding or showing new Setup Assistant screens during automated device enrollment (ADE) for tvOS and visionOS devices. When you configure an enrollment profile, you can choose which screens, such as Apple ID , Diagnostics…

   DocsSet up automated device enrollment (ADE) for tvOS·Set up automated device enrollment (ADE) for visionOS

   Set up automated device enrollment (ADE) for tvOS Learn how to enroll corporate-owned Apple TV devices into Microsoft Intune with Apple Automated Device Enrollment (ADE).

   Listed under 27 Jul – 2 Aug 2026 on Microsoft Learn
3. New feature

   Samsung Knox E-FOTA firmware update management for Android Enterprise devices

   Microsoft Intune now integrates with Samsung Knox E-FOTA (Firmware Over-The-Air), so you can manage firmware updates for corporate-owned Samsung devices directly in the Microsoft Intune admin center. Control which firmware version each device receives, deploy updates without user…

   DocsIntegrate Samsung Knox E-FOTA with Microsoft IntuneNew

   Integrate Samsung Knox E-FOTA with Microsoft Intune Learn how to integrate Samsung Knox E-FOTA with Microsoft Intune to register Samsung devices, configure firmware updates, and monitor campaigns.

   Listed under 27 Jul – 2 Aug 2026 on Microsoft Learn
4. New feature

   Regional support for Microsoft Store apps

   Microsoft Intune now supports regional selection for Microsoft Store apps. When you add a Microsoft Store app, you can choose the region (market) whose Store catalog to search and deploy from. Previously, Intune searched only the United States…

   DocsAdd Microsoft Store Apps to Microsoft Intune

   Add Microsoft Store Apps to Microsoft Intune Learn about adding Microsoft Store apps to Microsoft Intune.

   Listed under 27 Jul – 2 Aug 2026 on Microsoft Learn
5. New feature

   New settings available in the Windows settings catalog

   Microsoft Intune now includes new settings in the Windows settings catalog for Windows devices. You can configure options for camera behavior, Keyboard Filter controls (for Windows Insider devices), and Windows Subsystem for Linux (WSL). To find them, go…

   Listed under 27 Jul – 2 Aug 2026 on Microsoft Learn
6. New feature

   New setting to disable the Get Started app

   The new Disable Get Started setting prevents the Windows Get Started app from being available to users. For more information, see the Experience policy CSP . Applies to: Windows

   DocsExperience Policy CSPNew

   Experience Policy CSP Learn more about the Experience Area in Policy CSP.

   Listed under 27 Jul – 2 Aug 2026 on Microsoft Learn
7. New feature

   New option for the Remove Default Microsoft Store packages setting

   The existing Remove Default Microsoft Store packages setting in the ApplicationManagement area has a new subsetting, Specify additional package family names to remove . It lets you provide a custom list of package family names (PFNs) to remove…

   DocsApplicationManagement Policy CSPNew

   ApplicationManagement Policy CSP Learn more about the ApplicationManagement Area in Policy CSP.

   Listed under 27 Jul – 2 Aug 2026 on Microsoft Learn
8. New feature

   New Windows App (Azure Virtual Desktop) settings in the Windows settings catalog

   There are new Windows App settings in the Windows settings catalog. To see and configure them in Intune, create a Windows settings catalog profile ( Devices > Manage devices > Configuration > Create > New policy > Windows…

   DocsConfigure Windows App Updates on WindowsUpdated

   Configure Windows App Updates on Windows Learn how to configure Windows App update behavior on Windows, including automatic updates and registry settings.

   Listed under 27 Jul – 2 Aug 2026 on Microsoft Learn
9. New feature

   New OneDrive settings in the Windows settings catalog

   There are new OneDrive settings in the Windows settings catalog: Set a custom name for the OneDrive folder – sets a custom name for the synced OneDrive folder on the user's device. Enable OpenID Connect (OIDC) authentication for…

   DocsIT Admins - Use OneDrive policies to control sync settings - …New

   IT Admins - Use OneDrive policies to control sync settings - SharePoint in Microsoft 365 Learn how admins can use OneDrive policies to configure the OneDrive sync app settings by using Group Policy.

   Listed under 27 Jul – 2 Aug 2026 on Microsoft Learn
10. New feature

    New Microsoft Edge settings in the Windows settings catalog

    The Microsoft Edge administrative templates were refreshed to Microsoft Edge 149 (version 149.0.4022.21), which adds the latest Microsoft Edge 148 and 149 policy settings to the Windows settings catalog. The new settings are: Allow Local Fonts permission on…

    DocsMicrosoft Edge Browser Policy Documentation LocalFontsAllowedForUrlsNew·Microsoft Edge Browser Policy Documentation LocalFontsBlockedForUrlsNew·Microsoft Edge Browser Policy Documentation …New·Microsoft Edge Browser Policy Documentation …New

    Microsoft Edge Browser Policy Documentation LocalFontsAllowedForUrls Windows and Mac documentation for supported Microsoft Edge Browser policy: Allow Local Fonts permission on these sites

    Listed under 27 Jul – 2 Aug 2026 on Microsoft Learn
11. New feature

    Improved on-demand device sync for Windows & iOS/iPadOS devices

    Microsoft Intune now supports a more comprehensive on-demand sync for Windows and iOS/iPadOS devices. When you select the Sync device action in the Microsoft Intune admin center, Intune initiates a full synchronization across key workloads, including configuration policies…

    DocsDevice Action: Sync

    Device Action: Sync Learn how to use the device sync action in Intune to apply policy, app, and configuration updates to managed devices.

    Listed under 27 Jul – 2 Aug 2026 on Microsoft Learn
12. New feature

    Dedicated RBAC permission for zero-touch enrollment

    Microsoft Intune now provides a dedicated role-based access control (RBAC) permission for Google zero-touch enrollment portal access. Previously, the zero-touch enrollment iframe in the Microsoft Intune admin center required the Update app sync permission, which also grants rights…

    DocsEnroll Android Enterprise dedicated, fully managed, or corporate-owned …New

    Enroll Android Enterprise dedicated, fully managed, or corporate-owned work profile devices in Intune Learn how to enroll Android Enterprise dedicated, fully managed, or corporate-owned work profile devices in Intune.

    Listed under 27 Jul – 2 Aug 2026 on Microsoft Learn
13. New feature

    Custom compliance settings for macOS

    Microsoft Intune now supports custom compliance settings for macOS. As an admin, you can define compliance checks using scripts and JSON rules, similar to existing support for Windows and Linux. This capability lets you evaluate device configuration, security…

    DocsUse custom compliance settings in Microsoft IntuneUpdated

    Use custom compliance settings in Microsoft Intune Manage custom compliance settings on managed devices by using JSON files and discovery scripts in Microsoft Intune.

    Listed under 27 Jul – 2 Aug 2026 on Microsoft Learn Roadmap 553222
14. Preview

    Controlled Configuration for Microsoft Defender antivirus settings (preview)

    In preview, Microsoft Intune now supports Controlled Configuration for Microsoft Defender antivirus settings. When you enable it, the Defender antivirus settings delivered by Intune or Microsoft Defender for Endpoint security settings management become authoritative and override configurations from…

    DocsManage antivirus settings with endpoint security policies in Microsoft …

    Manage antivirus settings with endpoint security policies in Microsoft Intune Configure and deploy policies and use reports for devices you manage with endpoint security antivirus policy in Microsoft Intune.

    Listed under 27 Jul – 2 Aug 2026 on Microsoft Learn
15. New feature

    Collect Windows registry data with the properties catalog

    Microsoft Intune now lets you collect Windows registry data through the properties catalog. When you create a device inventory policy, you can define specific registry keys and values to collect from enrolled Windows devices, including a single value…

    DocsCollect Device Properties With Intune Properties CatalogUpdated

    Collect Device Properties With Intune Properties Catalog Use Microsoft Intune properties catalog to collect device properties—including hardware, registry values, and security signals—from Windows devices.

    Listed under 27 Jul – 2 Aug 2026 on Microsoft Learn
16. New feature

    APP Multiple Managed Accounts

    Microsoft Intune mobile application management now extends support for Multiple Managed Accounts to Microsoft Outlook on iOS/iPadOS (v5.2626.0 or later), letting users add and manage more than one managed account within the same app. Note This feature is…

    DocsMultiple Managed Accounts for App Protection Policies

    Multiple Managed Accounts for App Protection Policies Learn how the Multiple Managed Accounts (MMA) feature in Microsoft Intune MAM enables users to manage more than one work or school account within a single app.

    Listed under 13–19 Jul 2026 on Microsoft Learn Roadmap 109560

1. GA

   Updated security baseline for Microsoft 365 Apps for Enterprise

   An updated security baseline for Microsoft 365 Apps for Enterprise is now available in Microsoft Intune. This baseline aligns with the most recent Microsoft 365 Apps security guidance and includes updated policy recommendations to help protect against evolving…

   DocsList of settings for the Microsoft 365 Apps for Enterprise security …·Configure security baseline policies in Microsoft Intune·Post Security Baseline for M365 Apps for enterprise v2512

   List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune View a list of the settings in the Microsoft Intune security baseline for Microsoft Office apps. This list includes the default values for settings as found in the default configuration of the baseline.

   Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
2. New feature

   Support for WPA3-Personal in iOS/iPadOS Wi-Fi profiles

   Intune supports WPA3-Personal as a security-type option when configuring Wi-Fi device configuration profiles for iOS/iPadOS. Admins can now select WPA3-Personal alongside existing options such as WPA2-Personal. This feature: Allows managed iOS/iPadOS devices to connect to networks that require…

   DocsConfigure Wi-Fi Settings for Apple Devices in Intune

   Configure Wi-Fi Settings for Apple Devices in Intune Add or create a Wi-Fi configuration profile on iOS/iPadOS and macOS devices using Wi-Fi configuration settings in Microsoft Intune. Configure the connection details, authentication methods, SSIDs, security types, and proxy settings.

   Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
3. New feature

   Remote Help support for RemoteApp in Azure Virtual Desktop

   Remote Help supports RemoteApp in Azure Virtual Desktop (AVD), enabling help desk agents to securely view and control apps running within RemoteApp sessions. For more information, see Launch Remote Help .

   DocsUsing Remote Help on Windows to Assist Authenticated Users

   Using Remote Help on Windows to Assist Authenticated Users Use the Remote Help app to provide remote assistance to authenticated users who also run the Remote Help app, and to troubleshoot for frontline workers (FLW).

   Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
4. GA

   Newly available protected app for Intune

   ChatGPT is now available as a protected app for Microsoft Intune. For more information about protected apps, see Microsoft Intune protected apps .

   DocsSupported Microsoft Intune AppsUpdated

   Supported Microsoft Intune Apps This article provides lists of support partner and Microsoft apps that are commonly used with Microsoft Intune.

   Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
5. New feature

   New supported OEMConfig apps for Android Enterprise

   The following OEMConfig apps are available in Intune for Android Enterprise: FCNT | com.fcnt.arrowsconfig FCNT | com.fcnt.arrowsconfig_test For more information about OEMConfig, see Use and manage Android Enterprise devices with OEMConfig in Microsoft Intune . Applies to: Android…

   DocsUse OEMConfig on Android Enterprise devices in Microsoft IntuneNew

   Use OEMConfig on Android Enterprise devices in Microsoft Intune Use Microsoft Intune to manage and use devices running Android Enterprise with OEMConfig. See all the steps, including an overview, see the prerequisites, create the configuration profile in Intune, and see a list of supported OEMConfig apps.

   Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
6. New feature

   New setting added to the Windows security baseline version 25H2

   The Intune security baseline for Windows, version 25H2, is updated to include one new setting, Disable Internet Explorer 11 Launch Via COM Automation , with a baseline default of Enabled . This setting was excluded from the version…

   DocsDefault configuration of Intune's Windows security baselinesNew

   Default configuration of Intune's Windows security baselines Review the default settings in each Microsoft Intune Windows security baseline version and compare recommended configurations for managed devices.

   Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
7. New feature

   New Microsoft Defender Antivirus settings for Linux Server devices

   The existing endpoint security Antivirus policy for the Microsoft Defender Antivirus profile on Linux Server now includes new settings you can configure and deploy to your managed Linux devices: Offline security intelligence update - Manage how Microsoft Defender…

   DocsLearn about using Intune to manage Microsoft Defender settings on …Updated·Configure security settings in Microsoft Defender for Endpoint on …Updated·Manage antivirus settings with endpoint security policies in Microsoft …

   Learn about using Intune to manage Microsoft Defender settings on devices that aren't enrolled with Intune Learn how to use Intune policy to manage Microsoft Defender security settings on devices that aren't enrolled with Microsoft Intune.

   Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
8. New feature

   New Android Enterprise settings in the Intune settings catalog

   The settings catalog lists all the settings you can configure in a device policy, and all in one place. The following new Android Enterprise settings are available in the Microsoft Intune settings catalog ( Devices > Manage devices…

   DocsAndroid settings catalog in Microsoft Intune

   Android settings catalog in Microsoft Intune Review Android settings available in the Microsoft Intune settings catalog, including supported enrollment types, values, defaults, and requirements.

   Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
9. New feature

   Microsoft Tunnel adds support for Red Hat Enterprise Linux 9.7

   Microsoft Tunnel Gateway now supports Red Hat Enterprise Linux (RHEL) 9.7 as a Linux server distribution. This support requires the use of Podman 5.8.2 as its default container engine. Customers upgrading from environments using Podman v3 containers should…

   DocsPrerequisites the Microsoft Tunnel VPN for Microsoft IntuneNew

   Prerequisites the Microsoft Tunnel VPN for Microsoft Intune Review the prerequisites for installation and use of the Microsoft Tunnel Gateway. These include Linux servers, network, and firewall configurations.

   Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
10. New feature

    Intune support for Trustd Mobile as a mobile threat defense partner

    You can now use Trustd Mobile as a mobile threat defense partner (MTD) for enrolled devices that run the following platforms: Android 9.0 and later iOS/iPadOS 15.0 and later To learn more about this support, see Use Trustd…

    DocsTrustd Mobile Threat Defense with Microsoft Intune

    Trustd Mobile Threat Defense with Microsoft Intune Set up Trustd Mobile Threat Defense with Microsoft Intune to control mobile device access to your corporate resources.

    Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
11. New feature

    Enterprise App Management support for GCC High and DoD

    Microsoft Intune now extends Enterprise App Management (EAM) to the GCC High (GCCH) and DoD cloud environments. Government organizations can use the EAM enterprise catalog to discover, deploy, and keep prepackaged Microsoft and third-party apps up to date…

    DocsMicrosoft Intune Enterprise Application ManagementNew

    Microsoft Intune Enterprise Application Management Learn about Enterprise App Management and the Enterprise App Catalog in Microsoft Intune.

    Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
12. New feature

    Available macOS PKG apps update automatically when you upload a new version

    For available macOS PKG apps, updates now deploy to devices automatically when the same app policy was updated with a new app version, so users no longer need to select Install or Reinstall in Company Portal to get…

    DocsAdd an Unmanaged macOS PKG App to Microsoft IntuneUpdated

    Add an Unmanaged macOS PKG App to Microsoft Intune Learn about how to add an unmanaged macOS PKG app to Microsoft Intune.

    Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
13. New feature

    Auto-update for Enterprise App Management applications

    Microsoft Intune now supports automatic updates for Enterprise App Management (EAM) applications. When you enable auto-update for an EAM app with a required assignment, Intune detects when a newer version is available in the EAM catalog and automatically…

    DocsMicrosoft Intune Enterprise Application ManagementNew

    Microsoft Intune Enterprise Application Management Learn about Enterprise App Management and the Enterprise App Catalog in Microsoft Intune.

    Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn
14. New feature

    Advanced Intune capabilities are being added to Microsoft 365 E3 and E5

    Microsoft is adding several Intune Suite capabilities to Microsoft 365 E3 and Microsoft 365 E5 to enable more organizations to use advanced endpoint management and security without a separate add-on. The following capabilities are added to Microsoft Enterprise…

    DocsMicrosoft Intune Government Service overviewNew·Microsoft Intune advanced capabilities·Post Microsoft 365 adds advanced Microsoft Intune solutions at scale

    Microsoft Intune Government Service overview Learn more about the Intune government service offerings and features. This article is designed to serve as an overview of the Microsoft Intune offering for government community cloud (GCC) High and United States Department of Defense (DoD) environments.

    Listed under 29 Jun – 5 Jul 2026 on Microsoft Learn Related post
15. New feature

    Multi Admin Approval now enforces on API calls made by automation

    Multi Admin Approval (MAA) now applies to API calls made by automation through the Microsoft Graph API, not just interactive admin actions. If your tenant has MAA access policies configured and you use service principals, automation scripts, or…

    DocsUse Multi Admin Approval with the Microsoft Graph API

    Use Multi Admin Approval with the Microsoft Graph API Learn how to update your automation scripts and applications to work with Multi Admin Approval enforcement on app-authenticated API calls in Microsoft Intune.

    Listed under 22–28 Jun 2026 on Microsoft Learn
16. New feature

    Microsoft Intune app for Android requires version 2025.11.01 or later

    The minimum supported version of the Microsoft Intune app for Android is now version 2025.11.01 . This change took effect on May 1, 2026. Users running an older version might experience sign-in failures. Most users have app updates…

    Listed under 22–28 Jun 2026 on Microsoft Learn
17. New feature

    Microsoft Windows 11 STIG SCAP Benchmark audit baseline

    Intune now includes a STIG audit baseline that assesses Windows devices against the recommended configurations defined in the Security Technical Implementation Guides (STIGs) published by the Defense Information Systems Agency (DISA). The initial baseline audits against the Microsoft…

    DocsMicrosoft Intune Government Service overviewNew·Use Security Technical Implementation Guide audit baselines to assess …New·Advanced Analytics Overview

    Microsoft Intune Government Service overview Learn more about the Intune government service offerings and features. This article is designed to serve as an overview of the Microsoft Intune offering for government community cloud (GCC) High and United States Department of Defense (DoD) environments.

    Listed under 15–21 Jun 2026 on Microsoft Learn
18. New feature

    Managed Win32 app content now requires HTTPS delivery

    Intune now requires HTTPS delivery for managed Win32 app content. This change primarily affects organizations that use Microsoft Connected Cache and haven't configured their cache nodes for HTTPS delivery. Clients that previously pulled content from Connected Cache can…

    DocsPost How to enable HTTPS support for Microsoft Connected Cache for …·HTTPS Support for Microsoft Connected Cache Overview·Configure HTTPS Support for Windows·Configure HTTPS Support for Linux

    How to enable HTTPS support for Microsoft Connected Cache for Enterprise and Education By: Aditya Middha | Product Manager 2 - Microsoft Connected Cache Starting on June 16th, 2026, or soon after, Intune will enforce HTTPS content delivery...

    Listed under 15–21 Jun 2026 on Microsoft Learn
19. Preview

    Improvements to the new Intune single device page (preview)

    In the Intune admin center, the Devices > All Devices > select a device page is redesigned and available for you to preview. This feature was available in the 2604 service release . After the initial 2604 release…

    DocsWhat's new in previous months in the Microsoft IntuneNew·Use Multi Admin Approval in Intune

    What's new in previous months in the Microsoft Intune Review older announcements from the Intune what's new page

    Listed under 15–21 Jun 2026 on Microsoft Learn
20. GA

    Enrollment time grouping for new Apple ADE enrollment policies generally available

    Enrollment time grouping is now generally available for Apple automated device enrollment (ADE) on iOS/iPadOS and macOS. With enrollment time grouping, you can identify a device's Microsoft Entra security group during enrollment, so policies, apps, and settings can…

    DocsSet up enrollment time grouping·Post New iOS/iPadOS, visionOS, tvOS and macOS ADE enrollment policies …

    Set up enrollment time grouping Overview and setup of the enrollment time grouping feature in Microsoft Intune.

    Listed under 15–21 Jun 2026 on Microsoft Learn
21. New feature

    Android Enterprise personally owned devices with a work profile uses Android Management API (AMAPI)

    When users enroll their personally owned Android devices in Intune, a work profile is created with a separate partition on the device for the user's work account. These devices are referred to as personally owned devices with a…

    DocsPost New policy implementation and web enrollment for Android personally …Updated·Android Management API for personally owned work profiles

    New policy implementation and web enrollment for Android personally owned work profile is now GA We’re happy to announce two improvements for the management of Android personally owned work profile devices with Microsoft Intune, which is now generally...

    Listed under 15–21 Jun 2026 on Microsoft Learn
22. Preview

    Vulnerability Remediation Agent now uses Microsoft Entra agentic identity (preview)

    This feature is rolling out to tenants gradually and may take several weeks to become available in your environment. The Vulnerability Remediation Agent is now available to all customers in preview. Previously, the agent was available only to…

    DocsMicrosoft Entra Agent ID documentationUpdated·Vulnerability Remediation Agent Overview and Set Up

    Microsoft Entra Agent ID documentation Build, secure, and manage agent identities with Microsoft Entra Agent ID. Integrate AI agents with enterprise workflows, apply Zero Trust principles, and govern agent access at scale.

    Listed under 8–14 Jun 2026 on Microsoft Learn Action may be required
23. Deprecation

    Use DDM to manage Apple Intelligence settings on devices running 26.4 and later

    [Custom top bar elements on Managed Home Screen] With the release of 26.4, Apple deprecated several intelligence-related settings in the MDM restrictions payload. To manage these settings, use the DDM configurations released in March 2026 instead. In the settings catalog…

    DocsWhat's new in previous months in the Microsoft IntuneNew·Create a policy using settings catalog in Microsoft IntuneNew·Apple device restriction settings in Microsoft IntuneUpdated

    What's new in previous months in the Microsoft Intune Review older announcements from the Intune what's new page

    Listed under 8–14 Jun 2026 on Microsoft Learn
24. New feature

    Strict Tunnel Mode for Microsoft Tunnel on Android

    Microsoft Tunnel now supports Strict Tunnel Mode on Android Enterprise devices. When Strict Tunnel Mode is enabled, all network traffic is forced through the VPN tunnel. If the VPN connection is unavailable or drops, all network traffic on…

    DocsLearn about the Microsoft Tunnel VPN solution for Microsoft Intune

    Learn about the Microsoft Tunnel VPN solution for Microsoft Intune Learn about the Microsoft Tunnel Gateway, a VPN server for Intune that runs on Linux. With Microsoft Tunnel, cloud-based devices you manage with Intune can reach your on-premises infrastructure.

    Listed under 8–14 Jun 2026 on Microsoft Learn
25. New feature

    Silence apps on Managed Home Screen to prevent session PIN bypass

    [Custom top bar elements on Managed Home Screen] For devices using Managed Home Screen (MHS), you can now silence apps whenever MHS prompts the user for authentication, such as during sign-in or at the session PIN screen. When silenced, apps…

    DocsConfigure the Microsoft Managed Home Screen AppNew

    Configure the Microsoft Managed Home Screen App Learn how to configure the Microsoft Managed Home Screen app.

    Listed under 8–14 Jun 2026 on Microsoft Learn
26. GA

    Newly available protected apps for Intune

    The following protected apps are now available for Microsoft Intune: Caju AI by Caju AI eYACHO for Biz 7 Intune by MetaMoJi Corporation (iOS) eYACHO Viewer 7 Intune by MetaMoJi Corporation (iOS) Harvey AI by Harvey AI (Android)…

    DocsSupported Microsoft Intune AppsUpdated

    Supported Microsoft Intune Apps This article provides lists of support partner and Microsoft apps that are commonly used with Microsoft Intune.

    Listed under 8–14 Jun 2026 on Microsoft Learn
27. New feature

    New Wired Networks device configuration profile for iOS/iPadOS

    [Custom top bar elements on Managed Home Screen] There's a new 802.1x Wired Networks device configuration profile for iOS/iPadOS devices. The feature supports 802.1x Ethernet access controls, which is ideal for M-series iPads that support native resolution screen extension. It…

    DocsConfigure 802.1x wired network settings for Apple and Windows devices …

    Configure 802.1x wired network settings for Apple and Windows devices in Microsoft Intune Create or add a wired network device configuration profile or policy using the IEEE 802.1X standard for macOS, iOS/iPadOS, Windows 10, and Windows 11 devices and computers. See the different settings, add certificates, choose an EAP type, and select an…

    Listed under 8–14 Jun 2026 on Microsoft Learn
28. New feature

    New Microsoft Edge settings in the Windows settings catalog

    [Custom top bar elements on Managed Home Screen] There are new Microsoft Edge 148 settings in the Windows settings catalog. To see and configure these settings in Intune, create a Windows settings catalog profile ( Devices > Manage devices >…

    DocsMicrosoft Edge Browser Policy Documentation …New·Microsoft Edge Browser Policy Documentation DeveloperToolsAvailabilityNew·Microsoft Edge Browser Policy Documentation CopilotPageContextUpdated·Microsoft Edge Browser Policy Documentation SetNTPDefaultFeedTab

    Microsoft Edge Browser Policy Documentation DeveloperToolsAvailabilityBlocklist Windows and Mac documentation for supported Microsoft Edge Browser policy: List of URL patterns for which developer tools are blocked

    Listed under 8–14 Jun 2026 on Microsoft Learn
29. New feature

    New Block Bluetooth sharing setting in the Android Enterprise settings catalog

    [Custom top bar elements on Managed Home Screen] There's a new Block Bluetooth sharing setting in the settings catalog ( Devices > Manage devices > Configuration > Create > New policy > Android Enterprise for platform > Settings catalog for…

    DocsCreate a policy using settings catalog in Microsoft IntuneNew·Android settings catalog in Microsoft Intune

    Create a policy using settings catalog in Microsoft Intune Use settings catalog in Microsoft Intune to configure thousands of settings for Windows 10/11, iOS/iPadOS, macOS, and Android client devices, including Microsoft Office apps, Microsoft Edge, administrative templates (ADMX), and more. Add these settings in a device configuration profile to…

    Listed under 8–14 Jun 2026 on Microsoft Learn
30. New feature

    Managed Home Screen exit lock task mode password now requires a device configuration profile

    [Custom top bar elements on Managed Home Screen] You can no longer configure the Managed Home Screen exit lock task mode password by using an app configuration policy. To set or update the lock task mode password for Managed Home…

    DocsConfigure the Microsoft Managed Home Screen AppNew

    Configure the Microsoft Managed Home Screen App Learn how to configure the Microsoft Managed Home Screen app.

    Listed under 8–14 Jun 2026 on Microsoft Learn
31. New feature

    In-place renewal of Cloud PKI issuing certification authorities (CAs)

    Microsoft Intune now supports in-place renewal of eligible Cloud PKI issuing certification authorities (CAs). Previously, renewing an issuing CA required creating a new CA and manually updating dependent SCEP certificate profiles, which increased operational overhead and configuration risk…

    DocsRenew a Certificate Authority in Cloud PKI

    Renew a Certificate Authority in Cloud PKI Learn how to renew a certificate authority (CA) in Microsoft Cloud PKI to maintain continuous certificate issuance.

    Listed under 8–14 Jun 2026 on Microsoft Learn
32. New feature

    Grant enhanced security permissions to a Mobile Threat Defense app on Android

    A new Mobile Threat Defense role category is available on the Mobile Threat Defense connector configuration page in the Microsoft Intune admin center. The Grant MTD role permissions to <MTD partner name> on enrolled Android COBO and COPE…

    DocsEnable Mobile Threat Defense connector in Microsoft IntuneUpdated

    Enable Mobile Threat Defense connector in Microsoft Intune Enable the connector between your Mobile Threat Defense (MTD) partner and Microsoft Intune.

    Listed under 8–14 Jun 2026 on Microsoft Learn
33. Preview

    Detect and block Shadow AI using the properties catalog, device query, and a security baseline (preview)

    Using Intune, you can detect and block a Local AI Agent, like OpenClaw, on Windows devices enrolled in Intune. Specifically, you can: Use a Properties catalog policy to collect the Local AI Agent entity. Admins can use this…

    DocsCollect Device Properties With Intune Properties CatalogUpdated·Device Query for Multiple Devices·Settings list for the Local AI Agent Baseline - OpenClaw security …·Public preview overview in Microsoft Intune

    Collect Device Properties With Intune Properties Catalog Use Microsoft Intune properties catalog to collect device properties—including hardware, registry values, and security signals—from Windows devices.

    Listed under 8–14 Jun 2026 on Microsoft Learn
34. New feature

    APP Multiple Managed Accounts

    Microsoft Intune mobile application management now supports Multiple Managed Accounts, letting users add and manage more than one managed account within the same app. App protection policies apply separately to each account, so you can tailor protection based…

    DocsMultiple Managed Accounts for App Protection Policies

    Multiple Managed Accounts for App Protection Policies Learn how the Multiple Managed Accounts (MMA) feature in Microsoft Intune MAM enables users to manage more than one work or school account within a single app.

    Listed under 8–14 Jun 2026 on Microsoft Learn Roadmap 109560
35. New feature

    Remote Help for Windows updated with performance improvements

    The latest version of Remote Help for Windows (version 5.2.1037.0) includes general bug fixes and performance improvements to enhance reliability.

    Listed under 1–7 Jun 2026 on Microsoft Learn

1. New feature

   Intune RBAC roles have access to Copilot in Intune

   When Microsoft Intune is enabled as a data source in Security Copilot, by default: The Microsoft Entra ID Intune Administrator role automatically inherits Security Copilot owner access to Copilot in Intune. All the other built-in and custom…

   DocsSecurity Copilot in Intune features overview·Understand authentication in Microsoft Security Copilot

   Security Copilot in Intune features overview Microsoft Security Copilot in Intune is an AI platform. It can help you create policies, get information about existing policies, and show more details on specific settings, including their impacts on users and devices. You can also use Copilot to…

   Listed under 26 May – 1 Jun 2026 on Microsoft Learn
2. New feature

   Guidance for device-reported values in compliance reports

   We updated documentation to clarify how to interpret device-reported values in compliance reports. Some compliance reports include a Setting column with values reported directly by the device, providing additional context for noncompliance in scenarios such as custom compliance…

   DocsMonitor results of your device compliance policies in Microsoft Intune

   Monitor results of your device compliance policies in Microsoft Intune Use the device compliance dashboard to understand overall device compliance the per policy and per setting device compliance results.

   Listed under 18–24 May 2026 on Microsoft Learn
3. New feature

   Complete Platform SSO registration during macOS Automated Device Enrollment

   On macOS devices enrolled with Automated Device Enrollment (ADE), you can run Platform SSO during device registration. Before you enroll, you: Create an Intune settings catalog policy and configure the Enable Registration During Setup setting. Deploy the Company…

   DocsCreate a policy using settings catalog in Microsoft IntuneNew·Add Platform SSO policy to ADE Profile on macOS devices

   Create a policy using settings catalog in Microsoft Intune Use settings catalog in Microsoft Intune to configure thousands of settings for Windows 10/11, iOS/iPadOS, macOS, and Android client devices, including Microsoft Office apps, Microsoft Edge, administrative templates (ADMX), and more. Add these settings in a device configuration profile to…

   Listed under 11–17 May 2026 on Microsoft Learn Related post
4. New feature

   How does this change affect you or your users?

   [Intune moving to support Android 10 and later for user-based management methods in October 2024] For user-based management methods (as listed above), Android devices running Android 9 or earlier won't be supported. For devices on unsupported Android OS versions: Intune…

   Listed under 4–10 May 2026 on Microsoft Learn
5. New feature

   How does this change affect you or your users?

   [Plan for Change: Implement strong mapping for SCEP and PKCS certificates] These changes will affect SCEP and PKCS certificates delivered by Intune for Microsoft Entra hybrid joined users or devices. If a certificate can't be strongly mapped, authentication will be…

   DocsPost Support tip: Implementing strong mapping in Microsoft Intune …

   Support tip: Implementing strong mapping in Microsoft Intune certificates Learn more about implementing strong mapping in Microsoft Intune certificates.

   Listed under 4–10 May 2026 on Microsoft Learn Action may be required
6. New feature

   How does this change affect you or your users?

   [Plan for change: Intune is moving to support macOS 15 and higher later this year] This change only affects you if you currently manage, or plan to manage, macOS devices with Intune. If your users have likely already upgraded their…

   Listed under 4–10 May 2026 on Microsoft Learn Action may be required
7. New feature

   How does this change affect you or your users?

   [Plan for Change: Intune is moving to support iOS/iPadOS 18 and later] If you're managing iOS/iPadOS devices, you might have devices that won't be able to upgrade to the minimum supported version (iOS 18/iPadOS 18). Given that Microsoft 365 mobile…

   Docsthis statement about ADE Userless support

   Listed under 4–10 May 2026 on Microsoft Learn Action may be required
8. New feature

   How does this change affect you or your users?

   [Plan for Change: New settings for Apple AI features; Genmojis, Writing tools, Screen capture] If you configured the APP "Send Org data to other apps" setting to a value other than "All apps", then the new "Genmoji", "Writing Tools" and…

   DocsiOS/iPadOS App Protection Policy Settings

   iOS/iPadOS App Protection Policy Settings This article describes the iOS/iPadOS app protection policy (APP) settings for iOS/iPadOS devices.

   Listed under 4–10 May 2026 on Microsoft Learn Action may be required
9. New feature

   How does this change affect you or your users?

   [Update to the latest Intune App SDK and Intune App Wrapper for Android 15 support] If you have applications using the Intune App SDK or Intune App Wrapping Tool for Android, it's recommended that you update your app to the…

   Listed under 4–10 May 2026 on Microsoft Learn
10. New feature

    How does this change affect you or your users?

    [Warning notifications for iOS apps running unsupported SDK versions] Users running iOS apps with an Intune MAM SDK version lower than 20.8.0 will see a warning message. The warning will appear in iOS apps such as Microsoft Teams, Outlook, Edge…

    Listed under 4–10 May 2026 on Microsoft Learn
11. New feature

    How does this change affect you or your users?

    [Update firewall configurations to include new Intune network endpoints] If you've configured an outbound traffic policy for Intune IP address ranges or Azure service tags for your firewalls, routers, proxy servers, client-based firewalls, VPN, or network security groups, you'll need…

    Listed under 4–10 May 2026 on Microsoft Learn
12. New feature

    How does this change affect you or your users?

    [Plan for Change: Blocking screen capture in the latest Intune App SDK for iOS and Intune App Wrapping Tool for iOS] For apps that have updated to the latest Intune App SDK or Intune App Wrapping Tool versions screen capture…

    DocsConfiguration Policies for Intune App SDK Managed Apps

    Configuration Policies for Intune App SDK Managed Apps Learn how to configure policies for Intune App SDK managed apps.

    Listed under 4–10 May 2026 on Microsoft Learn Action may be required
13. New feature

    How does this change affect you or your users?

    [Update to the latest Intune Company Portal for Android, Intune App SDK for iOS, and Intune App Wrapper for iOS] If your users haven't updated to the latest Microsoft or third-party app protection supported apps, they'll be blocked from launching…

    Listed under 4–10 May 2026 on Microsoft Learn
14. New feature

    How does this change affect you or your users?

    [Plan for change: User alerts on iOS for when screen capture actions are blocked] If APP has been configured to block screen capturing, users see an alert indicating that screen capture actions are blocked by their organization when they attempt…

    Listed under 4–10 May 2026 on Microsoft Learn Action may be required
15. New feature

    How does this change affect you or your users?

    [Update to support statement for Windows 10 in Intune] Microsoft Intune continues to maintain core management functionality for Windows 10, including: Continuity of device management. Support for updates and migration workflows to Windows 11. Ability for ESU customers to deploy…

    Listed under 4–10 May 2026 on Microsoft Learn
16. New feature

    How does this change affect you or your users?

    [Plan for Change: Google Play strong integrity definition update for Android 13 or above] If you have targeted users with app protection policies and/or compliance policies that are using devices running Android 13 or above without a security update in…

    Listed under 4–10 May 2026 on Microsoft Learn Action may be required
17. New feature

    How does this change affect you or your users?

    [Plan for Change: New Intune connector for deploying Microsoft Entra hybrid joined devices using Windows Autopilot] If you have Microsoft Entra hybrid joined devices using Windows Autopilot, you need to transition to the new connector to continue deploying and managing…

    Listed under 4–10 May 2026 on Microsoft Learn Action may be required
18. New feature

    How can you prepare?

    [Plan for Change: Google Play strong integrity definition update for Android 13 or above] Review and update your policies as needed. Ensure users with devices running Android 13 or above are receiving timely security updates. You can use the app…

    DocsHow to Monitor App Protection Policies·Android App Protection Policy Settings·Android Enterprise compliance settings in Microsoft Intune

    How to Monitor App Protection Policies This article describes how to monitor app protection policies in Intune.

    Listed under 4–10 May 2026 on Microsoft Learn Action may be required
19. New feature

    How can you prepare?

    [Plan for Change: New Intune connector for deploying Microsoft Entra hybrid joined devices using Windows Autopilot] Update your environment to the new connector by following these steps: Download and install the new connector in the Intune admin center. Sign in…

    DocsEnrollment for Microsoft Entra hybrid joined devicesNew·Microsoft Intune Connector for Active Directory security update

    Enrollment for Microsoft Entra hybrid joined devices Use Windows Autopilot to enroll Microsoft Entra hybrid joined devices in Microsoft Intune.

    Listed under 4–10 May 2026 on Microsoft Learn Action may be required
20. New feature

    How can you prepare?

    [Warning notifications for iOS apps running unsupported SDK versions] Notify users to update to the latest versions of Microsoft and third-party apps as soon as possible. The latest versions are available in Apple's App store . For example, you can…

    DocsiOS/iPadOS App Protection Policy Settings

    iOS/iPadOS App Protection Policy Settings This article describes the iOS/iPadOS app protection policy (APP) settings for iOS/iPadOS devices.

    Listed under 4–10 May 2026 on Microsoft Learn
21. New feature

    How can you prepare?

    [Plan for change: Intune is moving to support macOS 15 and higher later this year] Check your Intune reporting to see what devices or users might be affected. Go to Devices > All devices and filter by macOS. You can…

    Listed under 4–10 May 2026 on Microsoft Learn Action may be required
22. New feature

    How can you prepare?

    [Plan for Change: New settings for Apple AI features; Genmojis, Writing tools, Screen capture] Review and update your app protection policies if you'd like more granular controls for blocking or allowing specific AI features. ( Apps > Protection > select…

    Listed under 4–10 May 2026 on Microsoft Learn Action may be required
23. New feature

    How can you prepare?

    [Update to the latest Intune App SDK and Intune App Wrapper for Android 15 support] If you choose to build apps targeting Android API 35, you need to adopt the new version of the Intune App SDK for Android (v11.0.0)…

    DocsIntune App SDK for Android·Intune App Wrapping Tool for Android

    Listed under 4–10 May 2026 on Microsoft Learn Action may be required
24. New feature

    How can you prepare?

    [Update to the latest Intune Company Portal for Android, Intune App SDK for iOS, and Intune App Wrapper for iOS] Plan to make the following changes before January 19, 2026 : For apps using the Intune App SDK, you must…

    DocsConditional Access - Require approved app or app protection policyUpdated·v20.8.0 - Release 20.8.0 - microsoftconnect/ms-intune-app-sdk-ios | …·v21.1.0 - Release 21.1.0 - microsoftconnect/ms-intune-app-sdk-ios | …·v20.8.1 - Release 20.8.1 - …

    Conditional Access - Require approved app or app protection policy Create a custom Conditional Access policy require approved app or app protection policy

    Listed under 4–10 May 2026 on Microsoft Learn Action may be required
25. New feature

    How can you prepare?

    [Plan for Change: Implement strong mapping for SCEP and PKCS certificates] If you use SCEP or PKCS certificates for Microsoft Entra Hybrid joined users or devices, you'll need to take action before February 11, 2025 to either: (Recommended) Enable strong…

    DocsPost Support tip: Implementing strong mapping in Microsoft Intune …·KB5014754

    Support tip: Implementing strong mapping in Microsoft Intune certificates Learn more about implementing strong mapping in Microsoft Intune certificates.

    Listed under 4–10 May 2026 on Microsoft Learn Action may be required
26. New feature

    How can you prepare?

    [Intune moving to support Android 10 and later for user-based management methods in October 2024] Notify your helpdesk, if applicable, about this updated support statement. The following admin options are available to help warn or block users: Configure a conditional…

    DocsManage device operating system versions with IntuneUpdated·Android App Protection Policy Settings

    Manage device operating system versions with Intune Learn about the methods for managing device operating system versions supported by Microsoft Intune.

    Listed under 4–10 May 2026 on Microsoft Learn
27. New feature

    How can you prepare?

    [Plan for Change: Blocking screen capture in the latest Intune App SDK for iOS and Intune App Wrapping Tool for iOS] Review your app protection policies and if needed, create a Managed apps app configuration policy to allow screen capture…

    DocsConfiguration Policies for Intune App SDK Managed Apps·iOS/iPadOS App Protection Policy Settings·App Configuration Policies for Microsoft Intune

    Configuration Policies for Intune App SDK Managed Apps Learn how to configure policies for Intune App SDK managed apps.

    Listed under 4–10 May 2026 on Microsoft Learn Action may be required
28. New feature

    How can you prepare?

    [Update to support statement for Windows 10 in Intune] Use the All devices report in the Intune admin center to identify devices still running Windows 10 and upgrade eligible devices to Windows 11. If devices cannot be upgraded in time…

    Listed under 4–10 May 2026 on Microsoft Learn
29. New feature

    How can you prepare?

    [Update firewall configurations to include new Intune network endpoints] Ensure that your firewall rules are updated and added to your firewall's allowlist with the other IP addresses documented under Azure Front Door by December 2, 2025 . Alternatively, you can…

    DocsAzure service tags overviewNew·Network endpoints for Microsoft IntuneUpdated·Secure traffic to origins·Network endpoints for US government deployments

    Azure service tags overview Learn about Azure service tags and how they simplify security rule creation for Azure Virtual Networks. Discover benefits and best practices.

    Listed under 4–10 May 2026 on Microsoft Learn
30. New feature

    How can you prepare?

    [Plan for change: User alerts on iOS for when screen capture actions are blocked] Update your IT admin documentation and notify your helpdesk or users as needed. You can learn more about blocking screen capture in the blog: New block…

    DocsNew block screen capture for iOS/iPadOS MAM protected apps

    Listed under 4–10 May 2026 on Microsoft Learn Action may be required
31. New feature

    How can you prepare?

    [Plan for Change: Intune is moving to support iOS/iPadOS 18 and later] Check your Intune reporting to see what devices or users might be affected. For devices with mobile device management (MDM), go to Devices > All devices and filter…

    DocsManage device operating system versions with IntuneUpdated

    Manage device operating system versions with Intune Learn about the methods for managing device operating system versions supported by Microsoft Intune.

    Listed under 4–10 May 2026 on Microsoft Learn Action may be required
32. New feature

    Enhanced app inventory with faster data updates

    Intune enhanced app inventory brings faster, more detailed visibility into the apps in your environment to support identification of outdated or risky software. Improved data freshness and richer app metadata provide clearer insight into installed applications, while…

    DocsWhat's new in previous months in the Microsoft IntuneNew

    What's new in previous months in the Microsoft Intune Review older announcements from the Intune what's new page

    Listed under 4–10 May 2026 on Microsoft Learn
33. Retirement

    Additional information

    [Update to support statement for Windows 10 in Intune] Stay secure with Windows 11, Copilot+ PCs, and Windows 365 before support ends for Windows 10 Windows 10 reaching end of support Enable Extended Security Updates (ESU) Windows 10 release information…

    DocsWindows 10 - release informationNew·Windows 11 - release informationNew·Stay secure with Windows 11, Copilot+ PCs, and Windows 365 before …·Windows 10 reaching end of support

    Windows 10 - release information Learn release information for Windows 10 releases

    Listed under 4–10 May 2026 on Microsoft Learn

1. GA

   Updated security baseline for Microsoft Edge v139

   Microsoft Edge version 139 security baseline is now available in Microsoft Intune. This baseline reflects current Microsoft security recommendations for the Microsoft Edge browser and is the latest available Edge security baseline in Intune. The Edge v139 security…

   DocsConfigure security baseline policies in Microsoft Intune·Post Security baseline for Microsoft Edge version 139·Settings list for the Microsoft Edge security baseline in Intune

   Configure security baseline policies in Microsoft Intune Deploy security baselines that establish a default and recommended security postures on Windows devices you manage with Microsoft Intune.

   Listed under 27 Apr – 3 May 2026 on Microsoft Learn
2. New feature

   Updated minimum version for Intune Management Extension on Windows

   Windows devices managed by Intune need to run Intune Management Extension version 1.58.103.0 or later. Devices on earlier versions no longer receive configurations or updates that depend on the Intune Management Extension, including Win32 app deployments, PowerShell scripts…

   Listed under 27 Apr – 3 May 2026 on Microsoft Learn
3. New feature

   Support for Ubuntu 26.04 LTS

   Microsoft Intune now supports Ubuntu 26.04 LTS. Support for Ubuntu 22.04 LTS ends in August 2026. Devices already enrolled on Ubuntu 22.04 remain enrolled, but you should notify users to upgrade to a supported Ubuntu version. You can…

   DocsLinux device enrollment guide for Microsoft Intune

   Linux device enrollment guide for Microsoft Intune Enroll Linux devices in Intune using the Intune app. Set an overview of the administrator and end user tasks to enroll devices.

   Listed under 27 Apr – 3 May 2026 on Microsoft Learn
4. Preview

   Preview the new device page in the Intune admin center (preview)

   In the Intune admin center, when you go to Devices > All Devices and select a device, you can see device-specific info, like device properties. This page is redesigned and is available for you to preview. To enable…

   DocsMicrosoft Intune admin center

   Listed under 27 Apr – 3 May 2026 on Microsoft Learn
5. GA

   Newly available protected apps for Intune

   The following protected apps are now available for Microsoft Intune: Harvey AI by Harvey AI Corporation (iOS) Continia Expense App by Continia Software A/S For more information about protected apps, see Microsoft Intune protected apps .

   DocsSupported Microsoft Intune AppsUpdated

   Supported Microsoft Intune Apps This article provides lists of support partner and Microsoft apps that are commonly used with Microsoft Intune.

   Listed under 27 Apr – 3 May 2026 on Microsoft Learn
6. New feature

   New remote actions to suspend and restore Managed Home Screen on Android devices

   Intune has two new remote actions that allow admins to temporarily suspend and restore Managed Home Screen (MHS) on Android devices. These actions let users exit MHS and access the device's default launcher for a defined period, without…

   DocsDevice Action: Suspend Managed Home ScreenUpdated·Device Action: Restore Managed Home ScreenUpdated

   Device Action: Suspend Managed Home Screen Learn how to suspend the Managed Home Screen with Microsoft Intune.

   Listed under 27 Apr – 3 May 2026 on Microsoft Learn
7. New feature

   Microsoft Intune supports userless ADE for visionOS and tvOS devices

   Microsoft Intune has added support for userless Apple automated device enrollment (ADE) for visionOS and tvOS devices, enabling you to enroll and manage Apple Vision Pro and Apple TV through Apple Business Manager or Apple School Manager. This…

   DocsOverview of Apple Automated Device Enrollment for iOS/iPadOS in IntuneNew·Create a policy using settings catalog in Microsoft IntuneNew·Device Actions - Wipe, Lock, Locate, and MoreNew

   Overview of Apple Automated Device Enrollment for iOS/iPadOS in Intune Learn about automated device enrollment (ADE) for Apple mobile devices in Microsoft Intune, including supported scenarios, key features, and how to get started.

   Listed under 27 Apr – 3 May 2026 on Microsoft Learn
8. New feature

   Expanded support for Endpoint Privilege Management support approved elevation requests

   Intune's Endpoint Privilege Management (EPM) now supports support approved elevation requests from all users of a device. This update expands the utility of support approved file elevations and helps to improve scenarios that involve shared devices. Previously, file…

   DocsUse EPM support approvals for file elevation requests with Intune

   Use EPM support approvals for file elevation requests with Intune Manage support approvals for elevation requests when you use Endpoint Privilege Management for Microsoft Intune.

   Listed under 27 Apr – 3 May 2026 on Microsoft Learn
9. New feature

   Direct Android line-of-business app management

   You can now manage Android line-of-business (LOB) apps directly in Microsoft Intune without publishing them to Managed Google Play on Android Enterprise corporate-owned fully managed (COBO) and dedicated (COSU) devices. With direct LOB app management, admins can upload…

   DocsAdd an Android Line-of-Business App to Microsoft Intune

   Add an Android Line-of-Business App to Microsoft Intune Learn about how to add a Android line-of-business (LOB) app to Microsoft Intune.

   Listed under 27 Apr – 3 May 2026 on Microsoft Learn
10. New feature

    Configure credential manager permissions for Android Enterprise devices

    You can now control which applications act as system-level credential providers on managed Android Enterprise devices running Android 14 and higher. Credential providers are responsible for password autofill and passkey storage. To configure credential manager permissions, go to…

    DocsConfigure Managed Android Apps with Microsoft IntuneNew

    Configure Managed Android Apps with Microsoft Intune Use Microsoft Intune app configuration policies to supply settings to Managed Google Play, Android LOB, and AOSP referenced apps on managed devices.

    Listed under 27 Apr – 3 May 2026 on Microsoft Learn
11. Preview

    Change Review Agent suggestions available inline in Multi Admin Approval (preview)

    The Change Review Agent now provides risk-based recommendations directly in the Multi Admin Approval experience for Windows PowerShell scripts. On the My requests and All requests tabs, a new Agent Response column displays when a suggestion is available…

    DocsUse Multi Admin Approval in Intune·Change Review Agent Overview

    Use Multi Admin Approval in Intune Configure Multi Admin Approval to protect your tenant against the use of compromised administrative accounts in Intune.

    Listed under 27 Apr – 3 May 2026 on Microsoft Learn
12. New feature

    Block location setting for Android Enterprise can keep Location services enabled

    On Android Enterprise devices, you can use the General > Block location in the settings catalog to disable the location services on the device and prevent users from turning it on. This setting is now called Location and…

    DocsAndroid settings catalog in Microsoft Intune

    Android settings catalog in Microsoft Intune Review Android settings available in the Microsoft Intune settings catalog, including supported enrollment types, values, defaults, and requirements.

    Listed under 27 Apr – 3 May 2026 on Microsoft Learn
13. New feature

    Autopatch update risk visibility report

    The Autopatch update risk visibility report extends the security update status dashboard with granular insight into patch compliance and risk across your managed devices. It classifies devices as Current , Exposed , or Critical and highlights policies contributing…

    DocsProtect your estate: Reassess your Windows update policies

    Listed under 27 Apr – 3 May 2026 on Microsoft Learn
14. New feature

    Access management for Apple services

    You can now use Apple access management settings in Apple Business Manager and Apple School Manager to configure service access for Apple accounts on organization-owned devices. These controls let you choose what devices users can sign in to…

    DocsConfigure Apple account service access

    Configure Apple account service access Use Apple access management settings to control how Apple accounts are used on organization‐owned devices managed by Microsoft Intune.

    Listed under 27 Apr – 3 May 2026 on Microsoft Learn
15. New feature

    New reporting considerations for compliance policies

    New guidance has been added to the Microsoft Intune compliance policy reporting documentation to help explain how device compliance results appear in Intune reports. This update clarifies expected reporting behavior related to device check-in timing and user association…

    DocsMonitor results of your device compliance policies in Microsoft Intune

    Monitor results of your device compliance policies in Microsoft Intune Use the device compliance dashboard to understand overall device compliance the per policy and per setting device compliance results.

    Listed under 20–26 Apr 2026 on Microsoft Learn
16. Retirement

    Intune Data Warehouse (beta) connector retirement in Power BI

    The Intune Data Warehouse (beta) connector v1 in Power BI is retired. If you use Power BI reports that rely on this connector, you need to transition to Intune connector v2 or the OData Feed connector before…

    DocsUse the Intune Data Warehouse

    Use the Intune Data Warehouse Use the Intune Data Warehouse to build reports that provide insight into your enterprise mobile environment.

    Listed under 20–26 Apr 2026 on Microsoft Learn
17. New feature

    Support for Android XR devices

    Microsoft Intune now supports management of Android XR devices using Android Enterprise dedicated and fully managed enrollment modes. You can enroll Android XR devices, deploy apps through managed Google Play, and apply core security and compliance policies. Android…

    DocsPost Microsoft Intune announces Android Enterprise management support for …

    Microsoft Intune announces Android Enterprise management support for Android XR Microsoft Intune now supports the Android XR platform, including management of the Samsung Galaxy XR headset, built on Android XR platform.

    Listed under 6–12 Apr 2026 on Microsoft Learn
18. New feature

    New TeamViewer connector experience in Microsoft Intune

    There is a new TeamViewer integration in Microsoft Intune that simplifies onboarding and improves reliability for remote assistance workflows. The new connector replaces the existing TeamViewer connector experience and provides a more streamlined experience in the Intune admin…

    DocsUse the latest TeamViewer integration in Microsoft IntuneUpdated

    Use the latest TeamViewer integration in Microsoft Intune Learn how to use the latest TeamViewer integration in Microsoft Intune to initiate remote assistance sessions for managed devices.

    Listed under 6–12 Apr 2026 on Microsoft Learn Action may be required

1. New feature

   Support for system proxy settings in endpoint analytics and Advanced Analytics

   Devices configured with system-level (WinHTTP) proxy settings can now send telemetry to endpoint analytics and Advanced Analytics, enabling more comprehensive reporting. Endpoint Privilege Management (EPM) will also include elevation usage data from these devices. No admin action…

   DocsNetsh.exe commands - Win32 apps

   Netsh.exe commands - Win32 apps You can use commands in the netsh winhttp context to configure proxy and tracing settings for Windows HTTP.

   Listed under 30 Mar – 5 Apr 2026 on Microsoft Learn
2. New feature

   Support for Red Hat Enterprise Linux 9 and later

   Microsoft Intune supports Red Hat Enterprise Linux (RHEL) 9 LTS and RHEL 10 LTS. Support for RHEL 8 LTS will end in July 2026. Devices already enrolled on RHEL 8 will remain enrolled. You can identify devices running…

   DocsLinux device enrollment guide for Microsoft Intune

   Linux device enrollment guide for Microsoft Intune Enroll Linux devices in Intune using the Intune app. Set an overview of the administrator and end user tasks to enroll devices.

   Listed under 30 Mar – 5 Apr 2026 on Microsoft Learn
3. New feature

   Support Assistant access expanded to all authenticated users

   All authenticated users can now access Support Assistant in the Intune admin center to find solutions and troubleshooting guidance. Creating and managing support tickets still requires a Microsoft Entra role that includes the microsoft.office365.supportTickets permission. For more…

   DocsGet support in the Microsoft Intune admin centerUpdated

   Get support in the Microsoft Intune admin center Get online and telephone support for Microsoft Intune and other device management cloud services from within the Microsoft Intune admin center.

   Listed under 30 Mar – 5 Apr 2026 on Microsoft Learn
4. Preview

   Scoped permissions for Role-based access control (preview)

   Intune now includes an opt-in preview to enable Scoped permissions , making your role-based access control (RBAC) configuration more precise. Enabling Scoped permissions is a one-time choice that can't be undone. In the future, this will become…

   DocsUse role-based access control (RBAC) and scope tags for distributed IT

   Use role-based access control (RBAC) and scope tags for distributed IT Use role-based access control (RBAC) and scope tags to filter configuration profiles to specific roles.

   Listed under 30 Mar – 5 Apr 2026 on Microsoft Learn
5. New feature

   Remote Help connectivity update for Windows devices

   We've improved connectivity when using the Launch Remote Help capability in the Intune admin center for Windows devices. For the best experience, we recommend updating firewall rules to include this new endpoint: *.trouter.communications.svc.cloud.microsoft For the current list of…

   DocsUnderstand Microsoft Intune Management ExtensionNew·Network endpoints for Microsoft IntuneUpdated·Network endpoints for Microsoft IntuneUpdated·Using Remote Help on Windows to Assist Authenticated Users

   Understand Microsoft Intune Management Extension Understand Microsoft Intune management extension for Windows.

   Listed under 30 Mar – 5 Apr 2026 on Microsoft Learn
6. New feature

   Recovery lock features available for macOS devices

   On macOS devices, you can configure a recovery OS password that prevents users from booting company-owned devices into recovery mode, reinstalling macOS, and bypassing remote management. Admins can also rotate this password. There are two ways to use…

   DocsCreate a policy using settings catalog in Microsoft IntuneNew·Device Action: Rotate Recovery Lock PasscodeUpdated

   Create a policy using settings catalog in Microsoft Intune Use settings catalog in Microsoft Intune to configure thousands of settings for Windows 10/11, iOS/iPadOS, macOS, and Android client devices, including Microsoft Office apps, Microsoft Edge, administrative templates (ADMX), and more. Add these settings in a device configuration profile to…

   Listed under 30 Mar – 5 Apr 2026 on Microsoft Learn
7. GA

   Newly available protected apps for Intune

   The following protected apps are now available for Microsoft Intune: PerfectServe Clinical Collab by PerfectServe Synigo Pulse by Synigo B.V. DeepL for Intune by DeepL SE Foxit PDF Editor by Foxit Software Inc. EasyPlant QC Inspections by Technip…

   DocsSupported Microsoft Intune AppsUpdated

   Supported Microsoft Intune Apps This article provides lists of support partner and Microsoft apps that are commonly used with Microsoft Intune.

   Listed under 30 Mar – 5 Apr 2026 on Microsoft Learn
8. New feature

   New updates to the Apple settings catalog

   The Settings Catalog lists all the settings you can configure in a device policy, and all in one place. For more information about configuring Settings Catalog profiles in Intune, see Create a policy using settings catalog . There…

   DocsCreate a policy using settings catalog in Microsoft IntuneNew·Microsoft Intune admin center

   Create a policy using settings catalog in Microsoft Intune Use settings catalog in Microsoft Intune to configure thousands of settings for Windows 10/11, iOS/iPadOS, macOS, and Android client devices, including Microsoft Office apps, Microsoft Edge, administrative templates (ADMX), and more. Add these settings in a device configuration profile to…

   Listed under 30 Mar – 5 Apr 2026 on Microsoft Learn
9. New feature

   New supported OEMConfig app for Android Enterprise

   The following OEMConfig app is available in Intune for Android Enterprise: Inventus | com.inventus.oemconfig.gen For more information about OEMConfig, see Use and manage Android Enterprise devices with OEMConfig in Microsoft Intune .

   DocsUse OEMConfig on Android Enterprise devices in Microsoft IntuneNew

   Use OEMConfig on Android Enterprise devices in Microsoft Intune Use Microsoft Intune to manage and use devices running Android Enterprise with OEMConfig. See all the steps, including an overview, see the prerequisites, create the configuration profile in Intune, and see a list of supported OEMConfig apps.

   Listed under 30 Mar – 5 Apr 2026 on Microsoft Learn
10. New feature

    New settings in the Windows settings catalog

    There are new settings in the Windows settings catalog. To see and configure these settings in Intune, create a Windows settings catalog profile ( Devices > Configuration profiles > Create profile > Windows 10 and later > Settings…

    DocsConnectivity Policy CSPNew·WindowsAI Policy CSPNew·Create a policy using settings catalog in Microsoft IntuneNew

    Connectivity Policy CSP Learn more about the Connectivity Area in Policy CSP.

    Listed under 30 Mar – 5 Apr 2026 on Microsoft Learn
11. New feature

    Microsoft Intune app for Linux now supports the Microsoft Identity Broker

    The Microsoft Intune app for Linux now uses the Microsoft Identity Broker on supported Ubuntu and Red Hat Enterprise Linux (RHEL) distributions. Broker version 2.0.2 and later introduces a major architectural change from the previous Java-based broker. This…

    DocsMicrosoft single sign-on for Linux

    Microsoft single sign-on for Linux Overview of Microsoft single sign-on for Linux that enables Microsoft Entra ID integration and seamless authentication.

    Listed under 30 Mar – 5 Apr 2026 on Microsoft Learn
12. GA

    Intune security baseline for Windows 11, version 25H2

    The Windows security baseline for Windows 11, version 25H2 is now available in Microsoft Intune. This baseline reflects current Microsoft security recommendations for supported Windows devices and is the latest available Windows security baseline in Intune. The Windows…

    DocsPost Windows 11, version 25H2 security baseline·Default configuration of Intune's Windows security baselinesNew·Configure security baseline policies in Microsoft Intune

    Windows 11, version 25H2 security baseline Microsoft is pleased to announce the security baseline package for Windows 11, version 25H2! You can download the baseline package from...

    Listed under 30 Mar – 5 Apr 2026 on Microsoft Learn
13. New feature

    Improvements to device query for multiple devices

    Device query for multiple devices now includes new capabilities to help you work with query results more efficiently. You can use a search text box to search across all resulting rows of a query, use column headers…

    DocsDevice Query for Multiple Devices

    Device Query for Multiple Devices Use device query for multiple devices in Microsoft Intune to run KQL queries, analyze inventory trends, and start querying your managed fleet now.

    Listed under 30 Mar – 5 Apr 2026 on Microsoft Learn
14. New feature

    Hotpatching default enablement in Windows Autopatch

    Starting with the May 2026 Windows security update, hotpatch updates are enabled by default for all eligible devices managed through Windows Autopatch. Hotpatch updates install faster and require fewer restarts, helping devices get secure sooner. If your organization…

    Docshttps://aka.ms/HotpatchByDefault

    Listed under 30 Mar – 5 Apr 2026 on Microsoft Learn
15. New feature

    Declarative Device Management for Apple line-of-business apps on iOS/iPadOS

    Microsoft Intune now supports Apple Declarative Device Management (DDM) for required line-of-business apps on devices running iOS/iPadOS 18 and later. By changing the management type to DDM in App information, you can deploy and configure apps using Apple's…

    Listed under 30 Mar – 5 Apr 2026 on Microsoft Learn
16. New feature

    Guided scenarios being removed from the Intune admin center

    All guided scenarios except Windows 365 Boot are removed from the Microsoft Intune admin center. You can no longer access the guided scenario wizards, but any Intune objects previously created by these wizards remain available and manageable. The…

    DocsMicrosoft Intune documentation·Intune prescriptive guides·https://m365accelerator.microsoft.com/intune·Securing apps for mobile | Android

    Security Copilot in Intune features overview Microsoft Security Copilot in Intune is an AI platform. It can help you create policies, get information about existing policies, and show more details on specific settings, including their impacts on users and devices. You can also use Copilot to…

    Listed under 24–30 Mar 2026 on Microsoft Learn
17. New feature

    Improved Remote Help update reporting on macOS

    We've improved the update and reporting experience for Remote Help on macOS to make version management more reliable and transparent for IT admins. After you deploy the latest Remote Help client (version 1.0.26012221) through Microsoft Intune, you can…

    DocsDeploy Remote Help with Microsoft Intune

    Deploy Remote Help with Microsoft Intune Follow the steps to deploy Remote Help with Microsoft Intune on Windows, macOS, and Android Enterprise.

    Listed under 16–22 Mar 2026 on Microsoft Learn
18. New feature

    Updates to operators in device query for multiple devices

    Device query for multiple devices now includes expanded operator support, clearer query validation, and improved results to make building and interpreting queries easier. New join types supported You can now use the following join types when querying…

    Listed under 2–8 Mar 2026 on Microsoft Learn
19. GA

    Newly available protected apps for Intune

    The following protected apps are now available for Microsoft Intune: Jump by Accio Inc. Mijn InPlanning by Intus Workforce Solutions (Android) For more information about protected apps, see Microsoft Intune protected apps .

    DocsSupported Microsoft Intune AppsUpdated

    Supported Microsoft Intune Apps This article provides lists of support partner and Microsoft apps that are commonly used with Microsoft Intune.

    Listed under 2–8 Mar 2026 on Microsoft Learn
20. New feature

    New updates to the Apple settings catalog

    The Settings Catalog lists all the settings you can configure in a device policy, and all in one place. For more information about configuring Settings Catalog profiles in Intune, see Create a policy using settings catalog . There…

    DocsCreate a policy using settings catalog in Microsoft IntuneNew·Set preferences for Microsoft Defender for Endpoint on macOSNew·Microsoft Intune admin center

    Create a policy using settings catalog in Microsoft Intune Use settings catalog in Microsoft Intune to configure thousands of settings for Windows 10/11, iOS/iPadOS, macOS, and Android client devices, including Microsoft Office apps, Microsoft Edge, administrative templates (ADMX), and more. Add these settings in a device configuration profile to…

    Listed under 2–8 Mar 2026 on Microsoft Learn
21. New feature

    New settings in the Windows settings catalog

    There are new settings in the Windows settings catalog. To see and configure these settings in Intune, create a Windows settings catalog profile ( Devices > Configuration profiles > Create profile > Windows 10 and later > Settings…

    DocsWindows settings backup and restore OverviewNew·WindowsBackupAndRestore CSPNew·Create a policy using settings catalog in Microsoft IntuneNew·Filter formats for URL list-based policies

    Windows settings backup and restore Overview Learn how to configure devices to use Windows settings backup and restore.

    Listed under 2–8 Mar 2026 on Microsoft Learn
22. Preview

    New setting controls MDM enrollment during account registration on Windows (preview)

    A new setting that affects the Microsoft Entra account registration experience on Windows is available in the Microsoft Intune admin center. The setting, Disable MDM enrollment when adding work or school account on Windows , controls whether devices…

    DocsEnable MDM automatic enrollment for Windows

    Enable MDM automatic enrollment for Windows Enable Intune automatic enrollment for Windows devices joining or registering with your Microsoft Entra ID.

    Listed under 2–8 Mar 2026 on Microsoft Learn
23. New feature

    Multi-administrator approval support for device compliance and device configuration policies

    Multi-administrator approval now supports device configuration policies created through the settings catalog and device compliance policies. When you turn on this feature, any changes you make, including creating, editing, or deleting a policy, must be approved by a…

    DocsUse Multi Admin Approval in Intune

    Use Multi Admin Approval in Intune Configure Multi Admin Approval to protect your tenant against the use of compromised administrative accounts in Intune.

    Listed under 2–8 Mar 2026 on Microsoft Learn
24. Deprecation

    Intune ending support for legacy Apple MDM software update policies

    With the release of iOS 26, iPadOS 26, and macOS 26, Apple has deprecated legacy mobile device management (MDM) software update commands and payloads. As a result, Microsoft Intune will soon end support for creating legacy iOS/iPadOS and…

    DocsPost Support tip: Move to declarative device management for Apple software …

    Support tip: Move to declarative device management for Apple software updates By: Benjamin Flamm – Product Manager | Microsoft Intune Apple recently announced at the Worldwide Developer Conference (WWDC) in June 2025 that mobile...

    Listed under 2–8 Mar 2026 on Microsoft Learn
25. New feature

    Autopatch update readiness

    Autopatch update readiness provides a unified experience for tracking and remediating Windows update issues across Intune-enrolled devices and Windows Autopatch group-enrolled devices. With a single dashboard, admins can view all managed devices, including enrollment status and policy assignments…

    DocsWindows Autopatch update readiness overviewUpdated

    Windows Autopatch update readiness overview Provides an overview of a unified set of reporting called Windows Autopatch update readiness.

    Listed under 2–8 Mar 2026 on Microsoft Learn
26. New feature

    Apple declarative device management (DDM) supports assignment filters

    You can use assignment filters in policy assignments for DDM-based configurations, like software updates. Note This feature is rolling out slowly and should be available for all customers by late March 2026. Note This feature is rolling out…

    DocsCreate assignment filters in Microsoft Intune

    Create assignment filters in Microsoft Intune Create assignment filters in Microsoft Intune to target policies based on device properties like OS version or manufacturer. Learn to create, update, and delete filters for managed devices and apps.

    Listed under 2–8 Mar 2026 on Microsoft Learn Roadmap 536575

1. New feature

   Windows feature update reports support Windows 11, version 25H2

   The Windows feature update compatibility risks report and Windows feature update device readiness report support Windows 11, version 25H2 as a selectable target OS. When you choose this version under Select target OS , the reports provide…

   Listed under 9–15 Feb 2026 on Microsoft Learn
2. New feature

   Update firewall configurations for new Intune network endpoints

   As part of Microsoft's ongoing Secure Future Initiative (SFI) , Microsoft Intune began using Azure Front Door (AFD) IP addresses in addition to the existing Intune service IPs in December 2025. Customers that use IP-based allowlist, Azure service…

   DocsNetwork endpoints for Microsoft IntuneUpdated·Secure Future Initiative (SFI)·Network endpoints for US government deployments·Post Support tip: Upcoming Microsoft Intune network changes

   Network endpoints for Microsoft Intune Review endpoints for Intune. This page lists IP addresses and port settings needed for proxy settings in your Intune deployments.

   Listed under 9–15 Feb 2026 on Microsoft Learn
3. GA

   Newly available protected apps for Intune

   The following protected apps are now available for Microsoft Intune: Clarity Express for Intune by Rego Consulting Corporation Datadog by Datadog Inc. Qlik Analytics by Qlik Tier1 for Intune by SS&C Technologies, Inc. (iOS) For more information about…

   DocsSupported Microsoft Intune AppsUpdated

   Supported Microsoft Intune Apps This article provides lists of support partner and Microsoft apps that are commonly used with Microsoft Intune.

   Listed under 9–15 Feb 2026 on Microsoft Learn
4. New feature

   New updates to the Apple settings catalog

   The Settings Catalog lists all the settings you can configure in a device policy, and all in one place. For more information about configuring Settings Catalog profiles in Intune, see Create a policy using settings catalog . There…

   DocsCreate a policy using settings catalog in Microsoft IntuneNew·Microsoft Intune admin center

   Create a policy using settings catalog in Microsoft Intune Use settings catalog in Microsoft Intune to configure thousands of settings for Windows 10/11, iOS/iPadOS, macOS, and Android client devices, including Microsoft Office apps, Microsoft Edge, administrative templates (ADMX), and more. Add these settings in a device configuration profile to…

   Listed under 9–15 Feb 2026 on Microsoft Learn
5. New feature

   New supported OEMConfig apps for Android Enterprise

   The following OEMConfig apps are available in Intune for Android Enterprise: FCNT - Senior Care | com.fcnt.mobile_phone.seniorcareconfig FCNT - Schema | com.fcnt.mobile_phone.schematest Sonim | com.sonim.oemappconfig For more information about OEMConfig, see Use and manage Android Enterprise devices with…

   DocsUse OEMConfig on Android Enterprise devices in Microsoft IntuneNew

   Use OEMConfig on Android Enterprise devices in Microsoft Intune Use Microsoft Intune to manage and use devices running Android Enterprise with OEMConfig. See all the steps, including an overview, see the prerequisites, create the configuration profile in Intune, and see a list of supported OEMConfig apps.

   Listed under 9–15 Feb 2026 on Microsoft Learn
6. New feature

   New settings in the Windows settings catalog

   There are new settings in the Windows settings catalog. To see and configure these settings in Intune, create a Windows settings catalog profile ( Devices > Configuration profiles > Create profile > Windows 10 and later > Settings…

   DocsShare on Windows: integrate the Windows Share SheetNew·Create a policy using settings catalog in Microsoft IntuneNew

   Share on Windows: integrate the Windows Share Sheet Learn how to implement Share on Windows - integrate your app with the Windows Share Sheet to let users share content across Windows apps and services.

   Listed under 9–15 Feb 2026 on Microsoft Learn
7. New feature

   More options for assignment filters > Device Management Type property for managed apps on Android and iOS/iPadOS

   When you create policies for your managed apps, you can use assignment filters to assign policies based on rules you create. In these rules, you can use different device and app properties, including the Device Management Type property…

   DocsAssignment filter properties and operators referenceNew·Create assignment filters in Microsoft Intune·Configuration Policies for Intune App SDK Managed Apps

   Assignment filter properties and operators reference Reference guide for device and app properties, operators, and rule syntax when creating assignment filters in Microsoft Intune. Includes examples and supported values.

   Listed under 9–15 Feb 2026 on Microsoft Learn
8. New feature

   Lenovo Device Orchestration (LDO) link in the Intune admin center

   Microsoft Intune now includes a direct link to Lenovo Device Orchestration (LDO) in the Intune admin center. This integration expands the Partner portals experience by giving IT admins a single, secure entry point to manage supported Lenovo devices…

   Listed under 9–15 Feb 2026 on Microsoft Learn
9. New feature

   Intune certificate inventory integration with Zimperium mobile threat defense

   You can now configure the Zimperium Mobile Threat Defense (MTD) connector to synchronize certificate inventory from your managed iOS devices. This enhancement helps you identify when a device threat level is elevated due to approved but potentially malicious…

   DocsEnable Mobile Threat Defense connector in Microsoft IntuneUpdated

   Enable Mobile Threat Defense connector in Microsoft Intune Enable the connector between your Mobile Threat Defense (MTD) partner and Microsoft Intune.

   Listed under 9–15 Feb 2026 on Microsoft Learn
10. New feature

    Filter by Android management mode in the settings catalog

    The settings catalog includes hundreds of settings that you can configure. There are built-in features that help filter the available settings. When you create an Android settings catalog policy, there's a management mode filter option that filters the…

    DocsCreate a policy using settings catalog in Microsoft IntuneNew·Android settings catalog in Microsoft Intune

    Create a policy using settings catalog in Microsoft Intune Use settings catalog in Microsoft Intune to configure thousands of settings for Windows 10/11, iOS/iPadOS, macOS, and Android client devices, including Microsoft Office apps, Microsoft Edge, administrative templates (ADMX), and more. Add these settings in a device configuration profile to…

    Listed under 9–15 Feb 2026 on Microsoft Learn
11. New feature

    Endpoint Privilege Management support on Azure Virtual Desktop

    Endpoint Privilege Management (EPM) elevation policies now support deployment to users on Azure Virtual Desktop (AVD) single-session virtual machines. For information about using EPM, see Plan and Prepare for Endpoint Privilege Management Deployment .

    DocsPlan and Prepare for Endpoint Privilege Management DeploymentNew

    Plan and Prepare for Endpoint Privilege Management Deployment Plan your Endpoint Privilege Management deploying by understanding requirements, fundamentals, and security recommendations.

    Listed under 9–15 Feb 2026 on Microsoft Learn Roadmap 399928
12. GA

    Admin tasks in Microsoft Intune are now generally available

    Admin tasks in the Intune admin center are out of preview and now generally available. Admin tasks provide a centralized view where admins can discover, organize, and act on common tasks that are otherwise spread throughout the Intune…

    DocsCentrally manage Admin TasksUpdated

    Centrally manage Admin Tasks Centrally manage admin tasks in Microsoft Intune. Use the unified Admin tasks view to organize and act on administrative tasks from Device Offboarding, Endpoint Privilege Management, and more.

    Listed under 9–15 Feb 2026 on Microsoft Learn

1. New feature

   PowerShell script installer for Win32 apps

   When adding a Win32 app, you can upload a PowerShell script to serve as the installer instead of specifying a command line. Intune packages the script with the app content and runs it in the same context as…

   DocsWin32 App Management in Microsoft Intune

   Win32 App Management in Microsoft Intune Learn how to manage Win32 apps with Microsoft Intune. This article provides an overview of the Intune Win32 app delivery and management capabilities.

   Listed under 12–18 Jan 2026 on Microsoft Learn

1. GA

   New Setup Assistant screens now generally available for iOS/iPadOS and macOS automated device enrollment profiles

   You can hide or show 12 new Setup Assistant screens during automated device enrollment (ADE). The default is to show these screens in Setup Assistant. The screens you can skip during iOS/iPadOS enrollment, and the applicable versions, include…

   DocsSet up automated device enrollment (ADE) for iOS/iPadOSNew·Set up automated device enrollment (ADE) for macOSNew

   Set up automated device enrollment (ADE) for iOS/iPadOS Learn how to enroll corporate-owned iOS/iPadOS devices into Microsoft Intune with Apple Automated Device Enrollment (ADE).

   Listed under 8–14 Dec 2025 on Microsoft Learn
2. New feature

   ACME protocol support for iOS/iPadOS and macOS enrollment

   As we prepare to support managed device attestation in Intune, we are starting a phased rollout of an infrastructure change for new enrollments that includes support for the Automated Certificate Management Environment (ACME) protocol . Now when new…

   Listed under 8–14 Dec 2025 on Microsoft Learn
3. Preview

   Secure enterprise browser managed by Intune (public preview)

   Microsoft Intune now supports policy management for Microsoft Edge for Business as a secure enterprise browser. By implementing policies through Intune, admins can confidently transition from Windows-based desktop environments to secure, browser-based workflows for accessing corporate resources without…

   DocsSecure Your Corporate Data in Intune with Microsoft Edge for Business

   Secure Your Corporate Data in Intune with Microsoft Edge for Business Secure your corporate data in Microsoft Intune with Microsoft Edge for Business across all platforms.

   Listed under 1–7 Dec 2025 on Microsoft Learn

1. Preview

   Security Copilot in Intune agents are available for public preview

   Security Copilot agents in Intune are AI-powered assistants that specialize in specific scenarios. The Intune agents are available in the Intune admin center > Agents , and are available for Security Copilot users. The following Intune agents are…

   DocsSecurity Copilot Agents in Intune·Change Review Agent Overview·Get Started with the Device Offboarding Agent·Learn about Policy Configuration Agent and set it up

   Security Copilot Agents in Intune Discover how Microsoft Security Copilot enhances Microsoft Intune through AI-powered security agents. Learn about available agents and explore their capabilities.

   Listed under 17–23 Nov 2025 on Microsoft Learn
2. Preview

   Manage tasks and requests from the centralized Admin tasks node in Microsoft Intune (public preview)

   The new Admin tasks node in the Intune admin center provides a centralized view to discover, organize, and act on security tasks and user elevation requests. Located under Tenant Administration , this unified experience supports search, filtering, and…

   DocsCentrally manage Admin TasksUpdated

   Centrally manage Admin Tasks Centrally manage admin tasks in Microsoft Intune. Use the unified Admin tasks view to organize and act on administrative tasks from Device Offboarding, Endpoint Privilege Management, and more.

   Listed under 17–23 Nov 2025 on Microsoft Learn
3. New feature

   Intune support for iVerify as a mobile threat defense partner

   You can now use iVerify Enterprise as a mobile threat defense partner (MTD) for enrolled devices that run the following platforms: Android 9.0 and later iOS/iPadOS 15.0 and later To learn more about this support, see Set up…

   DocsiVerify Enterprise Mobile Threat Defense with Intune

   iVerify Enterprise Mobile Threat Defense with Intune Set up iVerify Enterprise Mobile Security with Microsoft Intune to control mobile device access to your corporate resources.

   Listed under 17–23 Nov 2025 on Microsoft Learn
4. GA

   Configure Windows Backup for Organizations

   Windows Backup for Organizations is generally available in Microsoft Intune. With this feature, you can back up your organization's Windows settings and restore them on a Microsoft Entra joined device. Backup settings are configurable in the Microsoft Intune…

   DocsEnable Windows Backup for Organizations

   Enable Windows Backup for Organizations Enable Windows backup and restore in Intune for employees or students.

   Listed under 17–23 Nov 2025 on Microsoft Learn Roadmap 501437
5. GA

   Updated Service Level Objectives for Enterprise App Management

   Service Level Objectives (SLOs) are now available in Enterprise App Management (EAM) to provide clearer expectations for when app updates become available in the Enterprise App Catalog. SLO processing timelines begin when Intune first receives the updated app…

   DocsMicrosoft Intune Enterprise Application ManagementNew

   Microsoft Intune Enterprise Application Management Learn about Enterprise App Management and the Enterprise App Catalog in Microsoft Intune.

   Listed under 10–16 Nov 2025 on Microsoft Learn
6. Preview

   Soft-deleted Microsoft Entra groups now visible in Intune

   This feature is in public preview. For more information, see Public preview in Microsoft Intune . Microsoft Intune now displays soft-deleted Microsoft Entra groups in the Intune admin center. When a group is soft-deleted, its assignments no longer…

   DocsPublic preview overview in Microsoft Intune·Include and Exclude App Assignments in Microsoft Intune

   Public preview overview in Microsoft Intune Learn about public preview features in Microsoft Intune, and see an example. See a list of limitations, restrictions, and more in the Microsoft Intune admin center.

   Listed under 10–16 Nov 2025 on Microsoft Learn
7. New feature

   Settings available in both Templates and Settings Catalog for Android Enterprise

   Some settings that were only available in Templates are now also supported in the settings catalog. The settings catalog lists all the settings you can configure in a device policy, and all in one place. For more information…

   DocsCreate a policy using settings catalog in Microsoft IntuneNew·Android settings catalog in Microsoft Intune

   Create a policy using settings catalog in Microsoft Intune Use settings catalog in Microsoft Intune to configure thousands of settings for Windows 10/11, iOS/iPadOS, macOS, and Android client devices, including Microsoft Office apps, Microsoft Edge, administrative templates (ADMX), and more. Add these settings in a device configuration profile to…

   Listed under 10–16 Nov 2025 on Microsoft Learn
8. New feature

   Scope tag enforcement for Endpoint Privilege Management elevation requests

   When viewing Endpoint Privilege Management elevation requests , applicable scope tags are now enforced. This means administrators can view and manage only the requests for devices and users that fall within their assigned scope. This change helps…

   DocsUse EPM support approvals for file elevation requests with Intune

   Use EPM support approvals for file elevation requests with Intune Manage support approvals for elevation requests when you use Endpoint Privilege Management for Microsoft Intune.

   Listed under 10–16 Nov 2025 on Microsoft Learn
9. New feature

   Reset Managed Google Play store mode to Basic

   You can now reset the Managed Google Play store layout from Custom back to Basic in the Intune admin center ( Apps > All apps > Create Managed Google Play app ). In Basic mode, all approved apps…

   DocsAdd and Assign Managed Google Play Apps to Android Enterprise DevicesUpdated

   Add and Assign Managed Google Play Apps to Android Enterprise Devices Understand how to synchronize and assign apps to Android Enterprise devices from the Managed Google Play store.

   Listed under 10–16 Nov 2025 on Microsoft Learn
10. New feature

    Query and results improvements to Explorer feature with Security Copilot in Intune

    With your Security Copilot license, you can query your Intune data using the Explorer in Intune feature. When you create your queries, you have more filter options. For example: Queries with a number operator let you choose equal…

    DocsExplore Intune data with natural language and take action

    Explore Intune data with natural language and take action In Microsoft Intune, use Explorer to query your data in natural language and run built-in queries that match your request. Copilot summarizes the results, and provides recommendations and actions based on the query results. You can also create policies that…

    Listed under 10–16 Nov 2025 on Microsoft Learn
11. New feature

    New prompts available to explore your Intune data

    You can use Security Copilot in Intune to explore new prompts related to your data using natural language. Use these new prompts to view data on: Users and groups Role based access control (RBAC) Audit logs When you…

    DocsExplore Intune data with natural language and take action

    Explore Intune data with natural language and take action In Microsoft Intune, use Explorer to query your data in natural language and run built-in queries that match your request. Copilot summarizes the results, and provides recommendations and actions based on the query results. You can also create policies that…

    Listed under 10–16 Nov 2025 on Microsoft Learn
12. New feature

    New opt-in upgrade allows existing customers to move from managed Google Play accounts to Microsoft Entra ID accounts

    Microsoft Intune offers a new opt-in upgrade that allows existing Android Enterprise customers to move from using managed Google Play accounts to using Microsoft Entra ID accounts for Android device management. You are eligible for upgrade if you…

    DocsPost New onboarding flow to managing Android Enterprise devices with …·Connect Intune account to managed Google Play account

    New onboarding flow to managing Android Enterprise devices with Microsoft Intune Transform your Android Enterprise management with Microsoft Intune's streamlined onboarding experience.

    Listed under 10–16 Nov 2025 on Microsoft Learn
13. New feature

    New cut, copy, and paste options for Windows app protection

    Intune adds two new values to the Allow cut, copy and paste for setting in Windows app protection policies (starting with Microsoft Edge) to give admins more control over data movement: Org data destinations and any source: Users…

    DocsApp Protection Policies Overview

    App Protection Policies Overview Learn how Microsoft Intune app protection policies help protect your company data and prevent data loss.

    Listed under 10–16 Nov 2025 on Microsoft Learn
14. New feature

    New Assist Content Sharing setting in the Android Enterprise settings catalog

    The Settings Catalog lists all the settings you can configure in a device policy, and all in one place. For more information about configuring Settings Catalog profiles in Intune, see Create a policy using settings catalog . There…

    DocsCreate a policy using settings catalog in Microsoft IntuneNew·Control AI features on Android Enterprise devices

    Create a policy using settings catalog in Microsoft Intune Use settings catalog in Microsoft Intune to configure thousands of settings for Windows 10/11, iOS/iPadOS, macOS, and Android client devices, including Microsoft Office apps, Microsoft Edge, administrative templates (ADMX), and more. Add these settings in a device configuration profile to…

    Listed under 10–16 Nov 2025 on Microsoft Learn
15. New feature

    More volume options available in Managed Home Screen

    Admins can now enable more volume controls in the Managed Home Screen (MHS) app for Android Enterprise dedicated and fully managed devices. In addition to the existing media volume control, this update introduces configuration settings to show or…

    DocsConfigure the Microsoft Managed Home Screen AppNew

    Configure the Microsoft Managed Home Screen App Learn how to configure the Microsoft Managed Home Screen app.

    Listed under 10–16 Nov 2025 on Microsoft Learn
16. New feature

    Microsoft Tunnel access by rooted Android devices is blocked by the Microsoft Defender client

    Microsoft Tunnel uses the Microsoft Defender client app to provide Android devices access to tunnel. The latest version of the Defender for Endpoint client can now detect when a device is rooted. If a device is determined to…

    DocsLearn about the Microsoft Tunnel VPN solution for Microsoft Intune

    Learn about the Microsoft Tunnel VPN solution for Microsoft Intune Learn about the Microsoft Tunnel Gateway, a VPN server for Intune that runs on Linux. With Microsoft Tunnel, cloud-based devices you manage with Intune can reach your on-premises infrastructure.

    Listed under 10–16 Nov 2025 on Microsoft Learn
17. New feature

    Incomplete user enrollment report removed

    The incomplete user enrollments report has been removed and is no longer functional in the Microsoft Intune admin center. The following corresponding APIs have also been removed from Microsoft Intune: getEnrollmentAbandonmentDetailsReport getEnrollmentAbandonmentSummaryReport getEnrollmentFailureDetailsReport Scripts or automation using these…

    DocsView enrollment reports

    View enrollment reports Monitor and troubleshoot issues with enrollment restrictions and enrollment status page assignments.

    Listed under 10–16 Nov 2025 on Microsoft Learn Action may be required
18. New feature

    Device Management Type assignment filter property supports Android enrollment options for Managed Devices

    When you create a policy in Intune, you can use assignment filters to assign a policy based on rules you create. You can create a rule using different properties , like deviceManagementType . For managed devices, the Device…

    DocsAssignment filter properties and operators referenceNew·Create assignment filters in Microsoft Intune

    Assignment filter properties and operators reference Reference guide for device and app properties, operators, and rule syntax when creating assignment filters in Microsoft Intune. Includes examples and supported values.

    Listed under 10–16 Nov 2025 on Microsoft Learn

No changes match.