https://securitynews.ms/products/microsoft-intune/Microsoft Intune news and documented product changes, each linked to Microsoft's own source.enWed, 11 Nov 2026 22:16:36 +0000https://learn.microsoft.com/en-us/intune/whats-new/#newly-available-protected-apps-for-intune-2https://learn.microsoft.com/en-us/intune/whats-new/#newly-available-protected-apps-for-intune-2Wed, 11 Nov 2026 22:16:36 +0000Intune · Microsoft Learn[App management] The following protected apps are now available for Microsoft Intune: Caju AI by Caju AI eYACHO for Biz 7 Intune by MetaMoJi Corporation (iOS) eYACHO Viewer 7 Intune by MetaMoJi Corporation (iOS) Harvey AI by Harvey AI (Android)…https://learn.microsoft.com/en-us/intune/whats-new/#newly-available-protected-apps-for-intune-1https://learn.microsoft.com/en-us/intune/whats-new/#newly-available-protected-apps-for-intune-1Wed, 11 Nov 2026 22:16:36 +0000Intune · Microsoft Learn[App management] The following protected apps are now available for Microsoft Intune: Notion by Notion Labs Superhuman Mail by Superhuman Labs Calven by Calven Pty Limited Heijmans by Heijmans Notability by Ginger Labs, Inc. (iOS) Ben for Intune by Thanks…https://learn.microsoft.com/en-us/intune/whats-new/#newly-available-protected-apps-for-intunehttps://learn.microsoft.com/en-us/intune/whats-new/#newly-available-protected-apps-for-intuneWed, 11 Nov 2026 22:16:36 +0000Intune · Microsoft Learn[App management] The following protected apps are now available for Microsoft Intune: eScription One by DeliverHealth Prisma Browser for Intune by Palo Alto Networks, Inc. Elevate UC for Intune by Serverdata.net, Inc. For more information about protected apps, see Microsoft…https://learn.microsoft.com/en-us/intune/whats-new/in-development#warning-notifications-for-ios-apps-running-unsupported-sdk-versionshttps://learn.microsoft.com/en-us/intune/whats-new/in-development#warning-notifications-for-ios-apps-running-unsupported-sdk-versionsFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnWe're continuing improvements to the Microsoft Intune mobile application management (MAM) service to ensure applications remain secure, reliable, and aligned with the latest platform capabilities. Starting in late June 2026, users opening iOS apps built with an Intune MAM SDK…https://learn.microsoft.com/en-us/intune/whats-new/in-development#view-esim-profiles-and-deployment-status-for-windows-devices-https://learn.microsoft.com/en-us/intune/whats-new/in-development#view-esim-profiles-and-deployment-status-for-windows-devices-Fri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnMicrosoft Intune will add Windows eSIM profile information and deployment status to the Properties Catalog. This visibility will make it easier to identify devices that require follow-up and validate profile deployment across your managed Windows estate. Applies to: Windowshttps://learn.microsoft.com/en-us/intune/whats-new/in-development#updated-minimum-supported-version-for-macoshttps://learn.microsoft.com/en-us/intune/whats-new/in-development#updated-minimum-supported-version-for-macosFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnMicrosoft Intune will update its minimum supported macOS version after Apple releases macOS 27. Intune, the Company Portal, and the Intune management agent will support macOS 15 and later. Devices running macOS 14 or earlier that are already enrolled will…https://learn.microsoft.com/en-us/intune/whats-new/in-development#update-to-the-latest-intune-company-portal-for-android-intune-app-sdk-for-ios-and-intune-app-wrapper-for-ioshttps://learn.microsoft.com/en-us/intune/whats-new/in-development#update-to-the-latest-intune-company-portal-for-android-intune-app-sdk-for-ios-and-intune-app-wrapper-for-iosFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnStarting January 19, 2026 , or soon after, we're making updates to improve the Intune mobile application management (MAM) service. To stay secure and run smoothly, this update will require iOS wrapped apps, iOS SDK integrated apps, and the Intune…https://learn.microsoft.com/en-us/intune/whats-new/in-development#update-to-the-latest-intune-app-sdk-and-intune-app-wrapper-for-android-15-supporthttps://learn.microsoft.com/en-us/intune/whats-new/in-development#update-to-the-latest-intune-app-sdk-and-intune-app-wrapper-for-android-15-supportFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnWe've recently released new versions of the Intune App SDK and Intune App Wrapping Tool for Android to support Android 15. We recommend upgrading your app to the latest SDK or wrapper versions to ensure applications stay secure and run…https://learn.microsoft.com/en-us/intune/whats-new/in-development#update-to-support-statement-for-windows-10-in-intunehttps://learn.microsoft.com/en-us/intune/whats-new/in-development#update-to-support-statement-for-windows-10-in-intuneFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnWindows 10 has reached end of support on October 14, 2025 . Windows 10 no longer receives quality or feature updates. Security updates are only available to commercial customers who have enrolled devices into the Extended Security Updates (ESU) program…https://learn.microsoft.com/en-us/intune/whats-new/in-development#update-firewall-configurations-to-include-new-intune-network-endpointshttps://learn.microsoft.com/en-us/intune/whats-new/in-development#update-firewall-configurations-to-include-new-intune-network-endpointsFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnAs part of Microsoft's ongoing Secure Future Initiative (SFI) , starting on or shortly after December 2, 2025 , the network service endpoints for Microsoft Intune will also use the Azure Front Door IP addresses. This improvement supports better alignment…https://learn.microsoft.com/en-us/intune/whats-new/in-development#support-for-the-keyence-oemconfig-app-on-android-enterprise-https://learn.microsoft.com/en-us/intune/whats-new/in-development#support-for-the-keyence-oemconfig-app-on-android-enterprise-Fri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnMicrosoft Intune will add support for the KEYENCE OEMConfig app ( com.keyence.autoid.oemconfigs ) for Android Enterprise devices. You'll be able to use the app with Intune's OEMConfig workflow to configure the device settings that KEYENCE exposes through its app schema…https://learn.microsoft.com/en-us/intune/whats-new/in-development#support-for-intune-device-control-policy-for-devices-managed-by-microsoft-defender-for-endpointhttps://learn.microsoft.com/en-us/intune/whats-new/in-development#support-for-intune-device-control-policy-for-devices-managed-by-microsoft-defender-for-endpointFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnYou'll be able to use the endpoint security policy for Device control (Attack surface reduction policy) from Microsoft Intune with the devices you manage through the Microsoft Defender for Endpoint security settings management capability. Device control policies are part of…https://learn.microsoft.com/en-us/intune/whats-new/in-development#share-device-diagnostics-during-remote-help-sessions-on-windows-https://learn.microsoft.com/en-us/intune/whats-new/in-development#share-device-diagnostics-during-remote-help-sessions-on-windows-Fri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnHelpdesk agents will be able to request device diagnostics during an attended Remote Help session on Windows. After the person receiving help consents, the agent will be able to review diagnostic information, such as system details and resource usage, to…https://learn.microsoft.com/en-us/intune/whats-new/in-development#scope-tags-support-for-endpoint-privilege-management-reportshttps://learn.microsoft.com/en-us/intune/whats-new/in-development#scope-tags-support-for-endpoint-privilege-management-reportsFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnWe're fixing how scope tags work with Endpoint Privilege Management (EPM) reports. With this change, EPM reports will respect the report viewer's assigned scope and display the details for only the users and devices that the report user is scoped…https://learn.microsoft.com/en-us/intune/whats-new/in-development#remote-help-support-in-gcchhttps://learn.microsoft.com/en-us/intune/whats-new/in-development#remote-help-support-in-gcchFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnYou'll be able to use Remote Help in US Government Community Cloud High (GCCH) environments. This expansion extends the same secure, cloud-based remote assistance capabilities currently available in GCC to GCCH tenants. IT support staff will be able to establish…https://learn.microsoft.com/en-us/intune/whats-new/in-development#plan-for-change-user-alerts-on-ios-for-when-screen-capture-actions-are-blockedhttps://learn.microsoft.com/en-us/intune/whats-new/in-development#plan-for-change-user-alerts-on-ios-for-when-screen-capture-actions-are-blockedFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnIn an upcoming version (20.3.0) of the Intune App SDK and Intune App Wrapping Tool for iOS, support is added to alert users when a screen capture action (including recording and mirroring) is detected in a managed app. The alert…https://learn.microsoft.com/en-us/intune/whats-new/in-development#plan-for-change-intune-is-moving-to-support-macos-15-and-higher-later-this-yearhttps://learn.microsoft.com/en-us/intune/whats-new/in-development#plan-for-change-intune-is-moving-to-support-macos-15-and-higher-later-this-yearFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnLater in calendar year 2026, we expect macOS Golden Gate 27 to be released by Apple. Microsoft Intune, the Company Portal app, and the Intune mobile device management agent support macOS 15 and later. Since the Company Portal app for…https://learn.microsoft.com/en-us/intune/whats-new/in-development#plan-for-change-new-settings-for-apple-ai-features-genmojis-writing-tools-screen-capturehttps://learn.microsoft.com/en-us/intune/whats-new/in-development#plan-for-change-new-settings-for-apple-ai-features-genmojis-writing-tools-screen-captureFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnToday, the Apple AI features for Genmojis, Writing tools, and screen capture are blocked when the app protection policy (APP) "Send Org data to other apps" setting is configured to a value other than "All apps". For more details on…https://learn.microsoft.com/en-us/intune/whats-new/in-development#plan-for-change-new-intune-connector-for-deploying-microsoft-entra-hybrid-joined-devices-using-windows-autopilothttps://learn.microsoft.com/en-us/intune/whats-new/in-development#plan-for-change-new-intune-connector-for-deploying-microsoft-entra-hybrid-joined-devices-using-windows-autopilotFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnAs part of Microsoft's Secure Future Initiative, we recently released an update to the Intune Connector for Active Directory to use a Managed Service Account instead of a local SYSTEM account for deploying Microsoft Entra hybrid joined devices with Windows…https://learn.microsoft.com/en-us/intune/whats-new/in-development#plan-for-change-intune-is-moving-to-support-iosipados-18-and-laterhttps://learn.microsoft.com/en-us/intune/whats-new/in-development#plan-for-change-intune-is-moving-to-support-iosipados-18-and-laterFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnLater in calendar year 2026, we expect iOS 27 and iPadOS 27 to be released by Apple. Microsoft Intune, including the Intune Company Portal and Intune app protection policies (APP, also known as MAM), requires iOS 17/iPadOS 17 and higher…https://learn.microsoft.com/en-us/intune/whats-new/in-development#plan-for-change-implement-strong-mapping-for-scep-and-pkcs-certificateshttps://learn.microsoft.com/en-us/intune/whats-new/in-development#plan-for-change-implement-strong-mapping-for-scep-and-pkcs-certificatesFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnWith the May 10, 2022, Windows update ( KB5014754 ), changes were made to the Active Directory Kerberos Key Distribution (KDC) behavior in Windows Server 2008 and later versions to mitigate elevation of privilege vulnerabilities associated with certificate spoofing. Windows…https://learn.microsoft.com/en-us/intune/whats-new/in-development#plan-for-change-google-play-strong-integrity-definition-update-for-android-13-or-abovehttps://learn.microsoft.com/en-us/intune/whats-new/in-development#plan-for-change-google-play-strong-integrity-definition-update-for-android-13-or-aboveFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnGoogle recently updated the definition of "Strong Integrity" for devices running Android 13 or above, requiring hardware-backed security signals and recent security updates. For more information, see the Android Developers Blog: Making the Play Integrity API faster, more resilient, and…https://learn.microsoft.com/en-us/intune/whats-new/in-development#plan-for-change-blocking-screen-capture-in-the-latest-intune-app-sdk-for-ios-and-intune-app-wrapping-tool-for-ioshttps://learn.microsoft.com/en-us/intune/whats-new/in-development#plan-for-change-blocking-screen-capture-in-the-latest-intune-app-sdk-for-ios-and-intune-app-wrapping-tool-for-iosFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnWe recently released updated versions of the Intune App SDK and the Intune App Wrapping Tool. Included in these releases (v19.7.5+ for Xcode 15 and v20.2.0+ for Xcode 16) is the support for blocking screen capture, Genmojis, and writing tools…https://learn.microsoft.com/en-us/intune/whats-new/in-development#noticeshttps://learn.microsoft.com/en-us/intune/whats-new/in-development#noticesFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnThese notices provide important information that can help you prepare for future Intune changes and features.https://learn.microsoft.com/en-us/intune/whats-new/in-development#new-endpoint-security-template-for-microsoft-defender-for-endpoint-safe-deployment-settingshttps://learn.microsoft.com/en-us/intune/whats-new/in-development#new-endpoint-security-template-for-microsoft-defender-for-endpoint-safe-deployment-settingsFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnWe're working on a new endpoint security template in Intune dedicated to Microsoft Defender for Endpoint (MDE) safe deployment settings. This will give you a focused, purpose-built policy for managing how MDE updates roll out across your Windows devices. Microsoft…https://learn.microsoft.com/en-us/intune/whats-new/in-development#new-linux-antivirus-settings-for-microsoft-defender-for-endpointhttps://learn.microsoft.com/en-us/intune/whats-new/in-development#new-linux-antivirus-settings-for-microsoft-defender-for-endpointFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnWe're adding a new Microsoft Defender Updates template for Linux endpoint security antivirus policies. This template will include four new settings for managing Microsoft Defender for Endpoint agent auto-update behavior on Linux devices attached via MDE attach. You will be…https://learn.microsoft.com/en-us/intune/whats-new/in-development#mark-windows-devices-noncompliant-when-prohibited-ai-agents-are-discoveredhttps://learn.microsoft.com/en-us/intune/whats-new/in-development#mark-windows-devices-noncompliant-when-prohibited-ai-agents-are-discoveredFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnAutomatically mark Windows devices as noncompliant when prohibited local AI agents, such as OpenClaw, are discovered on the device. As an admin, you'll be able to configure a list of prohibited agents in a Windows compliance policy. When a prohibited…https://learn.microsoft.com/en-us/intune/whats-new/in-development#maintenance-windows-for-updates-on-windows-devices-https://learn.microsoft.com/en-us/intune/whats-new/in-development#maintenance-windows-for-updates-on-windows-devices-Fri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnMicrosoft Intune will introduce maintenance windows to help you schedule firmware, driver, and operating system updates on Windows devices. You'll be able to choose supported update operations and configure a start date, start time, duration, and repeat schedule. You'll create…https://learn.microsoft.com/en-us/intune/whats-new/in-development#just-in-time-registration-automatically-enabled-for-eligible-iosipados-tenants-https://learn.microsoft.com/en-us/intune/whats-new/in-development#just-in-time-registration-automatically-enabled-for-eligible-iosipados-tenants-Fri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnMicrosoft Intune will automatically enable just-in-time (JIT) registration for eligible iOS/iPadOS tenants with the 2611 release. This change will apply to tenants with Microsoft Authenticator deployed as a required app and an existing device single sign-on (SSO) extension policy that…https://learn.microsoft.com/en-us/intune/whats-new/in-development#jit-registration-reminder-during-apple-mdm-push-certificate-renewal-for-ios-and-ipados-https://learn.microsoft.com/en-us/intune/whats-new/in-development#jit-registration-reminder-during-apple-mdm-push-certificate-renewal-for-ios-and-ipados-Fri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnBeginning with the November 2026 release, Intune will display a new acknowledgment when you renew an Apple MDM push certificate in the Microsoft Intune admin center. The acknowledgment will remind you to configure just-in-time (JIT) registration for iOS and iPadOS…https://learn.microsoft.com/en-us/intune/whats-new/in-development#intune-moving-to-support-android-10-and-later-for-user-based-management-methods-in-october-2024https://learn.microsoft.com/en-us/intune/whats-new/in-development#intune-moving-to-support-android-10-and-later-for-user-based-management-methods-in-october-2024Fri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnIn October 2024, Intune supports Android 10 and later for user-based management methods, which includes: Android Enterprise personally owned work profile Android Enterprise corporate owned work profile Android Enterprise fully managed Android Open Source Project (AOSP) user-based Android device administrator…https://learn.microsoft.com/en-us/intune/whats-new/in-development#disable-mac-address-randomization-on-macos-wi-fi-profileshttps://learn.microsoft.com/en-us/intune/whats-new/in-development#disable-mac-address-randomization-on-macos-wi-fi-profilesFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnOn macOS devices, the Disable MAC address randomization setting will be available for Wi-Fi profiles. Use this setting to disable MAC address randomization on managed macOS devices. When connecting to a network, devices can present a randomized MAC address instead…https://learn.microsoft.com/en-us/intune/whats-new/in-development#device-query-for-multiple-devices-for-app-inventory-on-windowshttps://learn.microsoft.com/en-us/intune/whats-new/in-development#device-query-for-multiple-devices-for-app-inventory-on-windowsFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnAdvanced Analytics will extend device query for multiple devices to cover app inventory data on Windows. Building on the existing multi-device query for hardware inventory, you'll be able to use Kusto Query Language (KQL) to investigate installed applications across your…https://learn.microsoft.com/en-us/intune/whats-new/in-development#declarative-vpp-app-download-in-company-portalhttps://learn.microsoft.com/en-us/intune/whats-new/in-development#declarative-vpp-app-download-in-company-portalFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnThe iOS/iPadOS Company Portal will support Declarative Volume-Purchased Program (VPP) app downloads from the Apps tab. Declarative VPP apps provide an improved end-user experience by reducing app installation latency, allowing for automatic overnight app updates, and providing the end user…https://learn.microsoft.com/en-us/intune/whats-new/in-development#controlled-configuration-for-microsoft-defender-antivirus-on-windowshttps://learn.microsoft.com/en-us/intune/whats-new/in-development#controlled-configuration-for-microsoft-defender-antivirus-on-windowsFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnIntune will support Controlled Configuration for Microsoft Defender Antivirus settings on Windows. When you enable it, antivirus settings delivered by Intune or Microsoft Defender for Endpoint security settings management will take precedence over conflicting settings from Group Policy, Configuration Manager…https://learn.microsoft.com/en-us/intune/whats-new/in-development#configure-quality-update-approvals-and-policies-for-quick-machine-recovery-qmrhttps://learn.microsoft.com/en-us/intune/whats-new/in-development#configure-quality-update-approvals-and-policies-for-quick-machine-recovery-qmrFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnWindows Autopatch currently offers limited control over the deployment of quality updates. Today, the expedite mechanism focuses on deploying the latest security update and doesn't let admins select specific quality update releases or apply different deployment schedules, which can limit…https://learn.microsoft.com/en-us/intune/whats-new/in-development#automate-tasks-with-local-actions-on-android-enterprise-devices-https://learn.microsoft.com/en-us/intune/whats-new/in-development#automate-tasks-with-local-actions-on-android-enterprise-devices-Fri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnMicrosoft Intune will introduce local actions for Android Enterprise fully managed and dedicated devices. With local actions, you'll be able to automate tasks directly on a device by configuring actions that run in response to supported events. Events will include…https://learn.microsoft.com/en-us/intune/whats-new/in-development#agentic-identity-for-the-policy-configuration-agent-public-previewhttps://learn.microsoft.com/en-us/intune/whats-new/in-development#agentic-identity-for-the-policy-configuration-agent-public-previewFri, 06 Nov 2026 02:33:01 +0000Intune · Microsoft LearnThe Intune Policy Configuration Agent will update to use a Microsoft Entra agentic identity instead of a human user identity. This enables the agent to run policy configuration actions securely and independently. For existing agents, admins will be able to…https://techcommunity.microsoft.com/blog/intunecustomersuccess/new-policy-implementation-and-web-enrollment-for-android-personally-owned-work-p/4370417https://techcommunity.microsoft.com/blog/intunecustomersuccess/new-policy-implementation-and-web-enrollment-for-android-personally-owned-work-p/4370417Thu, 29 Oct 2026 21:49:46 +0000Microsoft Tech CommunityWe’re happy to announce two improvements for the management of Android personally owned work profile devices with Microsoft Intune, which is now generally...https://techcommunity.microsoft.com/t5/microsoft-intune-blog/what-s-new-in-microsoft-intune-october/ba-p/4537396https://techcommunity.microsoft.com/t5/microsoft-intune-blog/what-s-new-in-microsoft-intune-october/ba-p/4537396Thu, 29 Oct 2026 18:00:00 +0000Microsoft Intune BlogMost changes to a device happen without the admin watching. A user turns off BitLocker to troubleshoot something. Patch Tuesday arrives. An agent starts working on a Cloud PC from an admin-configured pool. October’s new capabilities give admins more say over who…https://techcommunity.microsoft.com/t5/intune-customer-success/establish-a-macos-security-baseline-with-mscp-and-microsoft/ba-p/4568222https://techcommunity.microsoft.com/t5/intune-customer-success/establish-a-macos-security-baseline-with-mscp-and-microsoft/ba-p/4568222Wed, 28 Oct 2026 17:43:02 +0000Intune Customer SuccessBy: Iris Yuning Ye, Product Manager | Microsoft Intune Organizations that manage Mac devices need a reliable way to evaluate their security posture against a recognized baseline. Microsoft Intune custom compliance provides the device compliance evaluation policy, and the National Institute of…https://learn.microsoft.com/en-us/intune/whats-new/#updated-windows-support-for-administrator-protection-settingshttps://learn.microsoft.com/en-us/intune/whats-new/#updated-windows-support-for-administrator-protection-settingsMon, 26 Oct 2026 00:00:00 +0000Intune · Microsoft Learn[Device security] Microsoft Intune now supports two Administrator protection settings in the settings catalog on Windows 11 versions 24H2 and 25H2. Admins can configure the Administrator Approval Mode type and choose the elevation prompt behavior used with Administrator protection. For…https://learn.microsoft.com/en-us/intune/whats-new/#setup-assistant-legacy-deprecation-for-apple-enrollment-profileshttps://learn.microsoft.com/en-us/intune/whats-new/#setup-assistant-legacy-deprecation-for-apple-enrollment-profilesMon, 26 Oct 2026 00:00:00 +0000Intune · Microsoft Learn[Device enrollment] Intune has ended support for Setup Assistant (legacy) authentication for iOS/iPadOS and macOS automated device enrollment (ADE) with user affinity to align with modern authentication standards. Existing profiles are automatically updated to Setup Assistant with modern authentication, and…https://learn.microsoft.com/en-us/intune/whats-new/#stig-audit-baselines-for-windows-devices-in-commercial-tenantshttps://learn.microsoft.com/en-us/intune/whats-new/#stig-audit-baselines-for-windows-devices-in-commercial-tenantsMon, 26 Oct 2026 00:00:00 +0000Intune · Microsoft Learn[Device security] Microsoft Intune commercial tenants can now audit Windows devices against Security Technical Implementation Guide (STIG) recommendations. Review per-setting and per-device audit results to identify configuration gaps and prioritize remediation. The baseline evaluates supported automated checks without changing device…https://learn.microsoft.com/en-us/intune/whats-new/#push-notification-support-update-for-windows-deviceshttps://learn.microsoft.com/en-us/intune/whats-new/#push-notification-support-update-for-windows-devicesMon, 26 Oct 2026 00:00:00 +0000Intune · Microsoft Learn[Device management] We've improved connectivity for scenarios that rely on push notifications including Device actions , Win32 apps , PowerShell scripts and Remediations . For the best experience, we recommend updating firewall rules to include this new endpoint: *.trouter.communications.svc.cloud.microsoft For…https://learn.microsoft.com/en-us/intune/whats-new/#manage-referenced-apps-on-aosp-deviceshttps://learn.microsoft.com/en-us/intune/whats-new/#manage-referenced-apps-on-aosp-devicesMon, 26 Oct 2026 00:00:00 +0000Intune · Microsoft Learn[App management] Microsoft Intune now supports AOSP referenced app type that lets you identify an app by package name instead of uploading an APK on AOSP devices. You can assign Required or Uninstall intent to OEM, preloaded, or externally deployed…https://learn.microsoft.com/en-us/intune/whats-new/#legacy-apple-mdm-software-update-workloads-removed-from-intunehttps://learn.microsoft.com/en-us/intune/whats-new/#legacy-apple-mdm-software-update-workloads-removed-from-intuneMon, 26 Oct 2026 00:00:00 +0000Intune · Microsoft Learn[Device configuration] Microsoft Intune is removing legacy Apple MDM software update workloads after Apple retired the underlying commands and payloads in OS 27. Admins should use Apple declarative device management update policies to continue managing software updates. This keeps Intune…https://learn.microsoft.com/en-us/intune/whats-new/#faster-delivery-of-windows-scriptshttps://learn.microsoft.com/en-us/intune/whats-new/#faster-delivery-of-windows-scriptsMon, 26 Oct 2026 00:00:00 +0000Intune · Microsoft Learn[Scripts] Microsoft Intune now uses push notifications for admin-initiated and service-side changes to Windows scripts. Managed devices can check in sooner after script changes, reducing delivery and refresh delays compared with waiting for the normal polling interval. This update improves…https://learn.microsoft.com/en-us/intune/whats-new/#enforce-routes-capability-in-apple-vpn-profileshttps://learn.microsoft.com/en-us/intune/whats-new/#enforce-routes-capability-in-apple-vpn-profilesMon, 26 Oct 2026 00:00:00 +0000Intune · Microsoft Learn[Device configuration] Microsoft Intune now supports Apple's Enforce Routes capability in iOS/iPadOS and macOS VPN profiles. Admins define routing behavior with Include all networks and Exclude local networks , and Intune automatically derives the appropriate Enforce Routes configuration. This helps…https://learn.microsoft.com/en-us/intune/whats-new/#certificate-connector-health-monitoring-in-the-microsoft-intune-admin-centerhttps://learn.microsoft.com/en-us/intune/whats-new/#certificate-connector-health-monitoring-in-the-microsoft-intune-admin-centerMon, 26 Oct 2026 00:00:00 +0000Intune · Microsoft Learn[Monitor and troubleshoot] The Certificate Connector for Microsoft Intune now surfaces health and status signals in the Microsoft Intune admin center, so you can spot certificate-issuance problems early. Clear indicators call out common failure conditions — such as the connector…