What's new in Microsoft Security: November 2025

Configure Windows Backup for Organizations

Windows Backup for Organizations is generally available in Microsoft Intune. With this feature, you can back up your organization's Windows settings and restore them on a Microsoft Entra joined device. Backup settings are configurable in the Microsoft Intune…

DocsEnable Windows Backup for Organizations

Enable Windows Backup for Organizations Enable Windows backup and restore in Intune for employees or students.

Updated Service Level Objectives for Enterprise App Management

Service Level Objectives (SLOs) are now available in Enterprise App Management (EAM) to provide clearer expectations for when app updates become available in the Enterprise App Catalog. SLO processing timelines begin when Intune first receives the updated app…

DocsMicrosoft Intune Enterprise Application ManagementNew

Microsoft Intune Enterprise Application Management Learn about Enterprise App Management and the Enterprise App Catalog in Microsoft Intune.

Intune support for iVerify as a mobile threat defense partner

You can now use iVerify Enterprise as a mobile threat defense partner (MTD) for enrolled devices that run the following platforms: Android 9.0 and later iOS/iPadOS 15.0 and later To learn more about this support, see Set up…

DocsiVerify Enterprise Mobile Threat Defense with Intune

iVerify Enterprise Mobile Threat Defense with Intune Set up iVerify Enterprise Mobile Security with Microsoft Intune to control mobile device access to your corporate resources.

Settings available in both Templates and Settings Catalog for Android Enterprise

Some settings that were only available in Templates are now also supported in the settings catalog. The settings catalog lists all the settings you can configure in a device policy, and all in one place. For more information…

DocsCreate a policy using settings catalog in Microsoft IntuneNew·Android settings catalog in Microsoft Intune

Create a policy using settings catalog in Microsoft Intune Use settings catalog in Microsoft Intune to configure thousands of settings for Windows 10/11, iOS/iPadOS, macOS, and Android client devices, including Microsoft Office apps, Microsoft Edge, administrative templates (ADMX), and more. Add these settings in a device configuration profile to…

Scope tag enforcement for Endpoint Privilege Management elevation requests

When viewing Endpoint Privilege Management elevation requests , applicable scope tags are now enforced. This means administrators can view and manage only the requests for devices and users that fall within their assigned scope. This change helps…

DocsUse EPM support approvals for file elevation requests with Intune

Use EPM support approvals for file elevation requests with Intune Manage support approvals for elevation requests when you use Endpoint Privilege Management for Microsoft Intune.

Reset Managed Google Play store mode to Basic

You can now reset the Managed Google Play store layout from Custom back to Basic in the Intune admin center ( Apps > All apps > Create Managed Google Play app ). In Basic mode, all approved apps…

DocsAdd and Assign Managed Google Play Apps to Android Enterprise DevicesUpdated

Add and Assign Managed Google Play Apps to Android Enterprise Devices Understand how to synchronize and assign apps to Android Enterprise devices from the Managed Google Play store.

Query and results improvements to Explorer feature with Security Copilot in Intune

With your Security Copilot license, you can query your Intune data using the Explorer in Intune feature. When you create your queries, you have more filter options. For example: Queries with a number operator let you choose equal…

DocsExplore Intune data with natural language and take action

Explore Intune data with natural language and take action In Microsoft Intune, use Explorer to query your data in natural language and run built-in queries that match your request. Copilot summarizes the results, and provides recommendations and actions based on the query results. You can also create policies that…

New prompts available to explore your Intune data

You can use Security Copilot in Intune to explore new prompts related to your data using natural language. Use these new prompts to view data on: Users and groups Role based access control (RBAC) Audit logs When you…

DocsExplore Intune data with natural language and take action

Explore Intune data with natural language and take action In Microsoft Intune, use Explorer to query your data in natural language and run built-in queries that match your request. Copilot summarizes the results, and provides recommendations and actions based on the query results. You can also create policies that…

New opt-in upgrade allows existing customers to move from managed Google Play accounts to Microsoft Entra ID accounts

Microsoft Intune offers a new opt-in upgrade that allows existing Android Enterprise customers to move from using managed Google Play accounts to using Microsoft Entra ID accounts for Android device management. You are eligible for upgrade if you…

DocsPost New onboarding flow to managing Android Enterprise devices with …·Connect Intune account to managed Google Play account

New onboarding flow to managing Android Enterprise devices with Microsoft Intune Transform your Android Enterprise management with Microsoft Intune's streamlined onboarding experience.

New cut, copy, and paste options for Windows app protection

Intune adds two new values to the Allow cut, copy and paste for setting in Windows app protection policies (starting with Microsoft Edge) to give admins more control over data movement: Org data destinations and any source: Users…

DocsApp Protection Policies Overview

App Protection Policies Overview Learn how Microsoft Intune app protection policies help protect your company data and prevent data loss.

New Assist Content Sharing setting in the Android Enterprise settings catalog

The Settings Catalog lists all the settings you can configure in a device policy, and all in one place. For more information about configuring Settings Catalog profiles in Intune, see Create a policy using settings catalog . There…

DocsCreate a policy using settings catalog in Microsoft IntuneNew·Control AI features on Android Enterprise devices

Create a policy using settings catalog in Microsoft Intune Use settings catalog in Microsoft Intune to configure thousands of settings for Windows 10/11, iOS/iPadOS, macOS, and Android client devices, including Microsoft Office apps, Microsoft Edge, administrative templates (ADMX), and more. Add these settings in a device configuration profile to…

More volume options available in Managed Home Screen

Admins can now enable more volume controls in the Managed Home Screen (MHS) app for Android Enterprise dedicated and fully managed devices. In addition to the existing media volume control, this update introduces configuration settings to show or…

DocsConfigure the Microsoft Managed Home Screen AppNew

Configure the Microsoft Managed Home Screen App Learn how to configure the Microsoft Managed Home Screen app.

Microsoft Tunnel access by rooted Android devices is blocked by the Microsoft Defender client

Microsoft Tunnel uses the Microsoft Defender client app to provide Android devices access to tunnel. The latest version of the Defender for Endpoint client can now detect when a device is rooted. If a device is determined to…

DocsLearn about the Microsoft Tunnel VPN solution for Microsoft Intune

Learn about the Microsoft Tunnel VPN solution for Microsoft Intune Learn about the Microsoft Tunnel Gateway, a VPN server for Intune that runs on Linux. With Microsoft Tunnel, cloud-based devices you manage with Intune can reach your on-premises infrastructure.

Incomplete user enrollment report removed

The incomplete user enrollments report has been removed and is no longer functional in the Microsoft Intune admin center. The following corresponding APIs have also been removed from Microsoft Intune: getEnrollmentAbandonmentDetailsReport getEnrollmentAbandonmentSummaryReport getEnrollmentFailureDetailsReport Scripts or automation using these…

DocsView enrollment reports

View enrollment reports Monitor and troubleshoot issues with enrollment restrictions and enrollment status page assignments.

Device Management Type assignment filter property supports Android enrollment options for Managed Devices

When you create a policy in Intune, you can use assignment filters to assign a policy based on rules you create. You can create a rule using different properties , like deviceManagementType . For managed devices, the Device…

DocsAssignment filter properties and operators referenceNew·Create assignment filters in Microsoft Intune

Assignment filter properties and operators reference Reference guide for device and app properties, operators, and rule syntax when creating assignment filters in Microsoft Intune. Includes examples and supported values.

Security Copilot in Intune agents are available for public preview

Security Copilot agents in Intune are AI-powered assistants that specialize in specific scenarios. The Intune agents are available in the Intune admin center > Agents , and are available for Security Copilot users. The following Intune agents are…

DocsSecurity Copilot Agents in Intune·Change Review Agent Overview·Get Started with the Device Offboarding Agent·Learn about Policy Configuration Agent and set it up

Security Copilot Agents in Intune Discover how Microsoft Security Copilot enhances Microsoft Intune through AI-powered security agents. Learn about available agents and explore their capabilities.

Manage tasks and requests from the centralized Admin tasks node in Microsoft Intune (public preview)

The new Admin tasks node in the Intune admin center provides a centralized view to discover, organize, and act on security tasks and user elevation requests. Located under Tenant Administration , this unified experience supports search, filtering, and…

DocsCentrally manage Admin TasksUpdated

Centrally manage Admin Tasks Centrally manage admin tasks in Microsoft Intune. Use the unified Admin tasks view to organize and act on administrative tasks from Device Offboarding, Endpoint Privilege Management, and more.

Soft-deleted Microsoft Entra groups now visible in Intune

This feature is in public preview. For more information, see Public preview in Microsoft Intune . Microsoft Intune now displays soft-deleted Microsoft Entra groups in the Intune admin center. When a group is soft-deleted, its assignments no longer…

DocsPublic preview overview in Microsoft Intune·Include and Exclude App Assignments in Microsoft Intune

Public preview overview in Microsoft Intune Learn about public preview features in Microsoft Intune, and see an example. See a list of limitations, restrictions, and more in the Microsoft Intune admin center.

Edge security update: Microsoft released the latest Microsoft Edge Stable Channel (Version 142.0.3595.90) which incorporates the latest Securi (1 CVE)

Microsoft released the latest Microsoft Edge Stable Channel (Version 142.0.3595.90) which incorporates the latest Security Updates of the Chromium project. The Chromium team reported that CVE-2025-13223 has an exploit in the wild, and this update contains a fix for it…

DocsCVE-2025-13223·Security Update Guide

Edge security update: Microsoft released the latest Microsoft Edge Stable Channel (Version 142.0.3595.80) which incorporates the latest Securi

Microsoft released the latest Microsoft Edge Stable Channel (Version 142.0.3595.80) which incorporates the latest Security Updates of the Chromium project. For more information, see the Security Update Guide .

DocsSecurity Update Guide

Edge security update: Microsoft released the latest Microsoft Edge Android Stable Channel (Version 142.0.3595.66) which incorporates the lates

Microsoft released the latest Microsoft Edge Android Stable Channel (Version 142.0.3595.66) which incorporates the latest Security Updates of the Chromium project. For more information, see the Security Update Guide .

DocsSecurity Update Guide

Edge security update: Microsoft released the latest Microsoft Edge Stable Channel (Version 142.0.3595.65) which incorporates the latest Securi

Microsoft released the latest Microsoft Edge Stable Channel (Version 142.0.3595.65) which incorporates the latest Security Updates of the Chromium project. For more information, see the Security Update Guide .

DocsSecurity Update Guide