What’s new in Microsoft Intune – September

Microsoft's September Intune roundup combines phased Windows app and policy deployments, the consolidated device view, GCC High and DoD capability expansion, and Android lifecycle improvements.

What changed

Intune deployments enter public preview with reusable rings, exclusions, timing, pause, resume and cancel controls for Win32 apps, Enterprise App Catalog apps, Settings Catalog policies and Endpoint Security policies. The default device page consolidates details, activity, reports and permitted actions; Android adds bulk eSIM actions and protected shared-device call handling.

Technical details

Phased Intune deployments for supported Windows apps and policies
Consolidated cross-platform device investigation view
GCC High and DoD capability expansion
Bulk Android eSIM actions and Managed Home Screen call handling

Why it matters

The changes affect rollout governance, help-desk workflows, government-cloud feature availability and Android provisioning or retirement, so each capability needs separate tenant, RBAC and device validation.

Known limitations

Availability, prerequisites and rollout scope remain authoritative in the linked Microsoft documentation.

Now check

Pilot reusable deployment rings with exclusions, activation timing, pause, resume and cancel controls
Validate the default device page with representative RBAC roles, reports and supported device actions
Confirm licensing and availability before enabling Enterprise Application Management, Cloud PKI or Remote Help in GCC High or DoD
Test Android 15 bulk eSIM activation, wipe retention or removal, and Managed Home Screen session-PIN behavior on shared devices