Agent runtime protection settings are generally available

What changed

Administrators can use the template to manage supported runtime protection settings for Windows devices without the preview designation, aligning Intune policy management with the Microsoft Defender for Endpoint general availability release. We have also added a new setting called AI agent runtime inspection to be configured in the template.

Why it matters

The change can alter security posture, authentication, exposure or compatibility and therefore needs an owned validation path.

Known limitations

• Availability, prerequisites and rollout scope remain authoritative in the linked Microsoft documentation.

Now check

• Map the announced change to affected Intune workloads and supported platforms
• Pilot the exact profile, app or device action named by Microsoft
• Review policy, app, enrollment and support reports before rollout