Intune 2603 adds Apple DDM and recovery lock controls

Microsoft Intune service release 2603 adds Apple declarative device management for line-of-business apps, macOS Recovery Lock controls, a supported Android Enterprise OEMConfig app and expanded Remote Help inventory details.

What changed

The March release adds policy-based Apple app delivery, recovery protection and more verifiable enrollment and Remote Help inventory controls.

Technical details

Apple DDM for required line-of-business apps
macOS Recovery Lock policy and rotation
Inventus Android Enterprise OEMConfig support
Full Remote Help client version in inventory

Why it matters

The March baseline remains inside the 180-day history window and is relevant when comparing current platform behavior with older pilot policies.

Known limitations

Recovery Lock requires supported macOS permissions and enrollment
Individual capabilities have platform and rollout prerequisites

Now check

Review 2603 changes against current Apple and Android enrollment profiles
Pilot Recovery Lock and DDM with documented rollback
Confirm Remote Help inventory and management-agent versions