2026-10-26
Manage referenced apps on AOSP devices
Microsoft Intune now supports AOSP referenced app type that lets you identify an app by package name instead of uploading an APK on AOSP devices.
THE ENDPOINT NEWSROOM
Microsoft Intune features, application delivery, compliance and endpoint management updates.
IN FOCUS / Intune
2026-10-28
By: Iris Yuning Ye, Product Manager | Microsoft Intune Organizations that manage Mac devices need a reliable way to evaluate their security posture against a recognized baseline.
Read the update →THE LATEST
2026-10-26
Microsoft Intune now supports AOSP referenced app type that lets you identify an app by package name instead of uploading an APK on AOSP devices.
2026-10-26
Microsoft Intune is removing legacy Apple MDM software update workloads after Apple retired the underlying commands and payloads in OS 27.
2026-10-26
Microsoft Intune now includes two Administrator protection settings in endpoint security Account protection policies.
2026-10-26
We've improved connectivity for scenarios that rely on push notifications including Device actions , Win32 apps , PowerShell scripts and Remediations .
2026-10-26
Microsoft Intune now adds Apple OS 27 declarative device management status data to device inventory.
2026-10-26
Microsoft Intune now supports two Administrator protection settings in the settings catalog on Windows 11 versions 24H2 and 25H2.
2026-10-26
Microsoft Intune's endpoint security template for Microsoft Defender for Endpoint agent runtime protection settings is now generally available.
2026-10-26
The Certificate Connector for Microsoft Intune now surfaces health and status signals in the Microsoft Intune admin center, so you can spot certificate-issuance problems early.
2026-10-26
Microsoft Intune scoped permissions for role-based access control are now generally available.
2026-10-26
Microsoft Intune now uses push notifications for admin-initiated and service-side changes to Windows scripts.
2026-10-26
Microsoft Intune now supports Apple's Enforce Routes capability in iOS/iPadOS and macOS VPN profiles.
2026-10-26
Intune has ended support for Setup Assistant (legacy) authentication for iOS/iPadOS and macOS automated device enrollment (ADE) with user affinity to align with modern authentication standards.
2026-10-26
Use a bulk device action to activate eSIMs on up to 100 supported devices with the same carrier activation server URL.
2026-10-26
Use a bulk device action to wipe up to 100 corporate-owned fully managed (COBO), corporate-owned dedicated (COSU), or corporate-owned work profile (COPE) devices.
2026-10-19
Intune now supports requiring managed Google Account authentication on supported Android Enterprise devices after upgrading the Managed Google Play enterprise to a managed Google domain enterprise.
2026-10-19
Intune can now assign Apple VPP apps marked with unlimited licenses on iOS/iPadOS and macOS.
2026-10-16
Today, some organizations use an EnterpriseEnrollment DNS CNAME record to automatically direct devices to the Microsoft enrollment service during Windows MDM-only enrollment.
06.10.2026
The Windows 11 26H2 security baseline is available in Intune. Existing profiles do not update automatically. Review customizations and overlapping policies before piloting the new version.
2026-10-05
Remote Help is now available in US Government Community Cloud High (GCCH) environments.
2026-09-30
Windows 11, version 26H2 is now available, and Microsoft Intune provides day zero support for validated Windows policy settings in the Settings Catalog.
2026-09-30
Microsoft Intune will add Apple OS 27 declarative device management (DDM) status data to device inventory.
2026-09-30
Intune will remove legacy Apple MDM software update workloads after Apple retires the underlying MDM update commands and payloads.
2026-09-30
We’re adding two settings to Intune's Endpoint security Account Protection profile .
2026-09-29
Microsoft's September Intune roundup combines phased Windows app and policy deployments, the consolidated device view, GCC High and DoD capability expansion, and Android lifecycle improvements.
2026-09-24
With Apple's release of OS 27, we’ve been working hard to ensure that Microsoft Intune provides support for Apple’s latest operating systems (OS) so that existing features work as expected, and adding support for new features that were introduced at WWDC.
2026-09-24
Microsoft Cloud PKI is now available for Microsoft Intune tenants in the Microsoft Government Community Cloud High (GCC High) environment.
2026-09-24
Microsoft Intune now uses push notifications for admin-initiated and service-side changes to Win32 apps.
2026-09-24
Microsoft Dragon Copilot by Microsoft Corporation is now available as a protected app for Microsoft Intune.
2026-09-24
Microsoft Intune now helps prevent users from bypassing Managed Home Screen (MHS) authentication when they access protected activities in MAM-integrated apps.
2026-09-24
Microsoft Intune Management Extension now checks for Windows app assignments immediately after the Enrollment Status Page (ESP) completes.
2026-09-24
Microsoft Intune now includes new Apple Settings Catalog options for supported iOS/iPadOS and macOS devices.
2026-09-24
Microsoft Intune now supports assignment filters for Android Enterprise and Android Open Source Project (AOSP) Settings Catalog policies.
2026-09-24
Microsoft Intune now supports automatically opening Microsoft Defender for Endpoint during out-of-box setup for supported corporate-owned Android Enterprise devices.
2026-09-24
Microsoft Intune now includes the Device features tour Apple OS 27 Setup Assistant skip key in Automated Device Enrollment profiles.
2026-09-24
Microsoft Intune now supports an optional upgrade for tenants that connected Android Enterprise with a Gmail account.
2026-09-24
Microsoft Intune now supports bulk eSIM actions for corporate-owned Android Enterprise devices.
2026-09-24
Microsoft Intune now requires iOS/iPadOS 18 or later for standard device-management, Company Portal, and app-protection scenarios.
2026-09-24
Microsoft Intune now uses the new single device page as the default experience for all admins, and the previous device page is no longer available.
2026-09-24
Microsoft Intune now includes Microsoft Defender for Endpoint AI agent runtime protection settings in the new endpoint security template for Windows.
2026-09-24
Microsoft Intune now supports bring-your-own connector functionality for MDM compliance partners.
2026-09-21
Microsoft Intune now supports deployment plans for staged application and policy rollouts.
2026-09-18
Microsoft Intune now supports client-driven compliance evaluation for Windows devices.
2026-09-16
By: Maggie Dakeva, Senior Product Manager - Microsoft Intune Organizations have spent years refining Windows Autopilot deployments.
2026-09-01
You'll be able to configure Microsoft Defender for Endpoint to open automatically during out-of-box setup for supported corporate-owned Android Enterprise devices.
2026-09-01
Windows Autopatch currently offers limited control over the deployment of quality updates.
2026-09-01
For Android Enterprise dedicated devices using Managed Home Screen (MHS) with Microsoft Entra shared device mode, Intune will allow admins to requiring users to complete MHS authentication state before allowing protected activities in MAM-integrated apps.
2026-09-01
The iOS/iPadOS Company Portal will support Declarative Volume-Purchased Program (VPP) app downloads from the Apps tab.
2026-09-01
Microsoft Intune will add new Apple settings for supported iOS/iPadOS and macOS devices.
2026-09-01
Microsoft Intune will update its minimum supported macOS version after Apple releases macOS 27.
2026-09-01
Microsoft Intune will update its minimum supported operating-system version after Apple releases iOS and iPadOS 27.
2026-09-01
Starting with Intune's September (2609) release, the new single device page in the Intune admin center will become the default experience for all admins, and the previous device page will no longer be available.
2026-09-01
Deployments and Deployments plans will give you a new way to roll out apps and configuration policies in Intune.
2026-09-01
You'll be able to use Microsoft Intune bulk device actions to activate eSIMs on up to 100 supported corporate-owned Android Enterprise devices running Android 15 or later by using a carrier activation server URL.
2026-09-01
You'll be able to use Remote Help in US Government Community Cloud High (GCCH) environments.
2026-08-31
By: Per Larsen - Senior Product Manager | Microsoft Intune For many organizations, Group Policy Objects (GPOs) remain an important part of Windows configuration.
2026-08-27
By: Maggie Dakeva, Senior Product Manager - Microsoft Intune We’ve heard organizations want Windows deployment to be simple for employees and predictable for IT admins.
25.08.2026
Microsoft Intune service release 2608 adds unattended Remote Help for physical Windows devices and new Apple, Android, Windows, Linux and Windows 365 management capabilities.
2026-08-24
Microsoft Intune now includes new Windows settings catalog options across several administrative template refreshes.
2026-08-24
The Microsoft Defender Antivirus template for Linux, which is part of Intune's Endpoint Security Antivirus policy, now includes a new Audit value for the Enforcement level setting.
2026-08-24
Microsoft Intune now includes a security baseline for Windows 365 for Agents Cloud PCs.
2026-08-24
Microsoft Intune now supports a memory scan setting in the Microsoft Defender Antivirus template for Linux endpoint security antivirus policies.
2026-08-24
Microsoft Intune now supports unattended Remote Help sessions on physical Windows devices.
2026-08-24
Microsoft Intune now supports Apple Declarative Device Management (DDM) for required volume purchase program (VPP) apps on devices running iOS/iPadOS 17.
2026-08-24
Microsoft Intune now supports a Screen timeout setting in the Android Enterprise settings catalog, letting you specify how many seconds pass before the screen turns off.
2026-08-24
Microsoft Intune now supports the Block one lock for device and work profile setting in the Android Enterprise settings catalog, letting you require separate locks for the device and work profile instead of a shared one.
2026-08-24
Microsoft Intune now supports the Number of days work profile is allowed to be switched off setting in the Android Enterprise settings catalog, so you can limit how long a work profile stays turned off.
2026-08-24
Microsoft Intune now supports the Remove all eSIMs during a device wipe setting in the Android Enterprise settings catalog.
2026-08-24
Microsoft Intune now supports new Settings Catalog options for testing on the OS 27 betas, covering Declarative Device Management areas such as App Settings , Web Content Filter , and Siri Settings for iOS/iPadOS and macOS.
2026-08-24
Microsoft Intune now includes a settings catalog option for keeping fully managed and dedicated Android device screens on while charging.
2026-08-24
Microsoft Intune now includes Apple OS 27 Setup Assistant skip keys for Liquid Glass and Accessibility Appearance in Automated Device Enrollment profiles.
2026-08-24
The operatingSystemVersion property in assignment filters is now generally available for managed devices and managed apps.
2026-08-24
Microsoft Intune now supports Apple's Enhanced Logging device action on supported supervised devices running a compatible OS release.
2026-08-24
Microsoft Intune now surfaces expanded SIM inventory for corporate-owned Android Enterprise devices, including EIDs, multiple ICCIDs, and activation state.
2026-08-24
Microsoft Intune now supports single-device eSIM activation for corporate-owned Android Enterprise devices running Android 15 and later.
2026-08-24
Microsoft Intune now lets you remove a single eSIM from a corporate-owned Android Enterprise device without wiping it.
2026-08-24
Microsoft Intune now lets you choose whether to preserve or remove eSIMs when wiping one corporate-owned Android Enterprise device.
2026-08-24
Microsoft Intune now supports device inventory for personally owned Android Enterprise devices with a work profile managed by Android Management API.
2026-08-21
Microsoft resolved IT1450132, which could remove an existing Managed Home Screen exit PIN when older Android Enterprise device configuration policies were updated.
28.07.2026
Intune kann ausgewählte Windows Registry-Schlüssel über Device inventory erfassen und damit die tatsächlich vorhandene Gerätekonfiguration anzeigen.
28.07.2026
Der offizielle Microsoft Intune Blog bündelt die Juli-Änderungen mit Agent Security Baselines, benutzerdefinierter macOS-Compliance und Samsung-Firmwaresteuerung.
27.07.2026
Nach einem manuellen Sync zeigt Intune den Status einzelner Workloads für Windows-Geräte statt nur die Sync-Aktion selbst.
27.07.2026
Microsoft Intune service release 2607 adds Samsung Knox E-FOTA management, new Windows settings, improved Windows device sync, custom macOS compliance and regional Microsoft Store app support.
2026-07-27
Intune on-demand Sync now initiates a comprehensive synchronization of configuration policies, apps and scripts on Windows and iOS/iPadOS devices.
13.07.2026
Intune app protection now supports multiple managed accounts in Microsoft Outlook for iOS and iPadOS version 5.2626.0 or later.
02.07.2026
Microsoft kündigt an, die unterstützte Mindestversion später 2026 auf iOS/iPadOS 18 anzuheben.
02.07.2026
Intune bereitet Warnungen für iOS-Apps vor, die mit einem nicht unterstützten Intune App SDK gebaut wurden.
02.07.2026
Microsoft bereitet eine kontrollierte Konfigurationssicht für Defender-Antivirus-Einstellungen über Intune, ConfigMgr und Gruppenrichtlinien vor.
02.07.2026
Microsoft bereitet eine Health-Sicht für Intune Certificate Connectors mit Betriebs- und Konnektivitätssignalen vor.
2026-07-02
For supported Windows devices, Intune supports client-driven compliance evaluation.
29.06.2026
Nach dem Upload einer neueren Version derselben PKG-App verteilt Intune das Update automatisch an Geräte, auf denen Benutzer die Available App bereits installiert haben.
29.06.2026
Microsoft führt ChatGPT neu in der offiziellen Liste der Apps, die Microsoft Intune App Protection Policies unterstützen.
29.06.2026
Enterprise App Management wird auf GCC High und DoD erweitert; Government-Tenants können den Enterprise Catalog für vorpaketierte Microsoft- und Drittanbieter-Apps verwenden.
29.06.2026
Required EAM Apps erkennen neue Versionen im Enterprise Catalog und können diese automatisch auf Zielgeräte verteilen.
29.06.2026
Commercial Microsoft 365 E3 erhält Remote Help, Advanced Analytics und Intune Plan 2; E5 zusätzlich EPM, EAM und Microsoft Cloud PKI.
29.06.2026
Intune stellt eine neue Microsoft-365-Apps-Baseline bereit; bestehende Profile wechseln nicht automatisch auf v2512.
29.06.2026
Die bestehende 25H2 Baseline enthält jetzt Disable Internet Explorer 11 Launch Via COM Automation mit dem Default Enabled.
29.06.2026
Intune ergänzt neue Android-Enterprise-Kontrollen für App Functions, Widgets, Mobilfunk, VPN, Wi-Fi Security, eSIM, SMS, Printing und weitere Gerätefunktionen.
29.06.2026
WPA3-Personal steht als Security Type für verwaltete iOS- und iPadOS-Wi-Fi-Profile zur Verfügung.
29.06.2026
Intune unterstützt Trustd Mobile als Mobile-Threat-Defense-Partner für enrollte Android- und iOS/iPadOS-Geräte.
29.06.2026
Helpdesk-Mitarbeiter können Anwendungen in Azure Virtual Desktop RemoteApp Sessions über Remote Help sicher anzeigen und steuern.
29.06.2026
Microsoft Tunnel Gateway unterstützt Red Hat Enterprise Linux 9.7 mit Podman 5.8.2.
29.06.2026
Das bestehende Intune Antivirus-Profil für Linux erhält Offline Security Intelligence Update und Scheduled Scan Settings.
22.06.2026
MAA-geschützte Änderungen durch Service Principals, Skripte und Drittanbieter-Apps durchlaufen jetzt denselben Approval Workflow wie interaktive Aktionen.
15.06.2026
Intune liefert verwaltete Win32-App-Inhalte nur noch per HTTPS; nicht konforme Connected-Cache-Nodes werden umgangen.
15.06.2026
Neue Apple-ADE-Enrollment-Policies können während der Registrierung die Entra Security Group eines Geräts ermitteln.
08.06.2026
Benutzer können mehrere verwaltete Konten in derselben App verwenden; App Protection Policies gelten getrennt je Konto.
08.06.2026
Das Exit-Lock-Task-Mode-Passwort kann nicht mehr per App Configuration Policy verwaltet werden.
08.06.2026
Apple 26.4 deprecates mehrere Intelligence-Settings im klassischen MDM Restrictions Payload; Intune verweist auf DDM Configurations.
26.05.2026
Intune Administratoren erben Owner-Zugriff und andere Intune RBAC Rollen Contributor-Zugriff auf Copilot in Intune, wenn Intune als Security-Copilot-Datenquelle aktiv ist.
11.05.2026
macOS-Geräte können Platform SSO bereits während Automated Device Enrollment und Setup Assistant registrieren.
04.05.2026
Die erweiterte App Inventory liefert frischere Daten, mehr App-Metadaten und eine gezielte Auswahl der einzubeziehenden Geräte.
27.04.2026
Endpoint Privilege Management unterstützt genehmigungspflichtige Elevation Requests jetzt von allen Benutzern eines Geräts.
27.04.2026
Intune kann festlegen, welche Apps auf verwalteten Android-Enterprise-Geräten als systemweite Credential Provider dienen.
27.04.2026
Apple Vision Pro und Apple TV können ohne User Affinity über Automated Device Enrollment verwaltet werden.
27.04.2026
Intune unterstützt Ubuntu 26.04 LTS; Support für Ubuntu 22.04 LTS endet im August 2026.
30.03.2026
Microsoft Intune service release 2603 adds Apple declarative device management for line-of-business apps, macOS Recovery Lock controls, a supported Android Enterprise OEMConfig app and expanded Remote Help inventory details.