Index
Doc updateThe page date changed to November 2, 2026, and the section announcing general availability of scoped permissions for role-based access control was removed.
Keep up with Microsoft Intune
Daily highlights from Microsoft Learn and Message Center. Browse the archive from 1 January 2026 → About this project →
Day in brief
Intune documents policy-only reporting for MDM Firewall and ASR Rules
The period is guidance-heavy, with the most operationally relevant updates covering reporting limits for MDM-managed Firewall Rules and ASR Rules, device-assigned PowerShell scripts on multi-session devices, Azure Virtual Desktop Multi Session script targeting, and Win32 app delivery endpoints. The remaining edits remove a scoped-permissions general availability announcement from the Index and change an article reviewer.
- MDM Firewall Rules and ASR Rules report at policy level
Intune · Device securityThe Security Settings Management guidance now states that per-setting reporting is unavailable for Firewall Rules and ASR Rules policies managed through MDM; only policy-level status is reported. Administrators reviewing these policies should use policy-level status rather than expect per-setting results.
- Device-assigned PowerShell scripts cover each new multi-session sign-inIntune · Device security
The Windows PowerShell script guidance now states that a script assigned to a device runs for every new user who signs in, with the previous multi-session SKU exception removed. Administrators managing multi-session devices should use the updated guidance when planning device-assigned scripts.
- Azure Virtual Desktop Multi Session scripts must target devices
Intune · GeneralThe guidance now requires PowerShell scripts to be targeted to devices. It specifies setting logged-on credentials to No for system context or Yes for user context, so administrators should review script assignments and credential settings.
- MEM-Win32Apps allowlists gain two blob storage hosts
Intune · FundamentalsThe Endpoints guidance now lists mmcswdc01.blob.core.windows.net and mmcswdc02.blob.core.windows.net for MEM-Win32Apps alongside the existing hosts. Review network allowlists supporting Win32 app delivery and add the hostnames if required.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
6 updates
Microsoft Intune
6 updatesAzure Virtual Desktop Multi Session
Feature updateAction requiredThe documentation now requires PowerShell scripts to be targeted to devices. Set logged-on credentials to No for system context or Yes for user context.
Setup Mobile Threat Defense
Doc updateThe article’s reviewer changed from aanavath to ilwu.
Security Settings Management
Doc updateThe documentation now states that per-setting reporting is unavailable for Firewall Rules and ASR Rules policies managed through MDM; only policy-level status is reported.
Run Powershell Scripts Windows
Doc updateThe documentation now states that PowerShell scripts assigned to a device run for every new user who signs in, removing the previous multi-session SKU exception.
Endpoints
Doc updateThe endpoint documentation now lists `mmcswdc01.blob.core.windows.net` and `mmcswdc02.blob.core.windows.net` for MEM-Win32Apps, alongside the existing hosts.