Monday, 19 October 2026

macOS setup guidance adds a lockout-timer setting; Tunnel encryption is strongly recommended

The period brought four Intune documentation updates, with the clearest administrator relevance in macOS password-rotation setup and Microsoft Tunnel container security guidance. The remaining changes refine a Samsung Knox label and refresh automated macOS enrollment references.

• Intune · Device security

  macOS setup now places the lockout-timer setting before password rotation

  The setup guidance directs administrators to configure Failed Attempts Reset In Minutes in the Settings catalog before rotating the password to manage the lockout timer.

• Intune · Device security

  Microsoft Tunnel guidance calls encryption at rest optional but strongly recommended

  The prerequisites guidance now recommends reviewing encryption options for files used by Microsoft Tunnel containers, with links covering Linux distributions and container platforms.

• Intune · Device security

  Samsung integration guidance renames the Knox destination label

  The third-party partners page now calls the link Samsung Knox Manage instead of Samsung Knox Manage (Compliance); its destination URL is unchanged, so no administrator action is required.

• Intune · Device enrollment

  Automated macOS enrollment guidance refreshes policy-profile references

  The setup article updates two DevRel ontology links and refreshes guidance for the Enrollment policies and Profiles experiences. The update requires no administrator action.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.