Daily Intune NewsDaily highlights from Microsoft Learn and Message Center. Browse the archive from 1 January 2026 → About this project →
Three Endpoint Privilege Management guidance updates consistently state that Windows elevation settings policies and their default elevation responses apply at device scope, even when assigned to groups containing users. A separate Samsung Knox E-FOTA update documents a one-account-per-tenant limit and region matching requirement.
Endpoint Privilege Management · Device securityWindows elevation settings policy client settings remain device-scoped. The default elevation response applies to all users on the device, and assigning the policy to a user group does not make that default per-user.
Intune · Endpoint analyticsAn Intune tenant supports only one connected Samsung Knox E-FOTA account. The account and region must match where devices are registered; otherwise, device registration can fail even when the connector reports Connected.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
The documentation states that an Intune tenant supports only one connected Samsung Knox E-FOTA account. It also explains that the connected account and region must match where devices are registered; otherwise, device registration can fail even when the connector shows Connected.
The documentation now states that Windows elevation settings policies remain device-scoped even when assigned to groups containing users. It also advises against using different policies to vary defaults by user.
The documentation now states that the default elevation response is a device-scoped setting configured by the Windows elevation settings policy and applies to all users on the device. Assigning it to a user group does not create a per-user setting.
The documentation now states that Windows elevation settings policy client settings remain device-scoped, even when assigned to groups containing users. Assigning different policies to different user groups does not create separate per-user default elevation responses.
