← Previous day

Keep up with Microsoft Intune

Daily highlights from Microsoft Learn and Message Center. Browse the archive from 1 January 2026 → About this project →

Day in brief

Configuration Manager 2609 reaches all customers as CMG tiers adopt new VM sizes

Configuration Manager 2609 became globally available on October 26, 2026, while CMG guidance specifies new D2ads_v6, D4ads_v6, and D8ads_v6 sizes for the Small, Medium, and Large tiers. Intune updates add concrete guidance for AOSP referenced-app assignments and Apple device-wide VPN route enforcement.

  • Configuration Manager · General
    Configuration Manager 2609 is globally available

    The installation checklist now states that version 2609 became globally available on October 26, 2026, replacing the early-update-ring opt-in instructions. Administrators can install the update without that opt-in process.

  • For Configuration Manager 2609 and Configuration Manager 2603 with KB39169655, the Small, Medium, and Large CMG tiers use D2ads_v6, D4ads_v6, and D8ads_v6 respectively. Existing deployments migrate automatically to the corresponding tiers, while earlier versions retain the previous sizes.

  • New Intune guidance explains how to add AOSP referenced apps without an APK or Google Play selection. Required assignments unhide apps already resident on devices, Uninstall assignments hide them, and Available assignments aren't supported. The package name is required and can't be changed after the app is created.

  • For device-wide VPN profiles on iOS/iPadOS and macOS, administrators configure Include all networks and Exclude local networks; Intune derives the Apple Enforce Routes value automatically. The settings don't apply to per-app VPN, and split tunneling isn't recommended with them.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.

12 updates

2
1

Configure Oemconfig Android

Doc update

The documentation now lists MEFERI with package name com.meferi.oemconfig and links to its OEMConfig page. Four related metadata links were removed.

1

Ref Vpn Settings Apple

New feature

Intune supports Apple’s Enforce Routes capability for device-wide VPN profiles on iOS/iPadOS and macOS. Administrators configure Include all networks and Exclude local networks; Intune derives the Enforce Routes value automatically.

1

Overview

Doc update

The overview now documents the Status column, connector details pane, Active/Warning/Action required statuses, health messages, and recommended troubleshooting steps for connectivity, permissions, and certificate template issues.

1

In Development

New feature

The in-development page adds entries for Windows maintenance windows, eSIM deployment status, Defender Controlled Configuration, STIG audit baselines, and Remote Help diagnostics; Android Enterprise local actions and KEYENCE OEMConfig; and iOS/iPadOS JIT registration changes and renewal reminders.

6

Perf Scale

Feature updateAction required

The guidance now documents new VM sizes for Configuration Manager 2609 and later, and 2603 with KB39169655. Existing CMG deployments migrate automatically to the corresponding tiers while connection limits remain unchanged; older versions retain the previous sizes.

Cost

Feature update

For version 2609 and version 2603 with KB39169655, CMG tiers now use D2ads_v6, D4ads_v6, and D8ads_v6 VM sizes. Earlier versions retain the previous sizes, and existing deployments migrate automatically when the update is installed.

Size And Scale Numbers

Feature updateAction required

Configuration Manager 2609 and later, and 2603 with KB39169655, use Small, Medium, and Large CMG tiers with new VM sizes. Existing deployments are automatically mapped to the corresponding tiers, while client connection limits remain unchanged. Older versions retain the previous sizes and tiers.

Setup Cloud Management Gateway

Doc update

The setup instructions now link to VM sizing guidance by Configuration Manager version, capacity, and upgrade requirements. The Lab (B2s) size is now called the Small tier and remains intended only for lab or proof-of-concept use.

Whats New Version 2609

Generally available

The documentation now states that version 2609 is available for all customers to install as of October 26, 2026.

Checklist For Installing Update 2609

Generally available

The documentation now states that version 2609 became globally available for installation on October 26, 2026, replacing the early-update-ring opt-in instructions.

Daily Intune.Admin.News

Get daily email updates

Get a concise summary of the latest Microsoft Intune updates delivered straight to your inbox.

Loading the secure signup form…