← Previous day

Next day →
Day in brief

MDT retirement demands task-sequence cleanup as EPM adds single-session AVD support

This was a documentation-heavy day rather than a broad Intune feature launch. The clearest operational changes were Configuration Manager's explicit MDT retirement warning, newly documented Endpoint Privilege Management support for Azure Virtual Desktop single-session VMs, and sharper Windows Update boundaries for Microsoft Entra registered devices. Feature Updates guidance also clarified cloud, licensing, and edition prerequisites. Separately, a Message Center notice previews February additions to Managed Home Screen role permissions.

  • Retirement: the release notes state that MDT Standalone and MDT integration with Configuration Manager are no longer supported. Administrators must remove all MDT task-sequence steps and then remove MDT integration to prevent task-sequence corruption and modification failures. The guidance points to Windows Autopilot or supported Configuration Manager operating-system deployment as alternatives.

  • Endpoint Privilege Management · Device security
    EPM support now includes Azure Virtual Desktop single-session VMs

    Support expansion: the EPM FAQ replaces the previous Azure Virtual Desktop unsupported statement with a supported-platform list that includes Azure Virtual Desktop single-session VMs, added in January 2026, alongside Windows 365. Confirm the VM is single-session before onboarding it.

  • Changed scope guidance: the Windows updates overview states that Microsoft Entra registered devices cannot use Feature Updates, Quality Updates, Driver Updates, or Hotpatch policies because they rely on the Windows Update for Business Deployment Service. Windows Update client policies and update rings remain supported for those devices.

  • Prerequisite clarification: Feature Updates policies are supported only in the public cloud, not GCC High or DoD. Intune Plan 1 covers core policy creation and assignment, while gradual rollout and optional feature updates require a Windows license with the Autopatch entitlement. Windows Enterprise LTSC is unsupported by Feature Updates policies; the guidance suggests alternatives such as WSUS or Configuration Manager.

  • Preview / plan for change: the Message Center says the February Intune release will add `TemporarilySuspendManagedHomeScreen` and `RestoreManagedHomeScreen` to the School Administrator and Help Desk Operator built-in roles. No administrator action is required, though role assignments and internal documentation can be reviewed for the future access change.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.

26 updates

12

Driver Updates

Doc update

The driver updates overview removed its Frequently Asked Questions section, including assignment filters, Autopilot, rollback, policy conflict, pauses, deadlines, deferrals, and co-management guidance, following publication of a separate FAQ article.

Expedite Updates

Doc update

The expedited quality update reporting steps were renumbered using Markdown auto-numbering without changing the report navigation or actions.

Feature Updates

Doc update

The article states feature update policies are public-cloud only and not supported in GCC High or DoD, distinguishes Intune Plan 1 from Autopatch-entitled licensing for gradual rollout and optional updates, and clarifies LTSC is unsupported.

Index

Doc update

The overview renames the Workplace Joined limitation section for Microsoft Entra registered devices and states that feature, quality, driver, and Hotpatch policies relying on WUfB DS cannot be used on those devices.

Index

Doc update

The Windows updates overview moves Microsoft Entra registered-device restrictions into its general prerequisites: WUfB DS-backed feature, quality, driver, and Hotpatch policies are unsupported, while update rings remain available.

Update Rings

Doc update

The update rings article clarifies that Intune Plan 1 is required for core policy creation and assignment and updates platform and edition wording.

Index

Doc update

The registered-device limitation sentence received a formatting-only correction.

Update Rings

Doc update

The update rings article made a minor wording change to the statement that Windows Holographic for Business supports a subset of Windows update settings.

Feature Updates

Doc update

The article replaced a hard-coded list of qualifying Windows licenses with a link to the Autopatch entitlement licensing documentation for gradual rollout and optional feature updates.

Update Rings

Doc update

The article heading changed from Manage your Windows Update rings to Manage update rings.

Feature Updates

Doc update

The feature update policy prerequisites removed the instruction to enable data collection for reporting.

4

Feature Updates Reports

Doc update

The feature update reports article reorganized diagnostic-data requirements into tenant and device sections, explains that Windows update reports require sharing diagnostic data with Intune, and removes older duplicate collection text.

Driver Updates Reports

Doc update

The driver reports article reorganized prerequisites into shared device and tenant requirement sections and states Windows diagnostic data must be collected at Required or higher for complete status and event reporting.

Driver Updates Reports

Doc update

The report requirements now separate tenant configuration from device configuration and direct admins to enable Windows diagnostic data at Required or higher for driver-update reporting.

2

Manually Add the Windows Company Portal App

Doc update

The manual Company Portal article now uses `winget download "Company Portal" --source msstore` rather than the install command, and identifies the default Downloads folder.

Store Apps Company Portal App

Doc update

The Company Portal download command was indented as a PowerShell block and the Downloads-folder guidance was converted from a note to regular text.

2

Epm Plan

Feature update

The EPM plan replaced a support note with a dedicated statement that Endpoint Privilege Management supports specified virtual platforms.

Privacy Data Store Process

Doc update

The privacy data-storage article changed the documented Intune audit-log retention period from up to one year to up to two years; personal data deletion remains described as within 30 days after deletion.

1

In Development

Public preview

The in-development page says Apple’s Rapid Security Responses rebrand to Background Security Improvements will be reflected in iOS/iPadOS Settings Catalog restrictions, and changes Android management-mode filtering to future tense.

1

Plan for Change: New Managed Home Screen RBAC permissions added to School Admin and Help Desk Operator built-in roles

New

Intune's February release adds two new Managed Home Screen RBAC permissions—TemporarilySuspendManagedHomeScreen and RestoreManagedHomeScreen—to the School Administrator and Help Desk Operator roles, enhancing Android device management. No admin action is needed, but reviewing role assignments and updating documentation is recommended.

Message CenterMC1213781 on mc.merill.net ↗Plan for change
1

Release Notes

Retirement

The release notes now state that Microsoft Deployment Toolkit and its Configuration Manager integration are retired and unsupported, warn that retained MDT task-sequence steps can cause corruption or modification failures, and point to Autopilot or supported OSD.

1

Release Notes

Retirement

The MDT retirement warning changed the instruction to say customers should remove MDT task-sequence steps and MDT integration to avoid corruption and modification failures.

2

Epm Frequently Asked Questions

Feature update

The EPM FAQ replaces the statement that Azure Virtual Desktop is unsupported with a supported-virtual-devices section and clarifies that administrator launches matching elevation rules are reported as unmanaged elevations.

Epm Plan

Feature update

The EPM planning article now states that EPM policies support Azure Virtual Desktop single-session VMs instead of listing Azure Virtual Desktop as unsupported.

Daily Intune.Admin.News

Get daily email updates

Get a concise summary of the latest Microsoft Intune updates delivered straight to your inbox.

Loading the secure signup form…