Intune Endpoints
UpdatedUpdated Microsoft Intune documentation in intune/intune-service/fundamentals/intune-endpoints.md.
Day in brief
Autopilot device preparation reaches 25 apps amid Cloud PKI’s CA-guide overhaul
The period is mostly a Cloud PKI documentation move: path and image-link fixes accompany eight legacy `/intune/intune-service/protect` pages being replaced by `/intune/cloud-pki` pages for deployment, CA configuration, monitoring, deletion, audit logs, and fundamentals. That is documentation reorganization—not evidence of a Cloud PKI launch or product retirement. The significant operational items are a documented 25-app Windows Autopilot device-preparation limit and a status update saying the previously delayed Enrollment Status Page security-update capability is included in Windows `2026-01 B`. An Intune Mobile Threat Defense/App Protection example also changes its block thresholds, but the evidence supports a documentation example change only.
- Windows Autopilot device preparation now documents a 25-app limit
Windows Autopilot · Device enrollmentThe updated guidance changes the managed-application example from 10 to 25. It says up to 25 apps can be configured in a Windows Autopilot device-preparation policy for both user-driven and automatic modes, including all Cloud PC offerings. It warns that deployments with more apps may need longer deployment timeouts. The evidence does not label this change preview or generally available.
- Autopilot ESP guidance now says the security-update capability is includedWindows Autopilot · Device enrollment
The page replaces a September 2025 delay notice with: “As of January 13, 2026, this capability is included in the Windows `2026-01 B` quality update.” The earlier note specifically said automatic installation of monthly security update releases and the new user interface were unavailable. This is an availability/status update in the What’s New guidance, not a supplied general-availability announcement.
- Cloud PKI guidance defines cloud-root and BYOCA deployment paths
Cloud PKI · GeneralThe new deployment-model guidance lists two options: create Microsoft Cloud PKI root and issuing CAs in the cloud, producing a two-tier hierarchy with multiple issuing CAs; or create a private cloud issuing CA anchored to an on-premises or private CA, including external private CA N+1 hierarchies. This is newly organized guidance, not evidence of a new service launch.
- Cloud PKI deletion guidance spells out pause, revoke, and permanenceCloud PKI · General
The new procedure distinguishes Pause, Resume, Revoke, and Delete. Pausing stops leaf issuance while the CA continues responding to CRL and AIA requests. A root CA cannot be deleted until all anchored issuing CAs are deleted, active leaf certificates must already be revoked before an issuing CA can be revoked, and revocation or deletion cannot be undone. The page also names the Intune Administrator or a custom Intune role with Read CAs, Disable and reenable CAs, and Revoke issued leaf certificates permissions.
- MTD App Protection examples change their blocked threat thresholds
Intune · App managementIn Step 3, one Max allowed device threat level example changes from Low to High, with Block access in both versions; another changes from Medium to Low, also with Block access. This is a Mobile Threat Defense/App Protection documentation example change. The supplied diff does not say that existing policies, defaults, or enforcement behavior changed.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
41 updates
Microsoft Intune
4 updatesWhats New Archive
UpdatedUpdated Microsoft Intune documentation in intune/intune-service/fundamentals/whats-new-archive.md.
Intune Endpoints
UpdatedUpdated Microsoft Intune documentation in intune/intune-service/fundamentals/intune-endpoints.md.
Updated Microsoft Intune documentation in intune/intune-service/apps/mamedge-3-scc.md.
Windows Autopilot
5 updatesUpdated Microsoft Intune documentation in autopilot/device-preparation/tutorial/automatic/automatic-assign-apps-scripts.md.
Updated Microsoft Intune documentation in autopilot/device-preparation/whats-new.md.
Updated Microsoft Intune documentation in autopilot/whats-new.md.
Whats New
UpdatedUpdated Microsoft Intune documentation in autopilot/device-preparation/whats-new.md.
Updated Microsoft Intune documentation in autopilot/device-preparation/tutorial/user-driven/entra-join-assign-apps-scripts.md.
Microsoft Cloud PKI
32 updatesAdded Microsoft Intune documentation in intune/cloud-pki/index.md.
Added Microsoft Intune documentation in intune/cloud-pki/fundamentals.md.
Configure Byoca
UpdatedUpdated Microsoft Intune documentation in intune/cloud-pki/configure-byoca.md.
Configure Ca
UpdatedUpdated Microsoft Intune documentation in intune/cloud-pki/configure-ca.md.
Configure Ca
UpdatedUpdated Microsoft Intune documentation in intune/cloud-pki/configure-ca.md.
Configure Byoca
UpdatedUpdated Microsoft Intune documentation in intune/cloud-pki/configure-byoca.md.
Deploy
UpdatedUpdated Microsoft Intune documentation in intune/cloud-pki/deploy.md.
Fundamentals
UpdatedUpdated Microsoft Intune documentation in intune/cloud-pki/fundamentals.md.
Fundamentals
UpdatedUpdated Microsoft Intune documentation in intune/cloud-pki/fundamentals.md.
Index
UpdatedUpdated Microsoft Intune documentation in intune/cloud-pki/index.md.
Intune Add Ons
UpdatedUpdated Microsoft Intune documentation in intune/intune-service/fundamentals/intune-add-ons.md.
Removed Microsoft Intune documentation in intune/intune-service/protect/microsoft-cloud-pki-audit-logs.md.
Removed Microsoft Intune documentation in intune/intune-service/protect/microsoft-cloud-pki-configure-byoca.md.
Removed Microsoft Intune documentation in intune/intune-service/protect/microsoft-cloud-pki-configure-ca.md.
Microsoft Cloud Pki Delete
RemovedRemoved Microsoft Intune documentation in intune/intune-service/protect/microsoft-cloud-pki-delete.md.
Removed Microsoft Intune documentation in intune/intune-service/protect/microsoft-cloud-pki-deployment.md.
Removed Microsoft Intune documentation in intune/intune-service/protect/microsoft-cloud-pki-fundamentals.md.
Microsoft Cloud Pki Monitor
RemovedRemoved Microsoft Intune documentation in intune/intune-service/protect/microsoft-cloud-pki-monitor.md.
Microsoft Cloud Pki Overview
RemovedRemoved Microsoft Intune documentation in intune/intune-service/protect/microsoft-cloud-pki-overview.md.
Added Microsoft Intune documentation in intune/cloud-pki/configure-byoca.md.
Added Microsoft Intune documentation in intune/cloud-pki/configure-ca.md.
Added Microsoft Intune documentation in intune/cloud-pki/delete.md.
Added Microsoft Intune documentation in intune/cloud-pki/deploy.md.
Delete
UpdatedUpdated Microsoft Intune documentation in intune/cloud-pki/delete.md.
Deploy
UpdatedUpdated Microsoft Intune documentation in intune/cloud-pki/deploy.md.
Configure Byoca
UpdatedUpdated Microsoft Intune documentation in intune/cloud-pki/configure-byoca.md.
Added Microsoft Intune documentation in intune/cloud-pki/monitor.md.
Monitor
UpdatedUpdated Microsoft Intune documentation in intune/cloud-pki/monitor.md.
Monitor
UpdatedUpdated Microsoft Intune documentation in intune/cloud-pki/monitor.md.
Index
UpdatedUpdated Microsoft Intune documentation in intune/cloud-pki/index.md.
Index
UpdatedUpdated Microsoft Intune documentation in intune/cloud-pki/index.md.
Added Microsoft Intune documentation in intune/cloud-pki/audit-logs.md.