Wednesday, 4 February 2026

Day in brief

Endpoint Privilege Management adds Azure Virtual Desktop support as Windows catalog gains controls

4 February was documentation-heavy: all 32 tracked items were updates, with no new or removed entries and no Message Center posts. Most edits involved reviewer metadata, headings, anchors, or reference cleanup. The meaningful exceptions are the service release 2601 entries for Endpoint Privilege Management on Azure Virtual Desktop, Windows settings catalog additions, Lenovo Device Orchestration and protected apps, plus Configuration Manager SQL and CMG guidance. The supplied evidence does not label the Intune capabilities as preview or general availability; it presents them as service-release updates.

Intune · Fundamentals
EPM elevation policies support AVD single-session users
The Intune service release 2601 entry states that Endpoint Privilege Management elevation policies can now be deployed to users on Azure Virtual Desktop single-session virtual machines. EPM remains identified as an Intune Suite add-on capability; the documented scope is specifically single-session AVD environments.
Intune · Fundamentals
Windows settings catalog adds Edge controls and Share Sheet suppression
The Windows settings catalog adds Microsoft Edge policies up to version 143.0.3650.23, including tenant-approved browsing-history sharing with Microsoft 365 Copilot Search, RAM resource controls, and the option to opt out of Local Network access restrictions. It also adds Experience > Disable Share App Promotions; when enabled, Windows doesn't show promotional apps in the Windows Share Sheet. Administrators can find these in Devices > Configuration profiles > Create profile > Windows 10 and later > Settings catalog
Intune · Fundamentals
Lenovo portal access and four protected apps appear in the service-release listing
Intune now includes a direct Partner portals link to Lenovo Device Orchestration in the admin center for supported Windows 11 Lenovo devices, opening Lenovo-specific management capabilities in the LDO portal. The same entry lists Clarity Express for Intune, Datadog, Qlik Analytics, and Tier1 for Intune (iOS) as newly available protected apps.
Configuration Manager · General
SQL Server 2014 is explicitly marked deprecated for Configuration Manager 2409
The Configuration Manager SQL support matrix now marks SQL Server 2014 as deprecated in version 2409 and notes that SQL Server 2014 support ended in July 2024. It also states that SQL Server 2022 requires a lifecycle-supported update and does not support native compatibility level 160; SQL Server 2019 requires CU5 or later.
Configuration Manager · General
CMG authentication guidance narrows when PKI certificate export is required
The revised Configuration Manager guidance says to export the certificate only when clients are not joined to Microsoft Entra ID and instead use PKI certificates. It also states that management points enabled for CMG traffic can use either Enhanced HTTP or HTTPS. This is a documentation clarification of authentication configuration, not evidence of a newly announced CMG behavior.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.

Wednesday, 4 February 2026

Endpoint Privilege Management adds Azure Virtual Desktop support as Windows catalog gains controls

32 updates