Friday, 6 February 2026

Day in brief

Intune clarifies silent Win32 installs as Apple settings references are consolidated

The 6 February feed contains 75 changes—5 new, 70 updated, and no removals—across Intune and Configuration Manager. The supplied new Apple articles and numerous link updates are primarily documentation consolidation, not evidence of a product launch. The clearest administrator-facing changes are the explicit Win32 silent-install support boundary, new Remote Help network endpoints, and a Configuration Manager software-update synchronization warning. Endpoint Privilege Management support for Azure Virtual Desktop single-session VMs and Android management-mode filtering are explicitly listed as in development, not generally available.

Intune · App management
Win32 app guidance explicitly rules out interactive installations
The updated Add and Assign Win32 Apps guidance adds an IMPORTANT notice that Intune-deployed applications must install silently and cannot require dialog boxes, prompts, or other UI input. It also says serviceui.exe and similar techniques that force interaction with the signed-in user session are unsupported and may produce inconsistent or unpredictable behavior. This is a documented support boundary and packaging requirement, not evidence of a new installer-engine behavior.
Intune · Fundamentals
Remote Help network endpoints change
The Intune endpoints table for the MEM Remote Help Feature adds *.dm.microsoft.com and replaces *.trouter.skype.com with *.trouter.communications.svc.cloud.microsoft. Organizations using proxy or firewall hostname allowlists for Remote Help should update them; the evidence supplies no deadline or broader Remote Help behavior change.
Intune · Apple
Apple custom-profile guidance warns against sensitive settings
The new Apple custom-settings article covers bringing iOS/iPadOS and macOS settings from Apple Configurator or Apple Profile Manager into Intune for settings not built into the service. It specifically says not to use custom profiles for sensitive information such as Wi-Fi connections or authentication, directing administrators to built-in Wi-Fi and certificate profiles instead. The article lists iOS/iPadOS and macOS support and the Policy and Profile Manager minimum RBAC role. This is new guidance, not a stated re
Configuration Manager · General
Configuration Manager warns against oversized update synchronizations
A new warning in the software update point procedure says selecting too many Products & Categories harms performance because devices scan every update in the SUSDB, whether deployed or not. It advises selecting only relevant and necessary products and avoiding items that Configuration Manager cannot deploy, including Dynamic Updates, Servicing Drivers, legacy Office and operating systems, and broad Rollups, Feature Packs, and Service Packs categories.
Intune · Fundamentals
EPM on AVD and Android management-mode filtering are listed as in development
The In Development page says Microsoft is adding Endpoint Privilege Management policy deployment for users on Azure Virtual Desktop single-session virtual machines. It also says the Android Settings Catalog will gain a management-mode filter for Fully managed (COBO), Corporate-owned work profile (COPE), and Dedicated (COSU). These are roadmap statements; the supplied evidence does not establish preview availability or general availability.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.

Friday, 6 February 2026

Intune clarifies silent Win32 installs as Apple settings references are consolidated

75 updates