Daily Intune News
Aboutmerill.net
← Previous day

Next day →
Day in brief

Apple app-list guidance now distinguishes Intune reporting from actual blocking

The clearest administrator-facing correction concerns iOS/iPadOS device restrictions: approved and prohibited app lists report matching app activity in Intune rather than stopping installation or execution. The Settings Catalog is the documented path for preventing an app from running or appearing. The period otherwise centers on Apple reference restructuring, Configuration Manager performance guidance, and Settings Insight scope clarification. The removed Apple articles represent documentation restructuring alongside refreshed combined references, not evidence of a product capability retirement. Windows Autopilot maintenance standardizes “Microsoft Entra hybrid join” terminology and reformats the existing KB guidance; the listed remediation versions remain unchanged.

  • Intune · Apple
    Apple app lists are reporting signals, not blockers

    Documentation clarification—not a reported product behavior change: the approved and prohibited app lists do not stop users from installing or running apps. If a listed app is installed or run, Intune reports it. To prevent an app from running or appearing on iOS/iPadOS, the page directs administrators to Settings Catalog > Restrictions > Allow Listed App Bundle IDs or Blocked App Bundle IDs.

  • Intune · Apple
    Custom Apple settings now use the correct profile prerequisite

    The prerequisite changed from a VPN device configuration profile to a custom device configuration profile. The procedure also adds Apple Configurator payload-compatibility guidance and Apple Profile Manager steps to enable mobile device management, add devices, configure them, download the profile, and enter it in Intune. This is a documentation procedure correction, not a feature announcement.

  • Intune · Apple
    Apple SSO guidance adds explicit realm and domain constraints

    The device-features reference now documents that the authentication realm should be capitalized, such as CONTOSO.COM. SSO domains are case-insensitive, must begin with a period, and must be unique across all Intune SSO app-extension profiles, including profiles using different extension types. This newly explicit guidance does not establish a change in Intune enforcement behavior.

  • Configuration Manager · General
    Configuration Manager warns against unnecessary update products

    The software update point warning now says unnecessary products enlarge the WSUS metadata catalog and can hurt scan performance; clients evaluate update metadata during every scan, even for updates that are not deployed. It specifically advises removing unused legacy Windows and Office products and products Configuration Manager cannot deploy, such as Dynamic Updates and Servicing Drivers.

  • Intune · Fundamentals
    Settings Insight scope is limited to documented Intune baselines

    The reference now explicitly says Settings Insight is currently available for the listed Intune security baselines, but not for other Intune baselines including the Security Baseline for Windows 10 and later or the Microsoft Defender for Endpoint baseline. It also clarifies that the model does not use customer data directly: usage is aggregated at the organization level and converted to categorical values or ranges where possible. This is scope and terminology clarification, not an availability expansion.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.

30 updates

Apple

17

Custom Settings Ios

Removed

Removed Microsoft Intune documentation in intune/intune-service/configuration/custom-settings-ios.md.

Custom Settings Macos

Removed

Removed Microsoft Intune documentation in intune/intune-service/configuration/custom-settings-macos.md.

Device Restrictions Ios

Removed

Removed Microsoft Intune documentation in intune/intune-service/configuration/device-restrictions-ios.md.

Device Restrictions Macos

Removed

Removed Microsoft Intune documentation in intune/intune-service/configuration/device-restrictions-macos.md.

Ios Device Features Settings

Removed

Removed Microsoft Intune documentation in intune/intune-service/configuration/ios-device-features-settings.md.

Vpn Settings Ios

Removed

Removed Microsoft Intune documentation in intune/intune-service/configuration/vpn-settings-ios.md.

Vpn Settings Macos

Removed

Removed Microsoft Intune documentation in intune/intune-service/configuration/vpn-settings-macos.md.

Wi Fi Settings Ios

Removed

Removed Microsoft Intune documentation in intune/intune-service/configuration/wi-fi-settings-ios.md.

Wi Fi Settings Macos

Removed

Removed Microsoft Intune documentation in intune/intune-service/configuration/wi-fi-settings-macos.md.

Fundamentals

5

Settings insight

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/settings-insight.md.

Settings Insight

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/settings-insight.md.

Settings Insight

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/settings-insight.md.

Settings Insight

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/settings-insight.md.

Device configuration

1

Device Profile Assign

Updated

Updated Microsoft Intune documentation in intune/intune-service/configuration/device-profile-assign.md.

Endpoint analytics

1

Device enrollment

2

Known Issues

Updated

Updated Microsoft Intune documentation in autopilot/known-issues.md.

General

3

Ports

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/plan-design/hierarchy/ports.md.

Endpoint analytics

1
Daily Intune.Admin.News

Get daily email updates

Get a concise summary of the latest Microsoft Intune updates delivered straight to your inbox.

Loading the secure signup form…