Wednesday, 4 March 2026

Windows settings catalog gains Edge silent printing and site-specific geolocation controls

The strongest Intune update identifies new Windows settings catalog policies for Edge: silent printing, an Edge for Business informational page after major browser updates, and URL-pattern controls that allow precise geolocation or block geolocation requests. The Autopilot comparison now lists up to 25 essential applications during OOBE, while iOS/iPadOS Company Portal guidance documents v5.2509.2 rather than v5.2311.1 as the minimum supported version. Other meaningful changes are operational: the Intune endpoint reference changes its destination list, and Microsoft Tunnel records version 20260129.1 with updated base images and security packages. Smaller edits clarify applicability and Android OEMConfig prerequisites; the only removal was a Configuration Manager hotfix article, which does not by itself show that the hotfix was retired.

• Intune · Fundamentals

  New Windows settings catalog policies list four Edge controls

  The March 4 What's New entry directs administrators to Devices > Configuration profiles > Create profile > Windows 10 and later > Settings catalog. It lists controls for the Edge for Business informational new-tab page after major browser updates, Silent Printing, allowing precise geolocation on specified sites, and blocking geolocation on specified sites. The informational-page policy shows the page when enabled or not configured for Microsoft Entra ID profiles, hides it when disabled, does not apply to Microsoft

• Windows Autopilot · Device enrollment

  Autopilot comparison now lists up to 25 essential OOBE applications

  The comparison table changes the OOBE provisioning figure from up to 10 to up to 25 essential line-of-business, Win32, Microsoft Store, or Microsoft 365 applications. It continues to list up to 10 essential PowerShell scripts and distinguishes device-based OOBE from device and user ESP. Because the evidence is a documentation-table diff, this should be treated as revised comparison guidance rather than proof of a separate feature rollout.

• Intune · Android

  Company Portal's documented iOS/iPadOS minimum moves to v5.2509.2

  The minimum supported Company Portal version for iOS/iPadOS changes from v5.2311.1 to v5.2509.2. The guidance says users running an older version are prompted to update when they sign in; it provides no hard-block date or separate enforcement behavior.

• Intune · Fundamentals

  Intune endpoint guidance now lists more identity, Store, and service hosts

  The revised endpoint reference adds entries including *.powershellgallery.com, cdn.oneget.org, go.microsoft.com, displaycatalog.mp.microsoft.com, purchase.md.mp.microsoft.com, licensing.mp.microsoft.com, storeedgefd.dsx.mp.microsoft.com, *.events.data.microsoft.com, enterpriseregistration.windows.net, login.microsoftonline.com, graph.windows.net, config.office.com, ecs.office.com, Teams, and regional lgmsape blob hosts. The diff also removes earlier swda, swdb, swdc, swdd, swdin, and content-auth asset hosts, so a6

• Intune · Device security

  Microsoft Tunnel records a maintenance image with refreshed security packages

  The March 2 release entry records Microsoft Tunnel version 20260129.1, with agent image digest sha256:abbdcd854aa5ac376aed32c828e4c84917e776a701855cd1e3febed18a3e4dae and server image digest sha256:ad57d6a7ffe21f64fc1577713063ae9b180914cf65bc70b4e49be21299cfc1d3. The listed changes are minor bug fixes, diagnostic improvements, and updated base container images and security packages; no new Tunnel capability or mandatory rollout is stated.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.