Wednesday, 18 March 2026

Scoped permissions guidance flags an irreversible action for Intune preview

The most consequential update is revised scope-tag guidance: Scoped permissions is described as an opt-in public preview, and enabling it is a one-time tenant action that cannot be undone. The same guidance directs administrators to run the Permissions Assessment Report at Tenant administration > Roles > Settings first. A separate user-help note states that Windows Company Portal 11.1.254.0 is the minimum supported version. Other notable edits clarify the Application control exception in attack surface reduction profiles, document Samsung Android 15 Remote Help visual latency without connectivity impact, and revise China endpoint tables. The remaining updates are chiefly wording, navigation, metadata, and deployment-series maintenance rather than evidence of launches, general availability, or confirmed product-behavior changes.

• Intune · Tenant administration

  Scope-tag guidance adds preview and irreversibility warnings

  The revised Intune guidance identifies Scoped permissions as an opt-in public preview. It says enabling the setting is a one-time tenant action that cannot be undone and recommends using the Permissions Assessment Report at Tenant administration > Roles > Settings to preview permission changes first. This documents the preview and its constraint; it does not establish a launch date.

• Intune · Windows

  Windows Company Portal guidance sets 11.1.254.0 as minimum

  A new note states that version 11.1.254.0 is the minimum supported Windows Company Portal version and advises updating older versions as soon as possible to avoid loss of functionality. The diff adds guidance; it does not by itself prove that the underlying support policy changed on this date.

• Intune · Device security

  Application control remains the ASR template-based exception

  The Endpoint Security attack surface reduction guidance now explicitly says most ASR profiles use the Settings Catalog format, while the Application control profile remains in the older template-based format. This is a profile-format clarification, not evidence of a new deployment model or feature release.

• Remote Help · Fundamentals

  Remote Help documents visual latency on Samsung Android 15

  The updated Remote Help article warns that Samsung devices running Android 15 might show minor visual latency, with portions of the screen refreshing after a slight delay. It explicitly says the behavior does not affect session connectivity.

• Intune · Fundamentals

  China endpoint tables remove listed azureedge.net addresses

  For CNPASU01, the revised China endpoints table lists only the three imeswdsc-afd-*.manage.microsoft.com hosts, removing the sovereignprodimedata and azureedge.net entries shown previously. The macsidecarap row now lists only macsidecarap.manage.microsoft.com, removing macsidecarprodap.azureedge.net and its migration note. This is a published-table edit, not proof from the diff that those services were retired.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.