Tuesday, 24 March 2026

Day in brief

Intune retires guided scenarios while its redesigned device page is in public preview

The clearest tenant-facing change is a retirement: all Intune admin-center guided scenarios except Windows 365 Boot are no longer accessible. Alongside that, the redesigned single-device page is explicitly in public preview, while Android Managed Home Screen suspend and restore actions are only planned. The remaining notable work is mostly guidance and reference maintenance rather than feature availability: passwordless documentation adds license and OS matrices, Defender integration guidance adds precise RBAC requirements, and Advanced Analytics links move to a new data-platform schema reference.

Intune · Fundamentals
Guided-scenario wizards are removed from the admin center
Microsoft says all guided-scenario wizards are removed from the Intune admin center except Windows 365 Boot, which remains available from the Windows 365 overview page. Intune objects previously created by the wizards remain available and manageable, and the notice says no action is required. Replacement links point to Microsoft Learn, prescriptive guides, administration guides, and scenario-specific guidance.
Intune · Fundamentals
The single-device page enters public preview
In `Devices` > `All Devices`, selecting a device now presents a full-page single-device layout in public preview. Its tabs are `Device action status`, `Tools + reports` formerly called `Overview`, `Properties`, and `Device details` formerly called `Hardware`. Action status can be searched, sorted, and filtered; properties expose scope tags; and destructive actions require confirmation. Existing device-management capabilities remain available.
Intune · Fundamentals
Managed Home Screen suspend and restore actions are forthcoming
Intune will soon add two remote actions for Android Enterprise corporate-owned Fully Managed (COBO) and Dedicated (COSU) devices: suspend Managed Home Screen for a defined duration and restore it automatically when time expires or manually. Suspension lets users reach the default launcher without removing policies or requiring a PIN. This remains an in-development capability, not a generally available feature.
Intune · Device security
Defender integration guidance now spells out Intune RBAC
The updated Microsoft Defender for Endpoint and Intune integration guidance specifies three Intune permission sets: Mobile Threat Defense — Modify and Read; Endpoint Detection and Response — Assign, Create, Read, and Update; and Device compliance policies — Assign, Create, Read, and Update. These permissions can be added to a custom role, while Endpoint Security Manager is described as the least-privileged built-in role covering all of them. Conditional Access remains an Entra ID configuration requiring a separate,
Intune · Android
Passwordless guidance adds explicit license and OS matrices
The updated passwordless overview lists Entra ID P1 for Windows Hello for Business, FIDO2, passkeys, Authenticator phone sign-in, Temporary Access Pass, and authentication strength policies; P2 for risk-based Conditional Access; the Intune Suite or standalone Cloud PKI add-on for Microsoft Cloud PKI; and Intune Plan 1 for device compliance and configuration profiles. It also lists minimum versions, including Windows 11 23H2, macOS 13, iOS 17, and Android 14 for synced passkeys, plus iOS 16 and Android 11 for Authen

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.

Tuesday, 24 March 2026

Intune retires guided scenarios while its redesigned device page is in public preview

43 updates