Monday, 30 March 2026

Day in brief

Recovery Lock guidance specifies macOS prerequisites and a late-April availability target

30 March’s meaningful changes are concentrated in substantive guidance for Recovery Lock, Windows settings-catalog policies, and Security Copilot in Intune. The evidence is documentation work rather than a Message Center announcement: new pages explain capabilities, prerequisites, permissions, and rollout status, while many other edits mainly move Copilot links into the /intune/copilot structure or polish Hotpatch wording and references. Do not treat the new Copilot pages alone as proof of a new launch or changed tenant behavior.

Intune · Android
Windows settings-catalog guidance names two new policies
The updated What’s New entry lists Connectivity > Disable Cross Device Resume, which uses the DisableCrossDeviceResume CSP; when disabled, Windows receives no CrossDeviceResume notifications and users see no “resume from your phone” prompts. It also lists Windows AI > Remove Microsoft Copilot App. That policy applies when Microsoft 365 Copilot and Microsoft Copilot are installed, the Microsoft Copilot app was not user-installed, and it has not been opened for 14 days; enabling it uninstalls the app, although users'
Intune · Apple
Recovery Lock procedure sets macOS and permissions prerequisites
The new settings-catalog procedure says Recovery Lock automatically generates a strong, random password, protects the recovery environment and Startup Options, and supports time-based reset. It applies to macOS 11.5 or later on Apple silicon with supervised Intune enrollment; Intel Macs are unsupported. After assignment, admins can rotate the passcode through device actions, requiring the Intune Administrator role or a custom role with Remote tasks/Rotate macOS recovery lock password.
Intune · Apple
Recovery Lock device-action rollout is gradual, with late-April full availability expected
An updated Recovery Lock note says the feature is gradually rolling out and may not yet be available in a tenant; full availability is expected by late April 2026. Administrators should check tenant availability before relying on the remote rotation action.
Security Copilot · Fundamentals
Copilot guidance separates embedded Intune and standalone Security Copilot experiences
The new overview distinguishes Microsoft Copilot in Intune, embedded in the Intune admin center with an IT admin/IT Pro focus and access to Intune and Windows 365 Cloud PC data, from standalone Microsoft Security Copilot in its portal with a SOC-oriented, cross-service focus. It also states that Copilot in Intune is included with Security Copilot and has no additional licensing or Intune-specific license requirement.
Security Copilot · Endpoint analytics
Explorer guidance documents natural-language queries that can drive policy targeting
The new Explorer article describes natural-language queries matched to built-in views, Copilot summaries, recommendations, and actions. It says query results can add users or devices to groups, create custom reports, and create policies targeting users and groups in those results. Prerequisites are Security Copilot enabled and an account with Copilot owner or contributor access; results are scoped to the administrator’s Intune permissions.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.

Monday, 30 March 2026

Recovery Lock guidance specifies macOS prerequisites and a late-April availability target

50 updates