Friday, 10 April 2026

Day in brief

Edge for Business guidance maps Intune controls across managed and BYOD devices

10 April is dominated by newly added and reorganized Microsoft Learn content around Intune app protection and Microsoft Edge for Business. The main addition is a Secure Enterprise Browser framework covering Intune MAM and MDM on Windows, macOS, iOS, and Android. With no message-center entries supplied, this should be treated as security and deployment guidance—not evidence of a new feature launch, preview, general availability announcement, retirement, or backend behavior change. A separate notable documentation change updates the Windows Autopilot device-preparation guidance from 10 to 25 managed applications. Other representative edits are largely link-path migrations and date or known-issue refreshes.

Intune · Fundamentals
Secure Enterprise Browser overview links Edge, Intune MAM, and MDM
A newly added overview describes a Secure Enterprise Browser strategy for Microsoft Edge for Business using Intune MAM and MDM on Windows, macOS, iOS, and Android. It frames the approach around Conditional Access, app protection, and Level 1, Level 2, and Level 3 data-protection configurations. This is new security guidance, not a reported product launch or availability change.
Intune · Apple
Settings Catalog guidance separates enrolled Edge devices from MAM scenarios
The Step 5 guidance says Settings Catalog provides device-level Edge controls for enrolled Windows and macOS, while App Protection Policies and App Configuration Policies are intended for unmanaged or non-enrolled devices. It warns not to target App Configuration Policies and Settings Catalog policies at the same Edge client; on enrolled Windows, choose Settings Catalog or the Microsoft Edge Security Baseline, not both. This is a documented deployment rule, not evidence that Intune newly enforces a conflict.
Intune · App management
MTD connector order and default-primary behavior are spelled out for APP
The new Mobile Threat Defense guidance says to configure MTD connectors before onboarding users to the policies. Only users enrolled in MAM send health-state data; if Microsoft Defender for Endpoint and another MTD partner are configured without a designated primary, Intune defaults to Defender for Endpoint. App protection policies can use Max allowed device threat level to block or selectively wipe protected apps based on vendor risk.
Windows Autopilot · Device enrollment
Autopilot device-preparation guidance changes the documented app cap from 10 to 25
The Entra Join Autopilot Policy page now says the Apps section allows up to 25 managed applications, replacing the previous value of 10. Because the supplied evidence is a documentation diff, administrators should validate whether their tenant's Device Preparation experience accepts the expanded selection before redesigning deployment profiles; the data does not independently confirm a service-limit change.
Enterprise App Management · App management
Enterprise App Catalog guide documents update timelines and Autopilot blocking support
The new Enterprise App Catalog procedure says Enterprise App Management is an Intune Suite add-on available for trial and purchase. It documents that most app updates are available within 24 hours after automated validation, while updates requiring manual testing typically complete within seven days, and says catalog apps can be selected as blocking apps in Windows Autopilot Enrollment Status Page and Device Preparation Page profiles. This is onboarding and service-level guidance, not a launch announcement.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.

Friday, 10 April 2026

Edge for Business guidance maps Intune controls across managed and BYOD devices

358 updates