Thursday, 16 April 2026

Day in brief

Intune compliance reports now document check-in lag and shared-device user-state behavior

This was primarily a documentation-maintenance period, but several diffs contain operationally useful detail. The largest clarification is that compliance state is evaluated continuously while compliance reports refresh at device check-in and can reflect the last checking user on shared devices. New how-to content covers Remote Help requirements and Enterprise App Catalog procedures, while Advanced Analytics and Endpoint Privilege Management references gain concrete schema and policy-limit details. The supplied evidence shows no preview, general-availability announcement, retirement, or confirmed product-behavior change.

Intune · Device security
Compliance reporting clarifies check-in freshness and shared-device attribution
This is a documentation clarification, not evidence that evaluation or reporting behavior changed. Device compliance state is continually evaluated, but compliance policy reports refresh when a device checks in and show the last confirmed state. On shared or multi-user devices, reports can reflect the last user who checked in; pending states can persist until the next reporting cycle, duplicate user or system records can appear, and summary and detailed views can update at different times. Use these caveats when4
Remote Help · General
New Remote Help guide documents enablement, authentication, RBAC, and auditing
A new how-to page states that Remote Help is disabled by default and, when enabled, applies tenant-wide. Both the helper and sharer must sign in with Microsoft Entra accounts from the organization, and users outside the organization cannot be assisted. The page also documents pre-connection compliance warnings, RBAC for helper scope and elevated actions, active and historical session reporting, audit logs, and limited auditing for unenrolled devices. This is a documentation addition, not a supplied feature-launch,،
Enterprise App Management · App management
Enterprise App Catalog guidance adds default settings, Autopilot, and update timing
The new guide describes Enterprise App Catalog apps as Microsoft-prepared Win32 apps within Enterprise App Management, an Intune Suite add-on available for trial and purchase. It says Microsoft configures and confirms default installation, requirements, and detection settings; catalog apps can be assigned to users or devices and used as blocking apps in Windows Autopilot Enrollment Status Page and Device Preparation Page profiles. Its stated service-level objectives are availability of most automatically validated
Advanced Analytics · Endpoint analytics
Advanced Analytics schema documents broader platform coverage and mobile fields
The reference data-platform schema now lists Android, iOS, iPadOS, macOS, and Windows for network-adapter Identifier and Type. It adds Android IpAddressV4, SubnetAddressV4, and AndroidSecurityPatchLevel fields, and documents expanded SIM/eSIM data including SlotId for iOS and iPadOS, Iccid and Imei for Android, iOS, and iPadOS, Imsi for Android, Eid across Android, iOS, iPadOS, and Windows, IsActive for Android and Windows, and carrier fields for iOS and iPadOS. This is schema documentation; the diff does not claim
Endpoint Privilege Management · Device security
Endpoint Privilege Management documents a 100-rule elevation-policy limit
The Create Elevation Rules guidance now explicitly notes that administrators can add up to 100 elevation rules per elevation-rules policy from the Microsoft Intune admin center. This records a concrete policy limit; it does not indicate a new rollout or retirement.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.

Thursday, 16 April 2026

Intune compliance reports now document check-in lag and shared-device user-state behavior

293 updates