Monday, 20 April 2026

Day in brief

Apple ADE token workflows and Android credential controls sharpen Intune guidance

20 April was primarily a documentation-consolidation and guidance-refresh day, not an evidenced product-announcement cycle. The biggest workstream reorganizes Apple ADE for iOS/iPadOS and macOS into platform overviews, standalone token setup, and device/token-management procedures; the new macOS overview also records ACME support on macOS 13.1 or later and says already-enrolled Macs need to re-enroll to receive an ACME certificate. Other high-value material documents Android Enterprise controls, a cloud-native endpoint authentication limitation, App Inventory navigation, and an inline Change Review Agent workflow. No Message Center entry is supplied, and the evidence does not establish GA, preview, retirement, or a deployment deadline for these selected items.

Intune · Device enrollment
Apple ADE management guidance now spells out token prerequisites and sync limits
New iOS/iPadOS ADE management guidance makes two prerequisites explicit: set up an ADE token, then create and assign an enrollment profile. It documents a full-sync limit of once every seven days, automatic delta sync every 12 hours, manual Sync no more than once every 15 minutes, and the fact that a device deleted in Intune reappears on the next full sync if it remains assigned to Apple’s MDM server. Released devices can remain listed for 30–45 days before automatic deletion. This is an operational procedure and-
Intune · General
Android Enterprise release notes document credential-provider and Location controls
The updated service-release entry says admins can control which apps act as system-level credential providers on managed Android Enterprise devices running Android 14 and later. It points to Apps > Android > Configuration > Managed Devices with Android Enterprise selected, and lists allowing specific apps and enabling passkey-based sign-in. It also says General > Block location is now called Location, with Device default, Location enabled, and Location disabled options. Google Password Manager remains blocked as a
Intune · Troubleshooting
Cloud-native endpoint guidance warns that machine authentication will fail
The new troubleshooting guidance says Microsoft Entra-joined cloud-native Windows endpoints do not support on-premises AD machine authentication. File shares, applications, or services configured to accept only computer or machine accounts will fail; Microsoft directs administrators to identify those dependencies and switch to user-based or service-account-based authentication. This is security and migration guidance about a documented limitation, not a new Intune authentication model.
Intune · App management
Enhanced App Inventory moves its documented workflow to per-device All Apps
The updated article changes the navigation from Apps > Monitor > All apps > App Inventory to Devices > All devices > a device > All Apps > App Inventory. It also clarifies that inventory includes every application detected on the device regardless of installation method, including apps that are also managed, and that the comparison table now lists multi-user installed-app support. This is a navigation and scope clarification in the documentation, not an announced collection-frequency change.
Intune · Fundamentals
Multi Admin Approval guidance adds inline Change Review Agent responses
When Change Review Agent is configured and has completed a run, the updated Multi Admin Approval guidance says the All requests tab displays an Agent Response column for Windows PowerShell script requests when a suggestion is available. Selecting the suggestion opens and completes the approval workflow without leaving the Multi Admin Approval node; suggestions remain available in the agent’s primary experience. The evidence describes a workflow integration but does not classify it as preview or general availability

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.

Monday, 20 April 2026

Apple ADE token workflows and Android credential controls sharpen Intune guidance

60 updates