Wednesday, 6 May 2026

Controlled Configuration preview makes Windows Defender antivirus policy authoritative

The substantive product news is concentrated in three In Development entries: Controlled Configuration is coming to public preview for Windows Defender antivirus settings; Android Enterprise MTD apps will gain an enhanced-permissions path; and Windows devices will proactively request compliance reevaluation after important local state changes. The remaining updates are chiefly documentation cleanup, including navigation and wording edits. Two legacy fundamentals pages were removed, but the supplied evidence supports documentation retirement rather than a product retirement.

• Intune · General

  Controlled Configuration will centralize Windows Defender antivirus authority

  The Intune In Development page says Controlled Configuration (CC) is coming to public preview. When enabled, Defender antivirus settings delivered by Intune or Microsoft Defender for Endpoint security settings management override Group Policy, Configuration Manager, local changes, and scripts. CC also extends Tamper Protection so administrators can lock settings to admin-defined values rather than only defaults. The entry applies to Windows.

• Intune · General

  Android Enterprise MTD apps will receive enhanced security permissions

  A planned Intune MTD connector capability will let an administrator grant enhanced security permissions to one selected MTD app. On configured devices, that app can be exempted from app suspension, hibernation, and user-initiated restrictions. The documented scope is Android Enterprise corporate-owned work profile (COPE) and fully managed (COBO) devices.

• Intune · General

  Windows compliance evaluation will react to important local state changes

  Intune will introduce client-driven compliance evaluation for Windows. Supported devices will detect important state changes locally and proactively request a compliance reevaluation instead of waiting for the next scheduled check-in, with the stated goal of faster remediation, reporting, and access-decision updates. This is presented as an In Development capability, not a general-availability announcement.

• Remote Help · General

  Remote Help Unattended documentation now lists dedicated devices only

  The Remote Help Plan page changed the Android prerequisite for Remote Help - Unattended from fully managed or dedicated devices to dedicated devices only. This diff establishes a documentation change in the listed requirement; it does not establish that the underlying Remote Help service behavior changed.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.