Friday, 15 May 2026

Android COBO/COPE Defender setup prerequisites and macOS ADE identifiers clarified

All 18 entries were updates—17 for Intune and one for Configuration Manager—with no supplied announcement of a new preview, general-availability feature, retirement, or tenant-side behavior change. The substantive work is documentation clarification: Mobile Threat Defense connector scope and prerequisites, macOS ADE account naming and Platform SSO token mapping, a forthcoming Settings Catalog note, and updated BIOS Graph API references. Related pages also change headings and anchors from “Microsoft Defender for Endpoint” to “Defender for Endpoint,” which is ordinary terminology and link maintenance.

• Intune · Device enrollment

  Defender MTD connector scope and launch dependency clarified

  The Enable Connector guidance now identifies “Automatically launch Microsoft Defender for Endpoint during setup on Android COBO and COPE devices” as a Microsoft Defender for Endpoint-only option for Android Enterprise corporate-owned fully managed and corporate-owned work profile devices. It also explicitly requires the Grant MTD role permissions toggle to be enabled.

• Intune · Device security

  Serial-based administrator usernames recommended for userless macOS ADE

  For macOS ADE enrollment policies without user device affinity, the guidance now recommends setting Admin account username to `{{serialNumber}}-admin` or `{{serialNumber}}-user`, explaining that the device serial number helps provide a unique identifier for each userless ADE device.

• Intune · Apple

  Platform SSO Account Name mapping lists an additional token

  The macOS Platform SSO table changes Token To User Mapping > Account Name from `preferred_username` alone to `preferred_username` or `com.apple.PlatformSSO.AccountShortName`. This is a documentation clarification for administrators configuring the mapping.

• Intune · Device enrollment

  Create First User During Setup is marked as coming soon

  The Platform SSO enrollment article adds a note that the Enable Create First User During Setup setting will be available soon in Settings Catalog. The update gives no release date and does not say the setting is currently available.

• Intune · Windows

  BIOS password procedures now reference hardwarePasswordDetails

  Windows BIOS configuration guidance replaces Microsoft Graph `hardwarePasswordInfo` references, links, and endpoints with `hardwarePasswordDetails`, including both the device-specific and collection API examples. Administrators maintaining Graph scripts or runbooks based on this page should update those references.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.