Wednesday, 27 May 2026

Azure Monitor guidance flags variable timing for Intune’s 24-hour report exports

This is a documentation-only day, with no new, removed, or Message Center items. The most consequential edit is to Intune’s Azure Monitor integration: Device Compliance Organizational Logs and Intune Devices report data aren’t guaranteed at a particular time of day, can arrive anytime within each 24-hour export period subject to the documented delivery window, and may shift as Microsoft improves the export pipeline. Configuration Manager guidance also gains an explicit Software Update Point upgrade order and a cross-domain Kerberos/DNS prerequisite; the remaining edits are example, terminology, or procedure clarifications rather than evidence of launches, retirements, or changed product behavior.

• Intune · Endpoint analytics

  Azure Monitor export timing is explicitly variable

  The Integrate Azure Monitor page adds that Device Compliance Organizational Logs and Intune Devices report data can be exported or become available at any time within each 24-hour export period, subject to the documented delivery window. It also warns that observed completion times may change and recommends schedules that tolerate variable timing for reports, dashboards, and automation.

• Configuration Manager · General

  Configuration Manager SUP upgrades get explicit top-down sequencing

  The revised guidance says to upgrade software update points from the top-level site downward: older WSUS versions can synchronize from newer versions, but newer versions can’t synchronize from older ones. In sites with multiple SUPs, the site server follows a different order depending on whether it hosts a SUP, and mismatched versions can cause synchronization failure.

• Configuration Manager · General

  Cross-domain management point setup adds KDC and DNS checks

  The management point deployment example now states that both the site server and management point must locate a Kerberos Key Distribution Center in the other domain. Each server must also resolve DNS SRV records such as `_kerberos._tcp.dc._msdcs.corp.contoso.com` and `_kerberos._tcp.dc._msdcs.branch.fabrikam.com`.

• Configuration Manager · General

  ConfigMgr app-registration guidance updates the Application ID URI example

  The manually registered app procedure now shows an Application ID URI similar to `https://contoso.onmicrosoft.com/ConfigMgrService`, replacing the earlier `https://ConfigMgrService` example. The diff documents a value-format clarification for the Microsoft Entra app registration; it does not announce a new product requirement.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.