Monday, 1 June 2026

Windows Properties Catalog adds Local AI Agent discovery and OpenClaw controls

The substantive change this period is updated Windows Properties Catalog guidance for discovering local AI agents, including OpenClaw, and linking that inventory to Device Query and an OpenClaw security baseline in preview. The remaining updates are chiefly documentation maintenance: Recovery Lock’s rollout note was removed, Apple account service-access wording was reformatted, and other pages received date or metadata edits.

• Intune · Windows

  Local AI Agent inventory is added to Windows Properties Catalog guidance

  The updated guidance identifies Local AI Agent as a new category for discovering local AI agents such as OpenClaw on Windows devices. After deploying the policy and starting collection, administrators can use Device Query to find affected devices and the Local AI Agent Baseline - OpenClaw (Preview) to block users from using OpenClaw.

• Intune · Apple

  Recovery Lock rollout warning is removed without proving tenant-wide availability

  The macOS Recovery Lock page no longer includes the note that the feature was gradually rolling out and that full availability was expected by mid-May 2026. This edit alone does not establish a change in tenant availability or configuration behavior.

• Intune · Device enrollment

  Apple account service-access guidance receives a formatting-only cleanup

  The page date changed to 1 June 2026 and curly apostrophes were replaced with straight apostrophes throughout. The substantive guidance remains the same: settings are configured in Apple Business or Apple School Manager, Intune supplies a management token, enrollment is still required, and Apple—not Intune—controls per-service availability.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.