Thursday, 11 June 2026

Multiple Managed Accounts brings separate app protection to Teams on iOS

The clearest capability change is the gradual rollout of Intune mobile application management (MAM) Multiple Managed Accounts (MMA): Teams on iOS/iPadOS is currently supported, with protection enforced independently for each managed account. The period also includes a material Cloud PKI documentation change, a required Managed Home Screen policy-path change, a new macOS Wi-Fi control, and SQL Server 2025 support for Configuration Manager 2603.

• Intune · App management

  MAM Multiple Managed Accounts is gradually rolling out for Teams

  This new Intune MAM capability lets users add more than one work or school account within a supported app, with app protection policies enforced independently for each account. Current support is Microsoft Teams on iOS/iPadOS version 8.10.0 or later. One account can be MDM+MAM managed while additional accounts are MAM-only, or all accounts can be MAM-only; multiple MDM-managed accounts and apps such as PowerApps are out of scope.

• Cloud PKI · General

  Cloud PKI documentation now states a three-CA tenant limit

  The Cloud PKI index replaces the previous six-CA wording with a limit of three CAs per Intune tenant. The revised text applies to both licensed Cloud PKI using Azure mHSM keys and trial Cloud PKI, and updates the example CA topologies. This is documentation evidence of a changed stated limit, not confirmation that backend enforcement changed.

• Intune · General

  Managed Home Screen exit-password setup now requires device configuration

  The published procedure now says the Managed Home Screen exit lock task mode password can no longer be configured with an app configuration policy. Administrators must create or update a device configuration profile to define the password. The change applies to Android Enterprise corporate-owned fully managed and dedicated devices.

• Intune · General

  macOS 15 Wi-Fi profiles add a MAC-randomization control

  The Disable MAC address randomization setting is now available for managed macOS 15 and later devices in Intune Wi-Fi profiles. Disabling randomization can restore functionality that relies on a static MAC address, including network access control; the release notes continue to identify randomized addresses as preferable for privacy.

• Configuration Manager · General

  Configuration Manager 2603 supports SQL Server 2025

  SQL Server 2025 RTM is now supported for Configuration Manager central administration, primary, and secondary sites. SQL Server 2025 Express is supported for secondary sites. The documented recommended database compatibility level is 160, and the SQL cumulative update must remain within the SQL Server support lifecycle.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.