Tuesday, 16 June 2026

Intune guidance details a fleet-wide security update status dashboard

Two substantive security and management items lead this period: a new Intune concept article specifies the scope and prerequisites of the Security update status dashboard, while Configuration Manager documents KB38232642 for console-extension import security. Separately, the public-preview single device page gains behavior and navigation improvements. The Cloud PKI edit is mechanical rather than a product change.

• Intune · Device security

  New guidance defines the Security update status dashboard’s cross-workload scope

  The new Intune concept article describes a fleet-wide view of security-update currency across Windows client devices, Windows Server devices, and Microsoft 365 Apps. It is intended to identify exposure and prioritize remediation by relative risk, not to perform root-cause analysis. The documented prerequisites include the public cloud and at least Organization/Read permission in Intune RBAC; data sources and requirements vary by workload.

• Configuration Manager · General

  Configuration Manager documents KB38232642 for console-extension import security

  The security update enhances protection when importing console extensions and applies to current branch version 2603, plus versions 2509 and 2503 with the required update rollup. It is available directly through Updates and Servicing for 2603; 2503 requires KB32851084; and 2509 receives it through the second update rollup, so no separate out-of-band hotfix is required. Installation requires neither a computer restart nor a site reset.

• Intune · General

  The redesigned single-device page preview adds action and navigation changes

  The public-preview page, introduced in the 2604 service release, now temporarily shows passcodes and PINs in Device action status after Reset passcode, Recover passcode, Remote Lock, or Rotate BitLocker Keys. Device actions also work with multi-admin approval policies, supported actions are available for supervised iOS devices, and administrators can enable or disable Lost mode. Tools and reports move to left navigation, with Monitor becoming the default landing tab; other documented changes include removing the​‍‍

• Cloud PKI · General

  Cloud PKI renewal guidance receives punctuation-only corrections

  The Renew CA page removes a duplicated comma in the certificate-authority permissions sentence and a stray quotation mark from the Halfway to expiration lifecycle description. The supplied diff shows no change to permissions, renewal procedure, or lifecycle behavior.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.