Wednesday, 17 June 2026

Intune's STIG audit baseline arrives for GCC High, requiring Advanced Analytics licensing

The period is led by a substantive device-security capability: Intune now includes a read-only STIG audit baseline, with related pages moving the feature out of the in-development track and into current guidance. A separate Android MAM update adds a targeted privacy-consent integration for apps distributed through certain China app stores.

• Intune · General

  New STIG baseline audits Windows configuration without enforcement

  Intune now includes the Microsoft Windows 11 STIG SCAP Benchmark, Version 2, Release 7, with a benchmark date of January 5, 2026. The baseline evaluates Windows 10 and Windows 11 devices against DISA STIG recommendations and generates detailed audit reports, but does not configure or enforce settings. It is available only to GCC High tenants and requires Advanced Analytics licensing.

• Intune · Android

  Android MAM guidance adds a China app-store consent integration

  Updated Android Phase 7 guidance says apps distributed through China app stores that require privacy consent before cross-app operations should set the `OfflineStartupDeferredUntilAppSignal` manifest flag and call `setOfflineStartupReady()` after the user accepts the consent dialog. The ready state persists and the method is idempotent; the flag should not be included in APKs distributed through other stores.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.