Friday, 19 June 2026

HTTPS delivery requirement changes how Intune Win32 apps use Connected Cache

Two substantive updates stand out. Intune now requires HTTPS delivery for managed Win32 app content, affecting organizations that use Microsoft Connected Cache without HTTPS-configured nodes. Windows Autopilot also documents Intune Connector for Active Directory build 6.2604.2000.3, which adds an opt-in workaround for a bring-your-own gMSA privilege-check failure. The remaining edits are documentation maintenance: reference cleanup and wording or formatting normalization.

• Intune · General

  Managed Win32 app content now requires HTTPS delivery

  Intune now requires HTTPS delivery for managed Win32 app content. Clients can still download Win32 apps when Connected Cache nodes are not configured for HTTPS, but those requests bypass the cache nodes and fall back to the content delivery network. The update points administrators to HTTPS setup guidance for Windows and Linux cache nodes.

• Windows Autopilot · Device enrollment

  ODJ Connector build adds an opt-in gMSA privilege-check bypass

  Build 6.2604.2000.3 or later adds the optional `SkipByoMsaPrivilegeCheck` `<appSettings>` key for bring-your-own gMSA configurations. Set it to `true` to skip the `SeLogonAsServicePrivilege` pre-check when that privilege has been assigned but has not propagated to the connector host; then restart configuration. The default remains `false`, so the pre-check continues unless explicitly disabled.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.