Thursday, 30 July 2026

Service release 2607 adds Samsung Knox E-FOTA management for corporate Android

The substantive change is a new Intune integration with Samsung Knox E-FOTA in the week of July 27, 2026 service release 2607. The same release documentation adds Windows settings-catalog coverage and seven Microsoft Edge policy settings. Microsoft Tunnel updates are operational: one records a July 27 image release and another changes the documented Ubuntu host version. The remaining edits are largely editorial: the archive backfills earlier announcements, while the Azure Virtual Desktop page clarifies its Azure subscription and Entra ID relationship. No retirement, security advisory, or explicit GA designation appears in the supplied evidence.

• Intune · General

  Samsung Knox E-FOTA enters the current Intune service-release documentation

  The Intune What's new entry says Intune now integrates with Samsung Knox E-FOTA, allowing administrators to control the firmware version assigned to each device, deploy updates without user interaction, and schedule downloads and installations. It applies to Android Enterprise corporate-owned dedicated (COSU), fully managed (COBO), and corporate-owned with a work profile (COPE) devices. The evidence identifies this as a service release 2607 addition but does not explicitly label it GA.

• Intune · General

  Windows settings catalog adds camera, Keyboard Filter, and WSL options

  New settings cover camera behavior, Keyboard Filter controls for Windows Insider devices, and Windows Subsystem for Linux. The documented path is Devices > Manage devices > Configuration > Create > New policy > Windows 10 and later > Settings catalog, and the entry applies to Windows 10 and Windows 11.

• Intune · General

  Edge administrative templates refresh to version 149

  The templates were refreshed to Microsoft Edge 149, version 149.0.4022.21, adding the latest Edge 148 and 149 policy settings. The named additions cover Local Fonts allow and block URL lists, M365 authentication popups in work profiles, MAM enrollment when Purview DLP is configured on the managed device, automatic Copilot contextual-insights panes for Outlook links, and Browsing with Copilot allow and block URL lists.

• Intune · Device security

  Microsoft Tunnel upgrade notes record version 20260624.1

  The July 27, 2026 Tunnel release entry records version 20260624.1, agent image digest sha256:9a7316aaea439dd634b7e073dccc44977e2bb8cdbbf3245cc6288b7932334721, and server image digest sha256:fa286ab658830ded388d839b17420c13cf7fb076f806701d76d7e6867f83859b. The listed changes are minor bug fixes; no new Tunnel capability is described.

• Intune · Device security

  Microsoft Tunnel prerequisites now list Ubuntu 26.04 with Docker CE

  The prerequisites table replaces the Ubuntu 22.04 and Docker CE row with Ubuntu 26.04 and Docker CE. This is a documentation change to the stated host prerequisite; the supplied diff does not say that existing Ubuntu 22.04 deployments are retired or that an immediate upgrade is mandatory.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.