Daily Intune NewsThe period is dominated by documentation consolidation, but several updates have direct operational value. Apple guidance now warns about losing available app assignments when an existing VPP token is re-uploaded for DDM, and clarifies that app configuration policies support MDM-managed apps only. New Intune guidance also documents device renaming, editable device properties, and inventory collection timing. Most other edits correct URLs or reflect the current device-overview action paths, such as Remove data > Retire and Secure > Rotate FileVault recovery key.
Intune · App managementThe Manage VPP for Apple guidance says re-uploading an existing VPP token for DDM causes available app assignments to be lost. It recommends creating a new Apple Business token for DDM, while using MDM for available assignments and apps that require app configuration policies. Administrators should not re-upload tokens that already have available assignments.
Intune · App managementThe managed iOS guidance now states that app configuration policies support only MDM-managed apps and cannot configure DDM apps. The setup procedure was also renumbered, so DDM apps requiring this configuration path need a different management approach.
Intune · GeneralThe new rename-device article covers renaming managed devices from the Intune admin center, supported platforms, platform-specific naming rules, and bulk-renaming variables. It explicitly documents that hybrid-joined Windows devices aren't supported, which should be accounted for when standardizing inventory names.
Intune · Tenant administrationA new article explains how to edit a managed device's name, ownership, primary user, notes, and scope tags from the Properties tab. Scope-tag changes affect device visibility for delegated administrators, while the primary-user workflow is now documented alongside the other editable properties.
Intune · Device configurationThe Collect device properties guidance now says active devices collect inventory multiple times per day, while initial collection can take up to 24 hours because full synchronization runs once daily. Administrators should allow that window before treating missing initial inventory as a problem.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
The article now defines device categories as labels, explains their relationship to dynamic Microsoft Entra security groups, and covers creating categories, building groups, and assigning categories to devices.
The index now links to the device management overview, uses updated titles for device categories and primary-user tasks, and removes links for endpoint security device management, admin tasks, and encryption status details.
The instructions now direct administrators to select **Remove data** > **Retire** from the device overview action icons, instead of selecting **Retire** directly.
The new guidance explains how to rename managed devices from the Intune admin center, supported platforms, platform-specific naming rules, bulk-renaming variables, and limitations such as hybrid-joined Windows devices not being supported.
The article now explains how to open a device’s Device details tab, distinguishes read-only inventory from editable Properties, and documents hardware and software inventory refreshing every seven days from enrollment.
The instructions specify selecting **Locate device** on Windows and **Locate** > **Locate device** on iOS and Android. Location details remain available from the map pin.
The article was retitled and updated to explain how to change or remove a device’s primary user from the Properties tab, along with how Intune assigns and uses the primary user.
The documentation consistently renames the action to “Remove apps and configurations” and updates the steps to select Remove data > Remove apps and configurations.
The instructions now direct administrators to select Locate before choosing either Play Lost Mode sound or Play lost device sound.
The archive page now links to the Admin tasks content under Governance instead of Device management.
The device overview instructions now direct administrators to select Remove data, then Autopilot reset.
The instructions now say to select **Secure** before choosing **Disable Activation Lock** in the device overview action menu.
The instructions now direct administrators to select **Remove data** before selecting **Fresh Start** in the device overview pane.
The documented steps changed from selecting **Full scan** directly to selecting **Microsoft Defender** > **Run full malware scan**.
The Intune What’s new page was updated, including a new metadata date, and the entry describing bulk eSIM actions for corporate-owned Android Enterprise devices was removed.
The instructions now direct administrators to select **Remote actions** before choosing **Logout current user** from the device overview pane.
The instructions now direct administrators to select **Locate** and then **Lost mode (supervised only)** from the device overview action icons.
The documented steps now direct administrators to select Remote actions > Pause Config Refresh from the device overview pane.
The instructions now direct administrators to select Microsoft Defender > Run quick malware scan from the device overview action icons.
The instructions now direct administrators to select **Secure** > **Remote lock** from the device overview action icons.
The instructions now direct administrators to select **Secure** and then **Remove passcode** from the device overview action icons.
The instructions now direct administrators to select **Secure** > **Reset passcode** from the device overview action icons.
The restart procedure now instructs administrators to select **Remote actions** > **Restart** > **Yes** from the device overview pane.
The instructions now direct administrators to select Remote actions > Restore Managed Home Screen from the device overview pane.
The instructions now direct administrators to select **Secure** > **BitLocker key rotation** from the device overview action icons.
The action is now accessed through **Secure** > **Rotate FileVault recovery key** in the device overview pane.
The device overview instructions now direct admins to select **Secure** before choosing **Rotate Local admin password**.
The instructions now direct administrators to select Secure > Rotate Recovery Lock Passcode from the device overview action icons.
The documented path changed from selecting Shut down directly to selecting Remote actions > Shut down > Yes.
The instructions now direct administrators to select **Remote actions** before choosing **Suspend Managed Home Screen**.
The Company Portal help page now links to “Rename a device in Microsoft Intune” at a new documentation location.
The article now links to `/device-management/inventory-and-status/rename-device` instead of `/device-management/actions/rename`.
The documented steps now direct administrators to select Remove data > Wipe from the device overview action icons.
The page documenting the Rename device action, including supported platforms, role requirements, and admin-center steps, was deleted.
The iOS/iPadOS platform guide now links to the endpoint security devices page at a new URL; the link description is unchanged.
The macOS platform guide now links to the endpoint security devices page at its updated documentation path.
The article now points to the encryption report and instructs admins to select Secure > Rotate FileVault recovery key from the device overview, then confirm with Yes.
The instructions now direct administrators to select Secure > Rotate Recovery Lock Passcode, choose Yes, and note that Intune generates a new passcode.
The page now uses simpler wording for device actions and updates the Intune security policies link path.
Two references to “Monitor device encryption with Intune” now point to /intune/device-configuration/endpoint-security/monitor-encryption instead of /intune/device-management/monitor-encryption.
The endpoint security policies page now uses an updated link to the guidance for managing devices with endpoint security in Intune.
The documentation now links to the Admin tasks pane under the governance path instead of the device-management path.
The “Managed by” documentation now links to the endpoint security devices location for details by management type.
The procedure now instructs administrators to select **Collect data** instead of **Yes** to confirm the action.
The multi-admin approval documentation now links to the centralized Admin tasks pane under the governance path instead of the device management path.
The guide now states that app configuration policies support only MDM-managed apps and cannot configure DDM apps. The setup steps were also renumbered.
The documentation now warns that re-uploading an existing VPP token for DDM causes available app assignments to be lost. It recommends creating a new Apple Business token for DDM and using MDM for available assignments and apps requiring app configuration policies.
The documentation now states that active devices collect inventory multiple times per day, while initial collection can take up to 24 hours because full synchronization runs once daily.
The Disk encryption documentation now uses the relative link `monitor-encryption` instead of `../../device-management/monitor-encryption`.
The documented action and pane names changed from “Run remediation (preview)” to “Run remediation.”
The device management actions index updates its Rename entries to link to the bulk-rename-devices section of the device inventory and status documentation.
The Windows platform guide now links to the endpoint security devices page at a new documentation path; the link description is unchanged.
The BitLocker documentation now uses updated links for the encryption report and Monitor disk encryption, and clarifies that recovery keys can be viewed and managed from the encryption report.
The Android platform guide now links to the endpoint security devices article at its updated documentation path.
The documented navigation now directs administrators to select a device and choose **Remote actions** > **Begin a remote assistance session**.
A new overview describes the Devices area in the Intune admin center, including device details, actions, inventory, reports, tools, and related guidance.
The documentation now explains how to edit a managed device’s name, ownership, primary user, notes, and scope tags from the Properties tab.
The documentation now links to the centralized Admin tasks pane under the governance path instead of the device-management path.
