Wednesday, 30 September 2026

Day in brief

Intune iOS enrollment requires the deprecated computer-sync setting set to No

The period contains five updated pages and no new or removed items. The most consequential Intune change is enrollment guidance requiring Run Company Portal in Single App Mode until authentication to be set to No; the page says Apple deprecated Sync with computers in iOS 13 and that it is no longer included in enrollment policies. Other updates clarify Managed Google Play onboarding scope, macOS PKG retry behavior, and Managed Home Screen terminology, while a Configuration Manager matrix adds Windows 11 26H2 support indicators.

Intune · Device enrollment
iOS enrollment setting is marked for removal
The updated Setup Automated iOS guidance says Run Company Portal in Single App Mode until authentication must be set to No. It also records that Apple deprecated Sync with computers in iOS 13 and that the setting is no longer included in enrollment policies; administrators should apply No in applicable policies.
Intune · App management
macOS PKG guidance documents repeated installation retries
Failed macOS app installations are retried at the next agent check-in, with up to three retries while the app remains assigned. Administrators should account for these attempts when monitoring deployment failures.
Intune · App management
Managed Google Play onboarding guidance includes dedicated devices
During onboarding, Intune, Microsoft Authenticator, and Company Portal are installed as required apps on dedicated devices, in addition to fully managed and corporate-owned work profile devices. Dedicated-device administrators should expect these installations, which support Conditional Access.
Configuration Manager · Windows
Configuration Manager matrix lists Windows 11 26H2
The Support for Windows 11 matrix now lists Windows 11 version 26H2, build 10.0.26300, with support indicators shown as ❌, ✅, and ✅. Administrators can use the revised matrix when evaluating 26H2 support.
Intune · App management
Managed Home Screen setting now uses the full product name
The app-exclusion setting description spells out Managed Home Screen instead of using MHS when referring to authentication, making the applicable setting easier to identify.