Daily Intune NewsConfiguration Manager 2609 guidance now adds a CMG VM scale set migration preflight: identify CMGs, calculate required vCPUs, check standard Dadv6 Family and regional quotas, and request increases where necessary because insufficient quota can trigger QuotaExceeded. The ADK support matrix points administrators to the 10.1.26100.x family, while two update entries identify addressed elevation-of-privilege vulnerabilities by CVE. Intune's macOS enrollment guidance also warns against assigning registration-enabling PSSO profiles to userless ADE devices.
Configuration Manager · GeneralBefore upgrading, administrators are directed to identify CMGs, calculate required vCPUs, check standard Dadv6 Family and regional quotas, and request quota increases. Insufficient quota can cause a QuotaExceeded error during migration.
Configuration Manager · WindowsThe support matrix lists ADK 10.1.26100.9457 as the current September 2026 release and explains that 10.1.26100.x releases share Windows PE binaries. Known Windows PE issues for ADK 10.1.25398.1 are grouped separately, with administrators directed to the 10.1.26100.x family.
Configuration Manager · GeneralThe update entry now states that 38982839 addresses the elevation-of-privilege vulnerability described in CVE-2026-88075, giving administrators a specific reference for assessing the update's security relevance.
Configuration Manager · GeneralThe issue entry now states that the update addresses the elevation-of-privilege vulnerability described in CVE-2026-70049, allowing administrators to map the hotfix to its documented security issue.
Intune · Device enrollmentIntune guidance warns that targeting userless ADE devices with PSSO profiles that enable registration during Setup Assistant can cause unexpected enrollment behavior and loss of expected affinity.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
The updated guidance warns not to target PSSO profiles that enable registration during Setup Assistant to userless ADE devices, as this can cause unexpected enrollment behavior and loss of expected affinity.
The documentation adds pre-upgrade steps for CMG VM scale set migration, including identifying CMGs, calculating required vCPUs, checking standard Dadv6 Family and regional quotas, and requesting increases. Insufficient quota can cause a QuotaExceeded error.
The documentation now states that the update addresses the elevation-of-privilege vulnerability described in CVE-2026-88075.
The Message Processing Engine issue entry now states that the update addresses the elevation-of-privilege vulnerability described in CVE-2026-70049.
The support matrix now lists ADK 10.1.26100.9457 as the current September 2026 release and explains that 10.1.26100.x releases share the same Windows PE binaries. It also groups the known Windows PE issues for ADK 10.1.25398.1 and directs administrators to the 10.1.26100.x family.
