Daily Intune NewsConfiguration Manager carries the period’s most consequential warning: release history now records that 2609 was unpublished on November 11 after an issue could unexpectedly remove discovery data for Active Directory and Microsoft Entra ID groups, affecting collection membership. Separate release notes warn that ODBC Driver 18.7.1.1 can block site configuration on Configuration Manager 2603 and earlier during an upgrade to 2609, recommending validated driver version 18.6.2.1 instead. Intune updates clarify that PowerShell scripts do not block or gate Win32 app processing during ESP, document a Tunnel release upgraded to .NET 10, and revise unauthenticated proxy endpoint guidance.
Configuration Manager · GeneralRelease history now states that the 2609 update was unpublished on November 11, 2026, because it could unexpectedly remove discovery data for Active Directory and Microsoft Entra ID groups, affecting collection membership.
Configuration Manager · GeneralThe release notes document that ODBC Driver 18.7.1.1 can block site configuration on Configuration Manager 2603 and earlier when upgrading to 2609. The documented validated replacement is version 18.6.2.1.
Intune · Device enrollmentThe Setup Status Page documentation now states that PowerShell scripts can run during ESP, but ESP neither tracks them as blocking workloads nor waits for completion. Startup ordering also does not guarantee that scripts finish before Win32 apps begin installing.
Intune · Device securityThe November 10, 2026 release documentation records an upgrade to .NET 10, refreshed Azure Linux 3.0 base images, dependencies, and VPN server components, plus diagnostic improvements and new agent and server image digests.
Intune · FundamentalsThe documented list for some Intune tasks now includes manage.microsoft.com and graph.microsoft.com, while *.azureedge.net was removed. Administrators supporting these tasks should compare their proxy allowlists with the revised list.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
The November 10, 2026 release (version 20261026) upgrades the Tunnel agent to .NET 10, refreshes Azure Linux 3.0 base images, dependencies, and VPN server components, and improves diagnostic operations. It also documents new agent and server image digests.
The documentation now explains that Microsoft reviews applications in submission order, response times vary with volume and capacity, and an initial response may take several weeks. It also notes that participation does not guarantee marketing visibility.
The page now directs prospective Mobile Device Management Compliance partners to a partner application page, replacing the note about a process revamp planned for 2026 Q3.
PowerShell scripts can run during ESP, but ESP doesn’t track them as blocking workloads or wait for completion. Startup ordering also doesn’t guarantee scripts finish before Win32 apps begin installing.
The documentation now clarifies that Intune processes PowerShell scripts first during startup but does not guarantee they finish before Win32 app processing begins. It also adds guidance for dependencies and links to Windows Autopilot ESP behavior.
The documented unauthenticated proxy access list for some Intune tasks now includes manage.microsoft.com and graph.microsoft.com; *.azureedge.net was removed.
Intune documentation adds eScription One, Prisma Browser for Intune, and Elevate UC for Intune to the available protected apps list.
The release notes now document that ODBC Driver 18.7.1.1 can block site configuration on Configuration Manager 2603 and earlier during an upgrade to version 2609. They recommend using validated driver version 18.6.2.1 instead.
The documentation now details an issue where multiple required versions of an extension can repeatedly prompt installation and prevent the Configuration Manager console from opening. It adds a SQL workaround for previous versions.
The documentation now states that the 2609 update was unpublished on November 11, 2026, because of an issue that can unexpectedly remove discovery data for Active Directory and Microsoft Entra ID groups, affecting collection membership. Release history was also added.
