Updated Microsoft Intune documentation in intune/intune-service/fundamentals/migrate-to-intune.md.
Require approved client app retires in June; switch to application protection policy
The biggest admin signal is the June 2026 retirement of Microsoft Entra Conditional Access's **Require approved client app** control; a second Message Center notice says Microsoft Defender for Android will stop protecting personal profiles on enrolled devices by March 2026. The 63-record period was otherwise mostly documentation maintenance, but it also records OS enforcement for **Install Windows quality updates** in the `2026-01 B` quality update and clarifies scalar-property rules for Advanced Analytics Device Query. New Managed Home Screen pages document suspend and restore procedures for Android Enterprise corporate-owned Fully Managed and Dedicated devices; the supplied evidence does not establish a preview or general-availability launch.
- Conditional Access control has a June 2026 retirement deadline
Intune · Compliance
Microsoft says the **Require approved client app** control will retire in June 2026 and will no longer be enforceable. Organizations should update affected policies to use **Require application protection policy** for equivalent and enhanced protection. This is a Message Center retirement notice.
- Defender for Android drops enrolled personal-profile protection
Intune · App management
By March 2026, Microsoft Defender for Android will end support for protecting personal profiles on enrolled devices and focus solely on securing corporate work profiles. Work profiles and unenrolled devices are unaffected, and Microsoft says no admin action is required.
- Windows quality-update enforcement is tied to 2026-01 B
Intune · Device enrollment
In the Enrollment Status Page guidance, the **Install Windows quality updates** statement changed from saying the setting was available but not yet enforced by the OS, with enforcement planned for `2026-01 B`, to saying OS enforcement is included in the `2026-01 B` quality update. This updates the documented enforcement status rather than announcing a new policy setting.
- Advanced Analytics requires scalar properties in Device Query operators
Advanced Analytics · Endpoint analytics
The Device Query reference now says the `Device` entity cannot be used directly in scalar-requiring operators such as `distinct`, `summarize`, and `order by`. Administrators should use a specific scalar property instead, such as `Device.SerialNumber` or `Device.OSVersion`. This is a query limitation clarification.
- Intune now recommends Windows Update policies over Win32 .msu packages
Intune · App management
The updated Windows update package guidance explicitly says deploying an `.msu` file as a Win32 app isn't the recommended approach and points administrators to Update rings, Feature updates, and Quality updates. Win32 deployment remains an option when more granular control is needed; this is operational guidance, not a change to the Win32 capability.
Before June 2026, find Conditional Access policies using **Require approved client app** and replace the control with **Require application protection policy**; after retirement, the old control will no longer be enforceable. No admin action is required for the Defender scope change, which doesn't affect corporate work profiles or unenrolled devices. If you use Device Query, change scalar operators to use properties such as `Device.SerialNumber` or `Device.OSVersion`. For normal Windows update deployment, follow the recommended Update rings, Feature updates, or Quality updates path rather than packaging `.msu` files as Win32 apps; use the Win32 method only when granular control is needed. Teams migrating from Basic Mobility and Security should use the revised license-assignment and policy-
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
Updates this week
Microsoft Intune
52 updatesUpdated Microsoft Intune documentation in intune/intune-service/fundamentals/migrate-to-intune.md.
Migrate To Intune
UpdatedUpdated Microsoft Intune documentation in intune/intune-service/fundamentals/migrate-to-intune.md.
Migrate To Intune
UpdatedUpdated Microsoft Intune documentation in intune/intune-service/fundamentals/migrate-to-intune.md.
Remediations
UpdatedUpdated Microsoft Intune documentation in intune/intune-service/fundamentals/remediations.md.
Updated Microsoft Intune documentation in intune/intune-service/fundamentals/migrate-to-intune.md.
Updated Microsoft Intune documentation in intune/intune-service/fundamentals/migrate-to-intune.md.
Free Trial Sign Up
UpdatedUpdated Microsoft Intune documentation in intune/intune-service/fundamentals/free-trial-sign-up.md.
Free Trial Sign Up
UpdatedUpdated Microsoft Intune documentation in intune/intune-service/fundamentals/free-trial-sign-up.md.
Quickstart Create User
UpdatedUpdated Microsoft Intune documentation in intune/intune-service/fundamentals/quickstart-create-user.md.
Quickstart Create User
UpdatedUpdated Microsoft Intune documentation in intune/intune-service/fundamentals/quickstart-create-user.md.
Updated Microsoft Intune documentation in intune/intune-service/fundamentals/free-trial-sign-up.md.
Updated Microsoft Intune documentation in intune/intune-service/fundamentals/quickstart-create-user.md.
Updated Microsoft Intune documentation in intune/intune-service/fundamentals/quickstart-create-custom-role.md.
Microsoft Defender for Android will end support for protecting personal profiles on enrolled devices by March 2026, focusing solely on securing corporate work profiles. This change enhances enterprise security and user privacy, requires no admin action, and does not affect work profiles or unenrolled devices.
Updated Microsoft Intune documentation in intune/intune-service/apps/mamedge-7-troubleshoot.md.
Updated Microsoft Intune documentation in intune/intune-service/apps/mamedge-1-mamca.md.
Updated Microsoft Intune documentation in intune/intune-service/apps/mamedge-4-acp-edge.md.
Updated Microsoft Intune documentation in intune/intune-service/apps/mamedge-5-settings-catalog.md.
Mamedge 4 Acp Edge
UpdatedUpdated Microsoft Intune documentation in intune/intune-service/apps/mamedge-4-acp-edge.md.
Updated Microsoft Intune documentation in intune/intune-service/apps/mamedge-2-app.md.
Updated Microsoft Intune documentation in intune/intune-service/apps/mamedge-3-scc.md.
Updated Microsoft Intune documentation in intune/intune-service/apps/mamedge-6-end-user-experience.md.
Updated Microsoft Intune documentation in intune/intune-service/apps/apps-win32-deploy-update-package.md.
Updated Microsoft Intune documentation in intune/intune-service/apps/apps-win32-deploy-update-package.md.
Add and Assign an App
UpdatedUpdated Microsoft Intune documentation in intune/intune-service/apps/quickstart-add-assign-app.md.
Updated Microsoft Intune documentation in intune/intune-service/apps/quickstart-create-assign-app-policy.md.
Updated Microsoft Intune documentation in intune/intune-service/remote-actions/device-restore-managed-home-screen.md.
Custom Notifications
UpdatedUpdated Microsoft Intune documentation in intune/intune-service/remote-actions/custom-notifications.md.
Added Microsoft Intune documentation in intune/intune-service/remote-actions/device-restore-managed-home-screen.md.
Added Microsoft Intune documentation in intune/intune-service/remote-actions/device-suspend-managed-home-screen.md.
Updated Microsoft Intune documentation in intune/intune-service/remote-actions/device-restore-managed-home-screen.md.
Updated Microsoft Intune documentation in intune/intune-service/remote-actions/device-suspend-managed-home-screen.md.
Index
UpdatedUpdated Microsoft Intune documentation in intune/intune-service/remote-actions/index.md.
Updated Microsoft Intune documentation in intune/intune-service/remote-actions/device-restore-managed-home-screen.md.
Updated Microsoft Intune documentation in intune/intune-service/remote-actions/device-suspend-managed-home-screen.md.
Updated Microsoft Intune documentation in intune/solutions/end-to-end-guides/macos-endpoints-get-started.md.
Try Intune Overview
UpdatedUpdated Microsoft Intune documentation in intune/intune-service/fundamentals/try-intune-overview.md.
Enroll a Windows device
UpdatedUpdated Microsoft Intune documentation in intune/intune-service/enrollment/quickstart-enroll-windows-device.md.
Updated Microsoft Intune documentation in intune/intune-service/enrollment/windows-enrollment-status.md.
Updated Microsoft Intune documentation in intune/intune-service/enrollment/quickstart-setup-auto-enrollment.md.
Updated Microsoft Intune documentation in intune/device-updates/windows/driver-update-policy.md.
Updated Microsoft Intune documentation in intune/device-updates/windows/feature-update-policy.md.
Updated Microsoft Intune documentation in intune/device-updates/windows/update-rings.md.
Updated Microsoft Intune documentation in intune/device-updates/windows/quality-updates.md.
Updated Microsoft Intune documentation in intune/intune-service/remote-actions/device-restore-managed-home-screen.md.
Updated Microsoft Intune documentation in intune/intune-service/remote-actions/device-suspend-managed-home-screen.md.
Updated Microsoft Intune documentation in intune/intune-service/remote-actions/device-suspend-managed-home-screen.md.
Macos Endpoints Get Started
UpdatedUpdated Microsoft Intune documentation in intune/solutions/end-to-end-guides/macos-endpoints-get-started.md.
Updated Microsoft Intune documentation in intune/intune-service/configuration/quickstart-email-profile.md.
The "Require approved client app" control in Microsoft Entra Conditional Access will retire in June 2026. Organizations should update policies to use the "Require application protection policy" control for equivalent and enhanced protection. After retirement, the old control will no longer be enforceable.
Quickstart Send Notification
UpdatedUpdated Microsoft Intune documentation in intune/intune-service/protect/quickstart-send-notification.md.
Windows Autopilot
1 updateWhats New
UpdatedUpdated Microsoft Intune documentation in autopilot/device-preparation/whats-new.md.
Microsoft Configuration Manager
2 updatesStarting March 2026, all Intune guided scenarios except Windows 365 Boot will be removed from the Intune admin center. Existing configurations remain unaffected, no admin action is needed, and alternative guidance is available through provided Microsoft resources.
Updated Microsoft Intune documentation in intune/configmgr/osd/deploy-use/high-impact-task-sequence-settings.md.
Microsoft Intune Advanced Analytics
8 updatesUpdated Microsoft Intune documentation in intune/advanced-analytics/device-query-multiple-devices.md.
Updated Microsoft Intune documentation in intune/advanced-analytics/device-query-multiple-devices.md.
Updated Microsoft Intune documentation in intune/advanced-analytics/device-query-multiple-devices.md.
Updated Microsoft Intune documentation in intune/advanced-analytics/device-query-multiple-devices.md.
Updated Microsoft Intune documentation in intune/advanced-analytics/device-query-multiple-devices.md.
Updated Microsoft Intune documentation in intune/advanced-analytics/device-query-multiple-devices.md.
Updated Microsoft Intune documentation in intune/advanced-analytics/device-query-multiple-devices.md.
Updated Microsoft Intune documentation in intune/advanced-analytics/device-query-multiple-devices.md.