Daily Intune News
Aboutmerill.net
← Previous week
Next week →
Week in brief

Windows Autopatch will default eligible Intune devices to hotpatching in May

Windows Autopatch is the week's main operational signal: Microsoft says hotpatch security updates will become the default for eligible Intune devices in May 2026, with an opt-out setting in April. Intune also documents a staged macOS Recovery Lock passcode action, clarifies the Application control exception in Attack surface reduction profiles, and refreshes privileged-role guidance. Configuration Manager feedback guidance adds a 26 June 2026 authentication deadline and records a broken standalone feedback tool. Most other entries are ordinary title, metadata, link, casing, or wording corrections; no retirement or broad general-availability event is evidenced.

  • Intune · Device enrollment
    Hotpatch becomes the Windows Autopatch default for eligible devices

    Microsoft's Message Center says Windows Autopatch will enable hotpatch security updates by default for eligible Intune devices starting in May 2026. An opt-out setting is planned for April, and devices must meet prerequisites such as enabling Virtualization-based Security. Microsoft describes hotpatching as delivering security updates without restarts. This is a Plan for Change, not a claim that every Intune-managed device is eligible.

  • Intune · General
    Recovery Lock rotation enters staged rollout with delayed device application

    An updated Intune page says the Rotate Recovery Lock Passcode capability is gradually rolling out, with full availability expected by late April 2026. Confirming the action starts the rotation process, but the new passcode is applied only at the device's next successful Intune check-in; an offline or non-checking-in device retains its existing passcode until then. Related action guidance specifies supervised macOS 11.5 or later on Apple silicon, with Recovery Lock enabled by policy; Intel-based Macs aren't समर्थित.

  • Intune · Device security
    ASR Application control remains template-based and can prompt a reboot

    The Attack surface reduction guidance now tells administrators to select the Windows platform and then the profile they want when creating a policy. It explicitly says the Application control profile is the exception to the Settings Catalog format: existing policies remain functional, but the profile still uses the older template-based format in the admin center. AppLocker CSP deployment currently prompts the end user to reboot. These edits clarify current administration behavior rather than announce a new ASR prof

  • Intune · Tenant administration
    Intune Administrator guidance emphasizes privileged, time-limited access

    Updated RBAC guidance labels the built-in Microsoft Entra role Intune Administrator, while noting that Microsoft Graph and PowerShell still show Intune Service Administrator. It classifies the role as privileged and granting global read/write access across Intune, advises against using it for day-to-day administration, and directs administrators toward narrower built-in or custom roles. This is terminology and security guidance, not evidence that the role's permissions changed this week.

  • Configuration Manager · General
    Configuration Manager feedback adds authentication deadline and tool warning

    Updated Configuration Manager feedback guidance states that unauthenticated requests will no longer be accepted starting 26 June 2026. It also records a known issue in which the standalone UploadOfflineFeedback.exe tool does not work and says the problem will be fixed in the next release; other embedded feedback experiences remain available.

For Intune administrators

Start with Autopatch: identify potentially eligible devices, verify prerequisites such as Virtualization-based Security, and decide whether to use the April opt-out when available. For Recovery Lock, validate the documented requirements—supervised macOS 11.5 or later on Apple silicon, with Recovery Lock enabled by policy—and plan around the next successful device check-in before treating a new passcode as active. Review assignments of the privileged Intune Administrator role and use narrower built-in or custom roles for routine work. For Configuration Manager, prepare authenticated feedback before 26 June and use embedded feedback paths while UploadOfflineFeedback.exe is unavailable. The ASR edits call for review of Application control expectations and reboot messaging, not a migration or新

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.

Updates this week

Device security

16

Endpoint Security Asr Policy

Updated

Updated Microsoft Intune documentation in intune/intune-service/protect/endpoint-security-asr-policy.md.

9 March 2026

Security Baselines Configure

Updated

Updated Microsoft Intune documentation in intune/intune-service/protect/security-baselines-configure.md.

9 March 2026

Fundamentals

10

Whats New

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/whats-new.md.

13 March 2026

Role Based Access Control

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/role-based-access-control.md.

13 March 2026

Multi Admin Approval

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/multi-admin-approval.md.

12 March 2026

Role Based Access Control

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/role-based-access-control.md.

12 March 2026

Multi Admin Approval

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/multi-admin-approval.md.

12 March 2026

Multi Admin Approval

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/multi-admin-approval.md.

12 March 2026

Get Support Admin Center

Updated

Updated Microsoft Intune documentation in intune/fundamentals/it-pro-support/get-support-admin-center.md.

12 March 2026

Device Profile Troubleshoot

Updated

Updated Microsoft Intune documentation in intune/intune-service/configuration/device-profile-troubleshoot.md.

11 March 2026

In Development

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/in-development.md.

10 March 2026

Apple

7

Device Macos

Removed

Removed Microsoft Intune documentation in intune/intune-service/remote-actions/-device-macos-.md.

9 March 2026

App management

6

Apps Win32 Add

Updated

Updated Microsoft Intune documentation in intune/intune-service/apps/apps-win32-add.md.

12 March 2026

General

6

Rotate Recovery Lock Passcode

Updated

Updated Microsoft Intune documentation in intune/intune-service/remote-actions/rotate-recovery-lock-passcode.md.

9 March 2026

Android

3

Settings Catalog Common Features

Updated

Updated Microsoft Intune documentation in intune/intune-service/configuration/settings-catalog-common-features.md.

9 March 2026

Device enrollment

3

Device configuration

2

Settings Catalog Recovery Lock

Updated

Updated Microsoft Intune documentation in intune/intune-service/configuration/settings-catalog-recovery-lock.md.

9 March 2026

Settings Catalog Recovery Lock

Updated

Updated Microsoft Intune documentation in intune/intune-service/configuration/settings-catalog-recovery-lock.md.

9 March 2026

Endpoint analytics

2

Troubleshooting

2

Device Profile Troubleshoot

Updated

Updated Microsoft Intune documentation in intune/intune-service/configuration/device-profile-troubleshoot.md.

11 March 2026

Device Profile Troubleshoot

Updated

Updated Microsoft Intune documentation in intune/intune-service/configuration/device-profile-troubleshoot.md.

11 March 2026

Linux

1

Deployment Guide Platform Linux

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/deployment-guide-platform-linux.md.

13 March 2026

Tenant administration

1

Role Based Access Control

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/role-based-access-control.md.

12 March 2026

Windows

1

Install Apps Cpapp Windows

Updated

Updated Microsoft Intune documentation in intune/intune-service/user-help/install-apps-cpapp-windows.md.

15 March 2026

General

17

Technical Preview 1710

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/get-started/capabilities-in-technical-preview-1710.md.

12 March 2026

Technical Preview 1711

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/get-started/capabilities-in-technical-preview-1711.md.

12 March 2026

Technical Preview 1712

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/get-started/capabilities-in-technical-preview-1712.md.

12 March 2026

Technical Preview 1801

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/get-started/capabilities-in-technical-preview-1801.md.

12 March 2026

Technical Preview 1802

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/get-started/capabilities-in-technical-preview-1802.md.

12 March 2026

36419072

Updated

Updated Microsoft Intune documentation in intune/configmgr/hotfix/2509/36419072.md.

12 March 2026

36419072

Updated

Updated Microsoft Intune documentation in intune/configmgr/hotfix/2509/36419072.md.

12 March 2026

New version 1710

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/plan-design/changes/whats-new-in-version-1710.md.

12 March 2026

36419222

Removed

Removed Microsoft Intune documentation in intune/configmgr/hotfix/2509/36419222.md.

12 March 2026

Supported Configurations For Ltsb

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/understand/supported-configurations-for-ltsb.md.

11 March 2026

36495448

Removed

Removed Microsoft Intune documentation in intune/configmgr/hotfix/2509/36495448.md.

10 March 2026

Introduction To The Ltsb

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/understand/introduction-to-the-ltsb.md.

9 March 2026

Device security

3

Compliance

1

Device security

1

In Development

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/in-development.md.

9 March 2026
Daily Intune.Admin.News

Get daily email updates

Get a concise summary of the latest Microsoft Intune updates delivered straight to your inbox.

Email signup will appear here once the Kit form is configured. Until then, use the daily RSS feed.