Daily Intune News
Aboutmerill.net
← Previous week
Next week →
Week in brief

Opt-in scoped permissions preview changes Intune RBAC as cloud configuration guidance retires

The period’s consequential items are a security-sensitive RBAC preview, the deprecation of automatic Windows cloud-configuration deployment, and concrete platform updates. Intune’s service-release notes list macOS Recovery Lock as available and add Apple DDM Settings Catalog entries; Android Enterprise guidance records a direct LOB-app route for fully managed and dedicated devices; and Endpoint Analytics now accepts WinHTTP-proxied telemetry. Much of the remaining material is ordinary documentation maintenance—wording, navigation, formatting, endpoint-table cleanup, and corrected examples. One useful clarification is that most attack surface reduction profiles use Settings Catalog, while Application control remains template-based.

  • Intune · Tenant administration
    Scoped permissions becomes an opt-in public preview

    Preview / changed behavior: When an administrator has multiple role assignments with different scope tags that share a permission category, Intune’s default behavior merges permissions and can broaden access. The new Scoped permissions setting keeps each assignment’s permissions within its own scope-tag context. Microsoft recommends running the Permissions Assessment Report at Tenant administration > Roles > Settings first; enabling the setting is a one-time tenant action that cannot be undone.

  • Intune · Fundamentals
    Automatic Windows cloud configuration deployment is deprecated

    Retirement / deprecation: the Cloud Configuration article says the guided scenario for automatic deployment of Windows in cloud configuration is deprecated and being removed from the Intune admin center. It directs administrators to the Windows client cloud config setup guide for manual, step-by-step deployment.

  • Intune · Fundamentals
    macOS Recovery Lock is listed as available in service release 2603

    Availability: Recovery Lock lets administrators configure a recovery OS password for company-owned macOS devices, preventing recovery-mode boot, macOS reinstallation, and bypass of remote management. A Settings Catalog policy can enable the feature and configure password rotation; the Recovery Lock remote action can manually rotate the password. The password appears under per-setting status > Passwords and keys, and viewing it requires Remote tasks/View macOS recovery lock password. The same release note lists newi

  • Intune · App management
    Android Enterprise guidance adds a direct-APK LOB deployment route

    Documentation clarification / supported deployment option: updated guidance states that required Android line-of-business apps can be uploaded as APK files directly to Intune and assigned as required on Android Enterprise fully managed and dedicated corporate-owned devices, without using Managed Google Play. The limitation is explicit: this path applies to those enrollment types.

  • Intune · App management
    WinHTTP proxy devices can now feed Endpoint Analytics and EPM

    Changed behavior: devices configured with system-level WinHTTP proxy settings can now send telemetry to Endpoint Analytics and Advanced Analytics, while Endpoint Privilege Management includes elevation-usage data from those devices. The release note says no administrator action is required; when the capabilities are enabled, data appears in the User Experience device view, Endpoint Analytics reports, and EPM.

For Intune administrators

RBAC owners should run the Permissions Assessment Report at Tenant administration > Roles > Settings before opting in to Scoped permissions; the change is one-time and cannot be undone. Windows cloud-configuration operators should use the manual step-by-step setup guide for new deployments because automatic guided deployment is deprecated and being removed. Mac administrators can evaluate Recovery Lock and the permission required to view its password. Android Enterprise administrators can assess direct APK deployment for required apps on fully managed and dedicated corporate-owned devices. No administrator action is required for the newly documented WinHTTP proxy telemetry support.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.

Updates this week

Fundamentals

25

Whats New

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/whats-new.md.

20 March 2026

Cloud Configuration

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/cloud-configuration.md.

20 March 2026

Guided Scenarios Cloud Managed Pc

Removed

Removed Microsoft Intune documentation in intune/intune-service/fundamentals/guided-scenarios-cloud-managed-pc.md.

20 March 2026

Guided Scenarios Edge

Removed

Removed Microsoft Intune documentation in intune/intune-service/fundamentals/guided-scenarios-edge.md.

20 March 2026

Guided Scenarios Office Mobile

Removed

Removed Microsoft Intune documentation in intune/intune-service/fundamentals/guided-scenarios-office-mobile.md.

20 March 2026

Guided Scenarios Overview

Removed

Removed Microsoft Intune documentation in intune/intune-service/fundamentals/guided-scenarios-overview.md.

20 March 2026

Help Desk Operators

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/help-desk-operators.md.

20 March 2026

Whats New

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/whats-new.md.

19 March 2026

In Development

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/in-development.md.

19 March 2026

Deployment Plan Setup

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/deployment-plan-setup.md.

18 March 2026

Deployment Plan Setup

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/deployment-plan-setup.md.

18 March 2026

Deployment Plan Protect Apps

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/deployment-plan-protect-apps.md.

18 March 2026

China Endpoints

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/china-endpoints.md.

18 March 2026

Intune Us Government Endpoints

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/intune-us-government-endpoints.md.

18 March 2026

Deployment Plan Setup

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/deployment-plan-setup.md.

17 March 2026

Get Started With Intune

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/get-started-with-intune.md.

17 March 2026

Assign Role

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/assign-role.md.

17 March 2026

Create Custom Role

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/create-custom-role.md.

17 March 2026

Assign Role

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/assign-role.md.

17 March 2026

Create Custom Role

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/create-custom-role.md.

17 March 2026

Intune Endpoints

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/intune-endpoints.md.

16 March 2026

Intune Endpoints

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/intune-endpoints.md.

16 March 2026

Intune Endpoints

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/intune-endpoints.md.

16 March 2026

App management

13

Whats New

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/whats-new.md.

20 March 2026

Lob Apps Ios

Updated

Updated Microsoft Intune documentation in intune/intune-service/apps/lob-apps-ios.md.

20 March 2026

Microsoft Defender Integrate

Updated

Updated Microsoft Intune documentation in intune/intune-service/protect/microsoft-defender-integrate.md.

19 March 2026

Vpp Apps Ios

Updated

Updated Microsoft Intune documentation in intune/intune-service/apps/vpp-apps-ios.md.

17 March 2026

Tenant administration

9

Scope Tags

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/scope-tags.md.

18 March 2026

Scope Tags

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/scope-tags.md.

17 March 2026

Role Based Access Control

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/role-based-access-control.md.

17 March 2026

Role Based Access Control

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/role-based-access-control.md.

17 March 2026

Role Based Access Control

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/role-based-access-control.md.

17 March 2026

Scope Tags

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/scope-tags.md.

17 March 2026

Role Based Access Control

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/role-based-access-control.md.

17 March 2026

Role Based Access Control

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/role-based-access-control.md.

17 March 2026

In Development

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/in-development.md.

16 March 2026

Windows

5

Frontline Worker Overview

Updated

Updated Microsoft Intune documentation in intune/solutions/frontline-worker/frontline-worker-overview.md.

20 March 2026

Intune Planning Guide

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/intune-planning-guide.md.

20 March 2026

Manage Devices

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/manage-devices.md.

20 March 2026

Device security

4

Endpoint Security Asr Policy

Updated

Updated Microsoft Intune documentation in intune/intune-service/protect/endpoint-security-asr-policy.md.

18 March 2026

Microsoft Defender Integrate

Updated

Updated Microsoft Intune documentation in intune/intune-service/protect/microsoft-defender-integrate.md.

18 March 2026

Compliance

3

Android

1

Apple

1

In Development

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/in-development.md.

20 March 2026

Device configuration

1

Device enrollment

1

Deployment Guide Enroll

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/deployment-guide-enroll.md.

18 March 2026

Endpoint analytics

1

Multi Admin Approval

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/multi-admin-approval.md.

16 March 2026

General

1

General

7

Properties

Updated

Updated Microsoft Intune documentation in intune/configmgr/mdt/properties.md.

17 March 2026

Udi Reference

Updated

Updated Microsoft Intune documentation in intune/configmgr/mdt/udi-reference.md.

17 March 2026

Samples Guide

Updated

Updated Microsoft Intune documentation in intune/configmgr/mdt/samples-guide.md.

16 March 2026

Properties

Updated

Updated Microsoft Intune documentation in intune/configmgr/mdt/properties.md.

16 March 2026

Udi Reference

Updated

Updated Microsoft Intune documentation in intune/configmgr/mdt/udi-reference.md.

16 March 2026

Device security

3

Create Windows Firewall Policies

Updated

Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/create-windows-firewall-policies.md.

18 March 2026

Create Windows Firewall Policies

Updated

Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/create-windows-firewall-policies.md.

17 March 2026

Windows

1

Samples Guide

Updated

Updated Microsoft Intune documentation in intune/configmgr/mdt/samples-guide.md.

16 March 2026

Fundamentals

1

Remote Help Use

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/remote-help-use.md.

18 March 2026

Endpoint analytics

1

Device Query Multiple Devices

Updated

Updated Microsoft Intune documentation in intune/advanced-analytics/device-query-multiple-devices.md.

18 March 2026
Daily Intune.Admin.News

Get daily email updates

Get a concise summary of the latest Microsoft Intune updates delivered straight to your inbox.

Email signup will appear here once the Kit form is configured. Until then, use the daily RSS feed.