Week in brief

Controlled Configuration preview makes Defender antivirus policy authoritative over legacy settings

Intune’s period was maintenance-heavy: 239 entries were updated, no Message Center items appeared, and many representative edits changed links, headings, terminology, or requirements formatting rather than documented service behavior. The meaningful exceptions concern security and platform changes: Controlled Configuration is explicitly headed to public preview; Apple’s 26.4 guidance redirects deprecated Intelligence controls to DDM; Strict Tunnel Mode is in development for Android; and the MTD connector guidance defines a tightly scoped Android role.

  • The In Development guidance explicitly says Intune is bringing Controlled Configuration (CC) to public preview for Microsoft Defender antivirus settings. When enabled, settings delivered by Intune or Microsoft Defender for Endpoint security settings management override Group Policy, Configuration Manager, local changes, and scripts. CC also extends Tamper Protection by allowing administrators to lock settings to defined values rather than only defaults. This is a policy-precedence change to plan for, not a general-

  • For iOS/iPadOS and macOS devices running version 26.4 and later, the guidance says Apple deprecated Intelligence-related settings in the MDM restrictions payload. It directs administrators to the DDM configurations released in March 2026. The deprecated list includes controls for Assistant, Dictation, Genmoji, Writing Tools, Siri, predictive keyboards, spell check, and related features. This is a platform-driven migration path, not a new Intune setting launch.

  • The roadmap says Microsoft Tunnel will add Strict Tunnel Mode for Android Enterprise devices enrolled through Android Management API, configured with Always On VPN. It will force traffic through the tunnel and block traffic if the connection drops, while an app exclusion list allows specified apps to bypass the tunnel. The guidance also describes support for unenrolled devices using Microsoft Tunnel for Mobile Application Management. The capability remains in development.

  • The connector documentation adds a fourth category, Mobile Threat Defense role, with a toggle that grants the selected partner exemptions from app suspension, hibernation, power restrictions, and user controls on Android Enterprise corporate-owned fully managed and corporate-owned work profile devices. Only one MTD partner can hold the role per tenant; the connector must be configured, its app targeted, and devices enrolled through Android Management API. Personally owned work profiles are not supported. The change

  • An added warning in Create Policy says discovery-script output is limited to 2,048 characters. Output beyond that may be truncated, producing invalid JSON and error 65009 during compliance evaluation. Administrators should keep output concise or split large rule sets across multiple policies. This is operational guidance about custom compliance, not a launch or support change.

For Intune administrators

Treat Controlled Configuration and Strict Tunnel Mode as preview or roadmap planning material, not general-availability announcements. For design reviews, account for Controlled Configuration’s precedence over Group Policy, Configuration Manager, and local changes; verify Android Management API and Always On VPN dependencies for Tunnel; and map Apple Intelligence controls to DDM for version 26.4 and later. Audit custom-compliance scripts against the 2,048-character output limit and error 65009 risk. The MTD role has a one-partner-per-tenant constraint and excludes personally owned work profiles; ordinary link and heading edits do not call for tenant changes.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.

Updates this week

Microsoft Intune

218 updates
57

Scenarios

Updated

Updated Microsoft Intune documentation in intune/device-security/conditional-access-integration/scenarios.md.

8 May 2026

In Development

Updated

Updated Microsoft Intune documentation in intune/whats-new/in-development.md.

5 May 2026

Setup Notifications

Updated

Updated Microsoft Intune documentation in intune/device-enrollment/setup-notifications.md.

5 May 2026

Setup Time Grouping

Updated

Updated Microsoft Intune documentation in intune/device-enrollment/setup-time-grouping.md.

5 May 2026

Attestation

Updated

Updated Microsoft Intune documentation in intune/device-enrollment/windows/attestation.md.

5 May 2026

Setup Web Based Ios

Updated

Updated Microsoft Intune documentation in intune/device-enrollment/apple/setup-web-based-ios.md.

5 May 2026

Add Corporate Identifiers

Updated

Updated Microsoft Intune documentation in intune/device-enrollment/add-corporate-identifiers.md.

5 May 2026

Setup Configurator Ios

Updated

Updated Microsoft Intune documentation in intune/device-enrollment/apple/setup-configurator-ios.md.

5 May 2026

Add Corporate Identifiers

Updated

Updated Microsoft Intune documentation in intune/device-enrollment/add-corporate-identifiers.md.

5 May 2026

Create Bulk Package

Updated

Updated Microsoft Intune documentation in intune/device-enrollment/windows/create-bulk-package.md.

5 May 2026

Setup Automated Macos

Updated

Updated Microsoft Intune documentation in intune/device-enrollment/apple/setup-automated-macos.md.

5 May 2026

Setup Enrollment Manager

Updated

Updated Microsoft Intune documentation in intune/device-enrollment/setup-enrollment-manager.md.

5 May 2026

Setup Automated Macos

Updated

Updated Microsoft Intune documentation in intune/device-enrollment/apple/setup-automated-macos.md.

5 May 2026

Setup Web Based Ios

Updated

Updated Microsoft Intune documentation in intune/device-enrollment/apple/setup-web-based-ios.md.

5 May 2026

Setup Automated Macos

Updated

Updated Microsoft Intune documentation in intune/device-enrollment/apple/setup-automated-macos.md.

5 May 2026

Migrate To Application Management

Updated

The guide preserves the required Managed apps permissions and explains that Application Manager has sufficient permissions and scope tags control administrator visibility.

4 May 2026

Delete

Updated

The Delete device action article replaces iOS/iPadOS with Apple mobile while preserving the behavior: Delete triggers Retire for Apple mobile, macOS, and Windows; Android behavior continues to depend on enrollment type.

4 May 2026

Configure Multifactor Authentication

Updated

The MFA article now explicitly lists Android, iOS/iPadOS, macOS, and Windows support and states that users need Microsoft Entra ID P1 or later.

4 May 2026

Set up enrollment time grouping

Updated

The article restructures requirements for Windows Autopilot device preparation, Android Enterprise, and tvOS/visionOS ADE, including the relevant enrollment-time device membership assignment permissions.

4 May 2026

Enable Backup Restore

Updated

The backup and restore guide structures requirements for Entra-joined or hybrid-joined devices and supported Windows builds.

4 May 2026

Create Bulk Package

Updated

The bulk package guide moves Windows support and Microsoft Entra role requirements into a formal Requirements section.

4 May 2026

Setup Fully Managed

Updated

The guide restructures prerequisites while retaining Android 10+, Google Mobile Services connectivity, regional and device support checks, and the existing tenant setup guidance.

4 May 2026

Setup Corporate Work Profile

Updated

The guide reformats its requirements while retaining Android 8.0+, Google Mobile Services connectivity, regional Android Enterprise availability, and device-support checks.

4 May 2026

Setup Dedicated

Updated

The dedicated-device guide restructures requirements while retaining Android 8.0+, Google Mobile Services connectivity, regional availability, and device support checks.

4 May 2026

Setup Just In Time Registration

Updated

The JIT registration article restructures supported iOS/iPadOS enrollment scenarios and the compliance-policy requirement for JIT remediation.

4 May 2026

Setup Personal Work Profile

Updated

The guide restructures Android Enterprise availability, tenant connection, and platform support prerequisites into dedicated requirement sections.

4 May 2026

Add Corporate Identifiers

Updated

The article reformats requirements and explicitly lists Android, iOS/iPadOS, and Windows support plus Policy and Profile Manager or Intune Administrator role requirements.

4 May 2026

Connect Managed Google Play

Updated

The connection guide now groups country availability, Microsoft Entra account/mailbox, and Intune Administrator or custom organization read/update permissions as requirements.

4 May 2026

Setup Aosp Corporate User Associated

Updated

The AOSP setup guide separates platform, licensing, and tenant requirements and states that specialized-device users need valid licenses.

4 May 2026

Setup Aosp Corporate Userless

Updated

The userless AOSP guide now separates platform, licensing, and tenant requirements and calls out valid licenses for specialized-device users.

4 May 2026

Setup Automated Vision Os

Updated

The Vision Pro ADE guide separates device eligibility from Apple Business/School Manager portal, token, and Intune push-certificate requirements.

4 May 2026

Setup Direct Macos

Updated

The direct macOS enrollment guide explicitly identifies macOS support and retains the requirement to unenroll a Mac from another MDM provider first.

4 May 2026

School Manager

Updated

The guide restructures Apple School Manager enrollment prerequisites, including supported Apple mobile platforms and portal-based setup.

4 May 2026

Device Staging

Updated

The device-staging article separates the Android 8+ requirement and supported corporate-owned fully managed and work-profile enrollment methods from its overview.

4 May 2026

Setup Automated Ios

Updated

The ADE guide now separately identifies new or wiped Apple Business Manager or School Manager devices and the required Apple portal access, token, and MDM push certificate.

4 May 2026

Setup Automated Tv Os

Updated

The tvOS ADE guide separates eligible new or wiped Apple TV hardware from portal access, active Apple token, and Intune MDM push-certificate requirements.

4 May 2026

Setup Corporate Userless

Updated

The userless corporate Apple enrollment guide now presents platform support and setup prerequisites in requirement sections.

4 May 2026

Setup Account Driven User

Updated

The guide explicitly identifies iOS/iPadOS 15+ support; devices on 14.9 and earlier use Company Portal user enrollment.

4 May 2026

Setup Automated Macos

Updated

The macOS ADE guide now separates device eligibility from tenant requirements, including Apple portal access, a macOS ADE token, and an Intune MDM push certificate.

4 May 2026

Setup Configurator Ios

Updated

The iOS/iPadOS Configurator guide adds explicit platform and tenant-configuration requirement sections for MDM authority and Apple MDM push certificate.

4 May 2026

Setup User Company Portal

Updated

The guide identifies support for iOS 13+ and iPadOS 13.1+ and restructures setup requirements.

4 May 2026

Attestation

Updated

The attestation guide explicitly lists supported Windows 10 and Windows 11 build levels, TPM 2.0+, and physical-device-only support.

4 May 2026

Create Device Limit Restrictions

Updated

The guide lists Android, iOS/iPadOS, macOS, and Windows support and confirms Intune Service Administrator can create, edit, delete, and reprioritize restrictions; custom and other built-in roles are read-only.

4 May 2026

Create Platform Restrictions

Updated

The guide lists Android, iOS/iPadOS, macOS, and Windows support and confirms Intune Administrator can create, edit, delete, and reprioritize platform restrictions while other built-in roles are read-only.

4 May 2026

Setup Notifications

Updated

The guide now requires Intune Administrator to create enrollment notifications and calls out Intune branding and customization setup under Tenant administration > Customization.

4 May 2026

Setup Web Based Ios

Updated

The guide explicitly states iOS/iPadOS 15+ support, with earlier versions automatically using app-based enrollment, and identifies MDM authority and push-certificate prerequisites.

4 May 2026

Setup Enrollment Manager

Updated

The guide now structures the Intune Administrator requirement separately and documents Update permission for creating or deleting DEM accounts and Read permission for viewing them.

4 May 2026

Configure Chrome Enterprise Connector

Updated

The connector guide now groups Google Admin console and ChromeOS-device-management access with the Intune Service Administrator or equivalent custom-role requirement.

4 May 2026

Enroll Package

Updated

The education tutorial changes its bulk enrollment token reference from Roles and permissions to the renamed Requirements section.

4 May 2026
50

In Development

Updated

Updated Microsoft Intune documentation in intune/whats-new/in-development.md.

6 May 2026

In Development

Updated

Updated Microsoft Intune documentation in intune/whats-new/in-development.md.

6 May 2026

In Development

Updated

Updated Microsoft Intune documentation in intune/whats-new/in-development.md.

6 May 2026

Remote Lock

Updated

The Remote lock procedure replaces generic portal references with direct Microsoft Intune admin center links for Devices and All devices, and names Help Desk Operator, School Administrator, Endpoint Security Manager, or a custom role as the supported role destinations.

5 May 2026

Restart

Updated

The Restart procedure replaces generic portal references with direct Microsoft Intune admin center links for Devices and All devices, and names Help Desk Operator, School Administrator, Endpoint Security Manager, or a custom role as the supported role destinations.

5 May 2026

Restart

Updated

The restart procedure now uses direct Devices and All devices navigation and current Help Desk Operator, School Administrator, Endpoint Security Manager, and custom-role references.

5 May 2026

Shutdown

Updated

The shutdown procedure now directs operators to Devices and All devices and presents Help Desk Operator, School Administrator, Endpoint Security Manager, and custom roles directly.

5 May 2026

Sync

Updated

Replaces reference-style Intune admin center and role links with direct Devices > All devices links and named Help Desk, School Administrator, Endpoint Security Manager, and custom-role links.

5 May 2026

Fresh Start

Updated

The Fresh Start procedure now points directly to Devices and All devices and provides direct links for Help Desk Operator, School Administrator, Endpoint Security Manager, and custom roles.

5 May 2026

Full Scan

Updated

The Full scan procedure replaces indirect portal references with direct Intune admin center links for Devices and All devices, and direct role links for Help Desk Operator, Endpoint Security Manager, and custom roles.

5 May 2026

Quick Scan

Updated

The Quick scan procedure replaces generic portal references with direct Microsoft Intune admin center links for Devices and All devices, and names Help Desk Operator, Endpoint Security Manager, or a custom role as the supported role destinations.

5 May 2026

Retire

Updated

The Retire procedure replaces generic portal references with direct Microsoft Intune admin center links for Devices and All devices, and names Help Desk Operator, School Administrator, or a custom role as the supported role destinations.

5 May 2026

Rotate Bitlocker Keys

Updated

The BitLocker key rotation steps now point directly to Devices and All devices and identify Help Desk Operator, Endpoint Security Manager, and custom roles as the role references.

5 May 2026

Rotate Filevault Recovery Key

Updated

The FileVault recovery-key procedure now links directly to Devices and All devices and identifies Help Desk Operator, Endpoint Security Manager, and custom roles.

5 May 2026

Fresh Start

Updated

Fresh Start instructions replace reference-style role and navigation links with direct Intune admin-center links.

5 May 2026

Rename

Updated

The rename procedure now points directly to Devices and All devices and to current Help Desk Operator, School Administrator, and custom-role definitions.

5 May 2026

Reset Passcode

Updated

The Reset passcode procedure replaces generic portal references with direct Microsoft Intune admin center links for Devices and All devices, and names Help Desk Operator, School Administrator, or a custom role as the supported role destinations.

5 May 2026

Autopilot Reset

Updated

Autopilot Reset documentation replaces reference-style links with direct Intune admin-center Devices and All devices links.

5 May 2026

Autopilot Reset

Updated

Changes Autopilot Reset link-section comments and removes .md from built-in-role link targets.

5 May 2026

Delete

Updated

Delete action instructions replace reference-style role and admin-center navigation links with direct links.

5 May 2026

Deprovision

Updated

Deprovision action instructions replace reference-style role and navigation links with direct Intune admin-center links.

5 May 2026

Lost Mode

Updated

Both enable and disable Lost Mode steps now link directly to Devices and All devices, with direct Help Desk Operator, School Administrator, and custom-role references.

5 May 2026

Rename

Updated

The Rename procedure replaces generic portal references with direct Microsoft Intune admin center links for Devices and All devices, and names Help Desk Operator, School Administrator, or a custom role as the supported role destinations.

5 May 2026

Update Cellular Data Plan

Updated

Replaces reference-style role and admin-center links with direct Microsoft Intune admin center, Devices, and All devices destinations.

5 May 2026

Wipe

Updated

Replaces reference-style role and admin-center links with direct Microsoft Intune admin center, Devices, and All devices destinations.

5 May 2026

Disable Activation Lock

Updated

Disable Activation Lock instructions replace reference-style links with direct Intune admin-center and role links.

5 May 2026

Locate

Updated

The Locate device procedure replaces generic portal and relative RBAC references with direct Devices and All devices links plus direct Custom role, Help Desk Operator, and School Administrator links.

5 May 2026

Play Lost Mode Sound

Updated

The supervised-device sound procedure now links directly to Devices and All devices and to Help Desk Operator, School Administrator, and custom-role definitions.

5 May 2026

Remove Apps Config

Updated

The Remove apps and configuration procedure replaces generic portal references with direct Microsoft Intune admin center links for Devices and All devices, and names Help Desk Operator, School Administrator, or a custom role as the supported role destinations.

5 May 2026

Remove Passcode

Updated

The Remove passcode procedure replaces generic portal references with direct Microsoft Intune admin center links for Devices and All devices, and names Help Desk Operator, School Administrator, or a custom role as the supported role destinations.

5 May 2026

Restore Managed Home Screen

Updated

The Restore Managed Home Screen procedure replaces generic portal references with direct Microsoft Intune admin center links for Devices and All devices, and names Help Desk Operator, School Administrator, or a custom role as the supported role destinations.

5 May 2026

Send Custom Notification

Updated

The custom notification procedure now leads directly to Devices and All devices and provides direct role references for Help Desk Operator and custom roles.

5 May 2026

Suspend Managed Home Screen

Updated

The suspension procedure now points directly to Devices and All devices and names Help Desk Operator, School Administrator, and custom roles.

5 May 2026

Wipe

Updated

Updated Microsoft Intune documentation in intune/device-management/actions/wipe.md.

5 May 2026

Logout User

Updated

The shared-device logout procedure now links directly to the Devices and All devices pages and to Help Desk Operator and custom-role definitions.

5 May 2026

Remove User

Updated

The Remove user procedure replaces generic portal references with direct Microsoft Intune admin center links for Devices and All devices, and names Help Desk Operator or a custom role as the supported role destinations.

5 May 2026

Lost Mode

Updated

The enable and disable Lost Mode procedures now point directly to Devices and All devices and provide direct links for Help Desk Operator, School Administrator, and custom roles.

5 May 2026

Pause Config Refresh

Updated

The procedure now links directly to Devices and All devices and names Intune Administrator and custom-role destinations; its 1,440-minute maximum remains documented.

5 May 2026

Rotate Local Admin Password

Updated

Updated Microsoft Intune documentation in intune/device-management/actions/rotate-local-admin-password.md.

5 May 2026

Rotate Recovery Lock Passcode

Updated

The macOS Recovery Lock procedure now uses direct Devices and All devices navigation and includes direct links for Intune Administrator, custom, Help Desk Operator, and School Administrator roles.

5 May 2026

Data storage and processing

Updated

Updated Microsoft Intune documentation in intune/privacy/data-handling/data-storage-processing.md.

5 May 2026

Index

Updated

The device-action overview adds direct links for All devices, Device actions, Devices, and Bulk device actions instead of generic portal destinations.

5 May 2026

Rotate Local Admin Password

Updated

The local administrator password procedure now directs admins through Devices and All devices and provides the custom-role destination for Remote tasks/Rotate Local Admin Password.

5 May 2026

In Development

Updated

Updated Microsoft Intune documentation in intune/whats-new/in-development.md.

5 May 2026

In Development

Updated

The planned Android Managed Home Screen actions to temporarily suspend and restore the launcher were removed from the in-development article.

4 May 2026

In development - Microsoft Intune

Updated

The in-development article adds planned macOS Wi-Fi MAC-randomization control, iOS/iPadOS 802.1X wired-network profiles, Android Enterprise Bluetooth-sharing control, Apple ADE enrollment-time grouping, and in-place renewal for eligible Cloud PKI issuing CAs.

4 May 2026

In Development

Updated

A planned enhancement will make the Windows Sync device action perform a more comprehensive immediate synchronization across compliance, configuration policies, apps, and scripts instead of waiting for scheduled check-ins.

4 May 2026

In Development

Updated

Intune plans custom macOS compliance checks using scripts and JSON rules, with results displayed alongside standard compliance reporting.

4 May 2026

In Development

Updated

The planned iOS/iPadOS wired-network profile entry now links to the current wired-networks configuration article instead of a broken path.

4 May 2026

Index

Updated

The What's New entry adds that the Direct Android LOB feature is gradually rolling out, with full availability expected by mid-May 2026.

4 May 2026
37

Create Policy

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/create-policy.md.

8 May 2026

Custom Settings

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/custom-settings.md.

8 May 2026

Enable Connector

Updated

Updated Microsoft Intune documentation in intune/device-security/mobile-threat-defense/enable-connector.md.

8 May 2026

Configure Wsl

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/configure-wsl.md.

8 May 2026

Ref Ios Ipados Settings

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/ref-ios-ipados-settings.md.

8 May 2026

App Based Policies

Updated

Updated Microsoft Intune documentation in intune/device-security/conditional-access-integration/app-based-policies.md.

8 May 2026

Create Custom Script

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/create-custom-script.md.

8 May 2026

Ref Windows Settings

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/ref-windows-settings.md.

8 May 2026

Install

Updated

Updated Microsoft Intune documentation in intune/device-security/microsoft-tunnel/install.md.

8 May 2026

Configure Noncompliance Actions

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/configure-noncompliance-actions.md.

8 May 2026

Ref Android Aosp Settings

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/ref-android-aosp-settings.md.

8 May 2026

Overview

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/overview.md.

8 May 2026

Overview

Updated

Updated Microsoft Intune documentation in intune/device-security/mobile-threat-defense/overview.md.

8 May 2026

Ref Linux Settings

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/ref-linux-settings.md.

8 May 2026

Ref Macos Settings

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/ref-macos-settings.md.

8 May 2026

Ref Android Enterprise Settings

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/ref-android-enterprise-settings.md.

8 May 2026

Third Party Partners

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/third-party-partners.md.

8 May 2026

Create Custom Json

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/create-custom-json.md.

8 May 2026

Create Custom Script

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/create-custom-script.md.

8 May 2026

Overview

Updated

Updated Microsoft Intune documentation in intune/device-security/microsoft-tunnel/overview.md.

8 May 2026

Block No Modern Auth

Updated

Updated Microsoft Intune documentation in intune/device-security/conditional-access-integration/block-no-modern-auth.md.

8 May 2026

Overview

Updated

Updated Microsoft Intune documentation in intune/device-security/conditional-access-integration/overview.md.

8 May 2026

Create Policy

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/create-policy.md.

7 May 2026

Upgrade

Updated

The Microsoft Tunnel upgrade article adds a May 1, 2026 release-notes section for version 20260407.1 and its image hashes.

4 May 2026
20

Retire

Updated

The retirement procedure now uses direct Devices and All devices navigation and current Help Desk Operator, School Administrator, and custom-role references.

5 May 2026

Remote Lock

Updated

The Remote lock procedure now points directly to Devices and All devices and to current Help Desk Operator, School Administrator, Endpoint Security Manager, and custom-role definitions.

5 May 2026

Rotate Filevault Recovery Key

Updated

The FileVault recovery-key procedure now points directly to Devices and All devices and current Help Desk Operator, Endpoint Security Manager, and custom-role references.

5 May 2026

Rotate Bitlocker Keys

Updated

The BitLocker key rotation procedure now points directly to Devices and All devices and current Help Desk Operator, Endpoint Security Manager, and custom-role references.

5 May 2026

Shutdown

Updated

Updated Microsoft Intune documentation in intune/device-management/actions/shutdown.md.

5 May 2026

Locate

Updated

The Locate device procedure now points directly to Devices and All devices and provides direct links for Help Desk Operator, School Administrator, and custom roles.

5 May 2026

Reset Passcode

Updated

The passcode-reset procedure now points directly to Devices and All devices and to current Help Desk Operator, School Administrator, and custom-role definitions.

5 May 2026

Delete

Updated

Changes Delete action link-section comments and removes .md from role-reference link targets.

5 May 2026

Disable Activation Lock

Updated

The Activation Lock removal procedure reorganizes Intune admin center and role link references without changing the action flow.

5 May 2026

Pause Config Refresh

Updated

The pause workflow now uses direct Devices and All devices navigation and directs Intune Administrator and custom-role references to their current destinations. The documented maximum pause remains 1,440 minutes.

5 May 2026

Remove Apps Config

Updated

The removal procedure now provides direct Devices and All devices navigation and current Help Desk Operator, School Administrator, and custom-role references.

5 May 2026

Rotate Recovery Lock Passcode

Updated

Updated Microsoft Intune documentation in intune/device-management/actions/rotate-recovery-lock-passcode.md.

5 May 2026

Suspend Managed Home Screen

Updated

Updated Microsoft Intune documentation in intune/device-management/actions/suspend-managed-home-screen.md.

5 May 2026

Sync

Updated

Updated Microsoft Intune documentation in intune/device-management/actions/sync.md.

5 May 2026

Remove Passcode

Updated

The passcode-removal procedure now directs operators to Devices and All devices and to current Help Desk Operator, School Administrator, and custom-role definitions.

5 May 2026

Restore Managed Home Screen

Updated

The restoration procedure now points directly to Devices and All devices and current Help Desk Operator, School Administrator, and custom-role definitions.

5 May 2026

Deprovision

Updated

The deprovisioning procedure reorganizes its Intune admin center and role link references without changing the deprovisioning steps.

5 May 2026

Play Lost Mode Sound

Updated

The supervised-device sound procedure now uses direct Devices and All devices navigation and current Help Desk Operator, School Administrator, and custom-role references.

5 May 2026

Send Custom Notification

Updated

Updated Microsoft Intune documentation in intune/device-management/actions/send-custom-notification.md.

5 May 2026

Update Cellular Data Plan

Updated

Updated Microsoft Intune documentation in intune/device-management/actions/update-cellular-data-plan.md.

5 May 2026
14

In Development

Updated

Updated Microsoft Intune documentation in intune/whats-new/in-development.md.

7 May 2026

Ref Wifi Settings Apple

Updated

Updated Microsoft Intune documentation in intune/device-configuration/templates/ref-wifi-settings-apple.md.

7 May 2026

Ref Wifi Settings Apple

Updated

Updated Microsoft Intune documentation in intune/device-configuration/templates/ref-wifi-settings-apple.md.

7 May 2026

Ref Wifi Settings Apple

Updated

Updated Microsoft Intune documentation in intune/device-configuration/templates/ref-wifi-settings-apple.md.

7 May 2026

Ref Wifi Settings Apple

Updated

Updated Microsoft Intune documentation in intune/device-configuration/templates/ref-wifi-settings-apple.md.

7 May 2026

Ref Wifi Settings Apple

Updated

Updated Microsoft Intune documentation in intune/device-configuration/templates/ref-wifi-settings-apple.md.

7 May 2026

In Development

Updated

Updated Microsoft Intune documentation in intune/whats-new/in-development.md.

7 May 2026

Remove User

Updated

The shared-device user-removal procedure now provides direct Devices and All devices navigation and current Help Desk Operator and custom-role references.

5 May 2026

Logout User

Updated

The Logout current user procedure now points directly to Devices and All devices and provides direct links for Help Desk Operator and custom roles.

5 May 2026

Index

Updated

Updated Microsoft Intune documentation in intune/whats-new/index.md.

5 May 2026
11

Mam Android

Updated

Updated Microsoft Intune documentation in intune/device-security/microsoft-tunnel/mam-android.md.

8 May 2026

Create App Based Policy

Updated

Updated Microsoft Intune documentation in intune/device-security/conditional-access-integration/create-app-based-policy.md.

8 May 2026

Add Dmg Macos

Updated

Updated Microsoft Intune documentation in intune/app-management/deployment/add-dmg-macos.md.

6 May 2026

Add Lob Android

Updated

Updated Microsoft Intune documentation in intune/app-management/deployment/add-lob-android.md.

6 May 2026

Add Lob Ios

Updated

Updated Microsoft Intune documentation in intune/app-management/deployment/add-lob-ios.md.

6 May 2026

Add Lob Macos

Updated

Updated Microsoft Intune documentation in intune/app-management/deployment/add-lob-macos.md.

6 May 2026

Add Unmanaged Pkg Macos

Updated

Updated Microsoft Intune documentation in intune/app-management/deployment/add-unmanaged-pkg-macos.md.

6 May 2026

Management Agent Macos

Updated

Updated Microsoft Intune documentation in intune/app-management/deployment/management-agent-macos.md.

6 May 2026

Management Extension Windows

Updated

Updated Microsoft Intune documentation in intune/device-management/tools/management-extension-windows.md.

6 May 2026

Setup Automated Macos

Updated

Updated Microsoft Intune documentation in intune/device-enrollment/apple/setup-automated-macos.md.

5 May 2026
6

Configure

Updated

Changes Endpoint analytics role references from relative ../fundamentals paths to absolute /intune/fundamentals paths for Help Desk, School Administrator, Read Only Operator, Endpoint Security Manager, and custom roles.

5 May 2026

Index

Updated

Changes Endpoint analytics role references from relative ../fundamentals paths to absolute /intune/fundamentals paths for Help Desk, School Administrator, Read Only Operator, Endpoint Security Manager, and custom roles.

5 May 2026

Configure

Updated

Updated Microsoft Intune documentation in intune/endpoint-analytics/configure.md.

5 May 2026

Index

Updated

Updated Microsoft Intune documentation in intune/endpoint-analytics/index.md.

5 May 2026

Index

Updated

Updated Microsoft Intune documentation in intune/endpoint-analytics/index.md.

5 May 2026

Index

Updated

Updated Microsoft Intune documentation in intune/endpoint-analytics/index.md.

5 May 2026
5

Full Scan

Updated

The Full scan procedure now points directly to Devices and All devices and provides direct links for Help Desk Operator, Endpoint Security Manager, and custom roles.

5 May 2026

Quick Scan

Updated

The Quick scan procedure now directs operators to Devices and All devices and to current Help Desk Operator, Endpoint Security Manager, and custom-role definitions.

5 May 2026

Enable Windows Diagnostic Data

Updated

Changes Windows diagnostic-data custom-role and Help Desk Operator links from relative paths to absolute /intune/fundamentals paths.

5 May 2026

Encrypt Bitlocker Windows

Updated

The BitLocker documentation now identifies pre-boot PIN modification events in Event Viewer: Microsoft-Windows-Bitlocker-API/Management, Bitlocker PIN Modification Task category, Event ID 789.

4 May 2026
4

Configure Per App Vpn Android

Updated

Updated Microsoft Intune documentation in intune/device-configuration/templates/configure-per-app-vpn-android.md.

6 May 2026
4

Unlicensed Admins

Updated

Updated Microsoft Intune documentation in intune/fundamentals/licensing/unlicensed-admins.md.

7 May 2026

Classic Groups

Removed

Removed Microsoft Intune documentation in intune/fundamentals/tenant-administration/classic-groups.md.

6 May 2026

Device Lifecycle

Removed

Removed Microsoft Intune documentation in intune/fundamentals/device-lifecycle.md.

6 May 2026
4

Collect Diagnostics

Updated

Removes the obsolete Graph link reference block and renames the admin-center link section in Collect diagnostics documentation.

5 May 2026

Collect Diagnostics

Updated

Collect diagnostics instructions replace reference-style links with direct Intune admin-center navigation links.

5 May 2026

Run Remediation

Updated

The remediation procedure now points directly to Devices and All devices and identifies Help Desk Operator, School Administrator, and custom roles for the Run Remediation action.

5 May 2026

Run Remediation

Updated

Updated Microsoft Intune documentation in intune/device-management/actions/run-remediation.md.

5 May 2026
3

Configure Cleanup Rules

Updated

Changes cleanup-rule role references from relative paths to absolute /intune/fundamentals paths for Help Desk, School Administrator, Endpoint Security Manager, and custom roles.

5 May 2026

Configure Cleanup Rules

Updated

Updated Microsoft Intune documentation in intune/governance/configure-cleanup-rules.md.

5 May 2026

Configure Cleanup Rules

Updated

Updated Microsoft Intune documentation in intune/governance/configure-cleanup-rules.md.

5 May 2026
2

Index

Updated

Updated Microsoft Intune documentation in intune/privacy/index.md.

5 May 2026
1

In Development

Updated

The In development entry for Android Enterprise Bluetooth sharing updates its Settings catalog and Android settings-list links to their current device-configuration locations.

4 May 2026
9

37426535

Updated

Converts numbered Notes, included hotfixes, and dependency changes into bullet lists; the listed KBs and dependencies remain the same.

5 May 2026

Checklist for 2603

New

A new checklist documents installing Configuration Manager current-branch update 2603, including early-ring opt-in, hierarchy and site-system behavior, prerequisites, backup, replication, ADK, and update-installation checks. The update applies to sites on version 2409 or later.

4 May 2026

37426535

Updated

Uses “Azure Virtual Machine Scale Set,” “Arm64,” and “nonfunctional” terminology in release notes while retaining the documented 2603 fixes.

4 May 2026

Whats New In Version 2603

Updated

The 2603 What's New article corrects all installation and post-update checklist links from the 2509 checklist to the new 2603 checklist.

4 May 2026

Updates

Updated

The supported-versions table now lists Configuration Manager 2603 (5.00.9146.1000), with an early-ring availability date of May 5, 2026 and support through November 5, 2027. Its availability-date note now points to the 2603 checklist.

4 May 2026

Release Notes

Updated

The release-notes index adds a link to the Configuration Manager 2603 What's New article.

4 May 2026

Release Notes

Updated

The release-notes page updates its troubleshooting link to the Configuration Manager welcome page.

4 May 2026

Updates

Updated

The supported-versions page retains its explanation that availability dates refer to early-ring release but removes the hyperlink to the 2603 early-ring checklist section.

4 May 2026

Whats New In Version 2603

Updated

The 2603 What's New article now says Microsoft SQL Server Management Objects and System CLR Types move from SQL Server 2014 versions to SQL Server 2025 versions (SMO 17), replacing the prior SQL Server 2016 wording.

4 May 2026
3

Whats New In Version 2603

Updated

Expands the CMGv2 acronym in the outbound-traffic alert and Total Outbound data metric description to Azure Virtual Machine Scale Sets.

5 May 2026

Whats New In Version 2603

Updated

The 2603 What's New article corrects an ARM64 version reference and a troubleshooting URL.

4 May 2026
1

Checklist For Installing Update 2603

Updated

The Configuration Manager 2603 installation checklist removes the SQL Server 2012 Native Client prerequisite section while retaining the SQL ODBC driver requirement.

4 May 2026
3

Plan

Updated

Updated Microsoft Intune documentation in intune/remote-help/plan.md.

6 May 2026

Plan

Updated

Updated Microsoft Intune documentation in intune/remote-help/plan.md.

6 May 2026

Remote Assist

Updated

The Remote Assist procedure now uses direct Intune navigation for Devices and All devices and current role references.

5 May 2026
9

Device Query

Updated

Updated Microsoft Intune documentation in intune/advanced-analytics/device-query.md.

6 May 2026

Device Query Multiple Devices

Updated

Updated Microsoft Intune documentation in intune/advanced-analytics/device-query-multiple-devices.md.

6 May 2026

Device Scopes

Updated

Updated Microsoft Intune documentation in intune/advanced-analytics/device-scopes.md.

5 May 2026

Device Scopes

Updated

Updated Microsoft Intune documentation in intune/advanced-analytics/device-scopes.md.

5 May 2026

Device Query Multiple Devices

Updated

Updated Microsoft Intune documentation in intune/advanced-analytics/device-query-multiple-devices.md.

5 May 2026

Device Query

Updated

Updated Microsoft Intune documentation in intune/advanced-analytics/device-query.md.

5 May 2026

Device Scopes

Updated

Device Scopes documentation changes links for custom roles and built-in operator roles to absolute Intune paths.

5 May 2026

Device Query

Updated

Device Query documentation changes custom-role and Help Desk Operator links to absolute Intune paths.

5 May 2026

Device Query Multiple Devices

Updated

Device Query multiple-devices documentation changes custom-role and Help Desk Operator links to absolute Intune paths.

5 May 2026
Daily Intune.Admin.News

Get daily email updates

Get a concise summary of the latest Microsoft Intune updates delivered straight to your inbox.

Email signup will appear here once the Kit form is configured. Until then, use the daily RSS feed.