Daily Intune News
Aboutmerill.net
← Previous week
Next week →
Week in brief

CMG image deprecation drives Configuration Manager’s Windows Server 2022 transition

Configuration Manager’s CMG VMSS update is the week’s most consequential change: gateways are moving from the legacy Windows Server 2022 Azure Marketplace offer `windowsserver`, which includes .NET 6, to `windowsserver2022`. The legacy images will lose support and image-refresh OS updates, and new CMG deployments or reimaging will fail when enforcement begins in early 2027. Intune’s substantive changes were more focused: Local AI Agent/OpenClaw inventory guidance became more specific, Apple wired-network documentation now covers iOS/iPadOS as well as macOS, and the GCC High/DoD matrix distinguishes available Windows Autopilot device preparation from unsupported update capabilities. Most other edits were documentation maintenance; the dedicated Multi Admin Approval Graph API article was removed, while Remote Help references show differing version numbers rather than a new capability.

  • Configuration Manager · General
    CMG VMSS update replaces legacy Windows Server 2022 images

    KB37942646 transitions the CMG virtual machine scale set from Azure Marketplace offer `windowsserver`, which includes .NET 6, to `windowsserver2022`, which does not. Legacy images will no longer be supported or receive new OS patch updates through image refresh; once enforcement begins in early 2027, new CMG deployments and reimaging operations that use them will fail. The update is available through Updates and Servicing for Configuration Manager 2603 and for 2503/2409 with the required rollups; 2509 includes itใน

  • Intune · Windows
    Properties Catalog guidance sharpens Local AI Agent discovery

    The Windows Properties Catalog reference lists Agent Name, Install Location, Install Scope, and Host process for Local AI Agent inventory. Microsoft recommends collecting Host process because OpenClaw can run under process names such as `node.exe` or `wsl.exe`. The linked security baseline label also changed from “Local AI Agent Baseline - OpenClaw (Preview)” to “Local AI Agent Baseline - OpenClaw”; that terminology change alone does not establish general availability.

  • Intune · Apple
    Apple wired-network reference expands documented scope to iOS/iPadOS

    The wired-network settings article changed from macOS-only wording to Apple devices and now explicitly covers iOS/iPadOS and macOS, with platform-specific sections and prerequisites. It states that the settings are available for all enrollment types and requires a wired network device configuration profile with the minimum Policy and Profile Manager role. The supplied diff establishes a documentation scope and prerequisite change, not a separate rollout announcement.

  • Intune · Android
    GCC High and DoD matrix marks Autopilot preparation available

    The government service table now marks Windows Autopilot device preparation as available and identifies user-driven deployments as available, while other device-preparation features remain in planning. The unavailable list separately names Windows Autopatch, Feature updates, Quality updates, Expedite updates, and Driver updates for GCC High and DoD. Government administrators should distinguish the available user-driven path from planned functionality.

  • Intune · Fundamentals
    Multi Admin Approval Graph API guidance is retired from Learn

    The dedicated “Use Multi Admin Approval with the Microsoft Graph API” article was removed. Its former guidance described opt-in access policies, interception of app-authenticated calls that modify protected Intune resources, HTTP 403 responses when required approval headers were missing, and no impact on read-only GET operations. This is a documentation retirement; the diff does not establish that MAA or app-auth enforcement was retired.

For Intune administrators

Configuration Manager administrators should review CMG VMSS deployments and install KB37942646 through Updates and Servicing where applicable. It applies directly to versions 2603 and 2509, and to versions 2503 and 2409 with the required rollups; the 2509 second update rollup already includes it. CMG timing language changed during the week: an initial KB37784287 entry cited June 9, 2026, while later wording cites enforcement in early 2027, so validate the applicable current guidance before scheduling. Intune administrators collecting device properties should consider the recommended Host process field for OpenClaw discovery. Apple and government-cloud administrators should use the documented platform and cloud-specific scope, and audit automation runbooks that referenced the removed MAA–?

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.

Updates this week

Fundamentals

7

Government Service

Updated

Updated Microsoft Intune documentation in intune/fundamentals/government-service.md.

4 June 2026

Government Service

Updated

Updated Microsoft Intune documentation in intune/fundamentals/government-service.md.

4 June 2026

Government Service

Updated

Updated Microsoft Intune documentation in intune/fundamentals/government-service.md.

3 June 2026

Index

Updated

Updated Microsoft Intune documentation in intune/whats-new/index.md.

3 June 2026

Multi Admin Approval Graph Api

Removed

Removed Microsoft Intune documentation in intune/fundamentals/role-based-access-control/multi-admin-approval-graph-api.md.

2 June 2026

Apple

6

Ref Wired Network Settings Macos

Updated

Updated Microsoft Intune documentation in intune/device-configuration/templates/ref-wired-network-settings-macos.md.

4 June 2026

General

4

Index

Updated

Updated Microsoft Intune documentation in intune/whats-new/index.md.

3 June 2026

In Development

Updated

Updated Microsoft Intune documentation in intune/whats-new/in-development.md.

1 June 2026

Index

Updated

Updated Microsoft Intune documentation in intune/whats-new/index.md.

1 June 2026

Windows

3

Device configuration

2

Configure Wired Networks

Updated

Updated Microsoft Intune documentation in intune/device-configuration/templates/configure-wired-networks.md.

3 June 2026

Create Device Profile

Updated

Updated Microsoft Intune documentation in intune/device-configuration/create-device-profile.md.

3 June 2026

Device enrollment

2

Device security

2

Ref Windows Mdm Settings

Updated

Updated Microsoft Intune documentation in intune/device-security/security-baselines/ref-windows-mdm-settings.md.

3 June 2026

Endpoint analytics

2

Ref Wired Network Settings Windows

Updated

Updated Microsoft Intune documentation in intune/device-configuration/templates/ref-wired-network-settings-windows.md.

3 June 2026

Collect Device Properties

Updated

Updated Microsoft Intune documentation in intune/device-configuration/collect-device-properties.md.

1 June 2026

Android

1

Government Service

Updated

Updated Microsoft Intune documentation in intune/fundamentals/government-service.md.

3 June 2026

General

15

37864969

Updated

Updated Microsoft Intune documentation in intune/configmgr/hotfix/2509/37864969.md.

5 June 2026

37784287

Updated

Updated Microsoft Intune documentation in intune/configmgr/hotfix/2603/37784287.md.

3 June 2026

37784287

Updated

Updated Microsoft Intune documentation in intune/configmgr/hotfix/2603/37784287.md.

3 June 2026

37784287

Updated

Updated Microsoft Intune documentation in intune/configmgr/hotfix/2603/37784287.md.

3 June 2026

37784287

Updated

Updated Microsoft Intune documentation in intune/configmgr/hotfix/2603/37784287.md.

3 June 2026

37864969

Updated

Updated Microsoft Intune documentation in intune/configmgr/hotfix/2509/37864969.md.

3 June 2026

37864969

Updated

Updated Microsoft Intune documentation in intune/configmgr/hotfix/2509/37864969.md.

3 June 2026

Updates

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/servers/manage/updates.md.

3 June 2026

37784287

Updated

Updated Microsoft Intune documentation in intune/configmgr/hotfix/2603/37784287.md.

3 June 2026

37784287

Removed

Removed Microsoft Intune documentation in intune/configmgr/hotfix/2603/37784287.md.

3 June 2026

Windows

6

37942646

Updated

Updated Microsoft Intune documentation in intune/configmgr/hotfix/2603/37942646.md.

4 June 2026

Support For Windows Adk

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/plan-design/configs/support-for-windows-adk.md.

3 June 2026

Support For Windows 11

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/plan-design/configs/support-for-windows-11.md.

3 June 2026

Support For Windows 10

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/plan-design/configs/support-for-windows-10.md.

3 June 2026

37784287

Updated

Updated Microsoft Intune documentation in intune/configmgr/hotfix/2603/37784287.md.

3 June 2026

Fundamentals

1

Levels Overview

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/plan-design/diagnostics/levels-overview.md.

2 June 2026

Troubleshooting

1

Diagnostics And Usage Data

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/plan-design/diagnostics/diagnostics-and-usage-data.md.

2 June 2026

Windows

1

Index

Updated

Updated Microsoft Intune documentation in intune/whats-new/index.md.

4 June 2026

Endpoint analytics

1

Device Query Multiple Devices

Updated

Updated Microsoft Intune documentation in intune/advanced-analytics/device-query-multiple-devices.md.

2 June 2026
Daily Intune.Admin.News

Get daily email updates

Get a concise summary of the latest Microsoft Intune updates delivered straight to your inbox.

Email signup will appear here once the Kit form is configured. Until then, use the daily RSS feed.