Daily Intune News
Aboutmerill.net
← Previous week
Next week →
Week in brief

Personally owned Android work profiles move toward web-based Android Management API enrollment

Android Enterprise BYOD is the week’s largest operational shift: personally owned work-profile management is moving from the Company Portal custom DPC to Android Management API, with browser-based enrollment and a documented opt-in migration path. Intune also changed Win32 content delivery to require HTTPS, made Apple ADE enrollment-time grouping generally available, and added a GCC High-only, audit-only STIG baseline. A June 2026 Message Center change moves Microsoft 365 Apps policy configuration to the Microsoft 365 Apps admin center without changing existing policies. Other sampled edits mainly clarify enrollment procedures and navigation.

  • Intune · Device enrollment
    Android Enterprise personally owned work profiles transition to AMAPI

    This is a transition in enrollment and policy delivery, not an immediate universal cutover. Intune is moving personally owned work-profile management from the Company Portal custom DPC to Android Management API. Administrators can enable web-based enrollment for new devices and deploy the Move to Android Management API policy for existing devices. Web enrollment uses Chrome or Edge, and if passkeys are the only accepted authentication method, Microsoft says not to enable it until web-enrollment passkey support is 신

  • Intune · General
    Managed Win32 app content now requires HTTPS delivery

    This is a changed security and content-delivery requirement. When Microsoft Connected Cache nodes aren't configured for HTTPS, clients bypass those nodes and download managed Win32 apps from the content delivery network instead. Administrators relying on Connected Cache should configure and validate HTTPS on their cache nodes.

  • Intune · General
    Apple ADE enrollment-time grouping reaches general availability

    Enrollment-time grouping is now generally available for Apple automated device enrollment on iOS/iPadOS and macOS, with support in new enrollment policies. During enrollment, Intune can identify a device's Microsoft Entra security group so applicable policies, apps, and settings can be applied earlier in setup.

  • Intune · General
    GCC High gains an audit-only Windows STIG baseline

    This new Intune security baseline assesses Windows devices against DISA Security Technical Implementation Guide recommendations. The initial baseline is the Microsoft Windows 11 STIG SCAP Benchmark Version 2, Release 7, dated January 5, 2026. It is read-only and generates audit reports without configuring or enforcing settings; availability is limited to GCC High tenants with Advanced Analytics licensing.

  • Intune · Device configuration
    Microsoft 365 Apps policy configuration moves out of Intune

    This planned configuration-location change begins with Intune's June 2026 release: Microsoft 365 Apps policy settings will only be configurable in the Microsoft 365 Apps admin center, not the Intune admin center. Existing policies and functionality remain unchanged, but administrator guidance and runbooks should point future policy configuration to the Microsoft 365 Apps admin center.

For Intune administrators

Android administrators need to plan the migration and account for the Chrome or Edge requirement and the current passkey-only authentication limitation. Organizations using Microsoft Connected Cache must configure HTTPS to keep serving managed Win32 content from cache; otherwise clients fall back to the CDN. Apple ADE administrators can use enrollment-time grouping in new policies, while GCC High administrators should treat the STIG baseline as an assessment and reporting tool rather than an enforcement profile. Update Microsoft 365 Apps runbooks to use the separate admin center; existing policies remain unchanged.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.

Updates this week

Device enrollment

13

Guide

Updated

Updated Microsoft Intune documentation in intune/device-enrollment/android/guide.md.

18 June 2026

Setup Automated Macos

Updated

Updated Microsoft Intune documentation in intune/device-enrollment/apple/setup-automated-macos.md.

18 June 2026

School Manager Step 2

Updated

Updated Microsoft Intune documentation in intune/device-enrollment/apple/school-manager-step-2.md.

18 June 2026

Setup Automated Ios

Updated

Updated Microsoft Intune documentation in intune/device-enrollment/apple/setup-automated-ios.md.

18 June 2026

Tutorial Automated Ios

Updated

Updated Microsoft Intune documentation in intune/device-enrollment/apple/tutorial-automated-ios.md.

18 June 2026

Setup Automated Tv Os

Updated

Updated Microsoft Intune documentation in intune/device-enrollment/apple/setup-automated-tv-os.md.

18 June 2026

Setup Automated Vision Os

Updated

Updated Microsoft Intune documentation in intune/device-enrollment/apple/setup-automated-vision-os.md.

18 June 2026

Setup Corporate Work Profile

Updated

Updated Microsoft Intune documentation in intune/device-enrollment/android/setup-corporate-work-profile.md.

18 June 2026

General

7

Index

Updated

Updated Microsoft Intune documentation in intune/device-management/actions/index.md.

19 June 2026

In Development

Updated

Updated Microsoft Intune documentation in intune/whats-new/in-development.md.

17 June 2026

Device security

4

Overview

Updated

Updated Microsoft Intune documentation in intune/device-security/security-baselines/overview.md.

17 June 2026

Android

2

Android Phase 7

Updated

Updated Microsoft Intune documentation in intune/developer/app-sdk/android-phase-7.md.

17 June 2026

Device configuration

1

Device enrollment

2

General

2

37864969

Updated

Updated Microsoft Intune documentation in intune/configmgr/hotfix/2509/37864969.md.

16 June 2026

General

1

Deploy

Updated

Updated Microsoft Intune documentation in intune/remote-help/deploy.md.

15 June 2026

Endpoint analytics

1

Index

Updated

Updated Microsoft Intune documentation in intune/advanced-analytics/index.md.

17 June 2026

General

1

Renew Ca

Updated

Updated Microsoft Intune documentation in intune/cloud-pki/renew-ca.md.

16 June 2026
Daily Intune.Admin.News

Get daily email updates

Get a concise summary of the latest Microsoft Intune updates delivered straight to your inbox.

Email signup will appear here once the Kit form is configured. Until then, use the daily RSS feed.