Daily Intune NewsThe period’s clearest operational change is Intune’s new single-device page becoming the default in the September (2609) release, replacing the legacy page while retaining all management features. Updated guidance also documents tenant-wide device-action quotas and clarifies easy-to-misread Defender Antivirus catch-up settings. Security Copilot’s Change Review Agent documentation now carries a deprecation notice, while Configuration Manager guidance improves MBAM migration group mapping.
Intune · Endpoint analyticsThe new Intune single device page will become the default in the September (2609) release and replace the legacy page. All management features remain available, but administrators should update internal documentation and familiarize themselves with the new interface beforehand.
The updated Device Actions guidance lists daily limits of 500 Wipe actions and 1,000 each for Retire and Delete. Individual, bulk, and Microsoft Graph submissions count cumulatively toward the tenant-wide totals.
Intune · Device securityBecause the settings are named “Disable catch-up...”, Yes disables catch-up scans and No enables them. Full-scan catch-up is disabled when not configured, quick-scan catch-up is enabled by default, and catch-up runs after two missed scheduled scans.
Security Copilot · WindowsThe Security Copilot Change Review Agent overview now includes an agent-deprecation notice while its Intune admin center link remains unchanged. The supplied update gives no deprecation deadline or required administrator action.
Configuration Manager · Device securityConfiguration Manager’s migration guidance now explains how to retrieve existing MBAM groups with PowerShell and map them to equivalent Configuration Manager BitLocker portal groups, allowing migrating administrators to reuse existing access groups.
Prepare administrators and internal runbooks for the September 2609 page change, and schedule large device-action batches within the documented daily quotas. Review Defender Antivirus policy values to confirm the intended catch-up behavior. Administrators using or referencing the Change Review Agent should review its deprecation notice; no deadline is supplied. MBAM migration teams can reuse existing groups when mapping them to Configuration Manager BitLocker portal groups.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
The documentation now states that a tenant can submit up to 1,000 Delete actions per day, cumulatively across individual actions, bulk actions, and Microsoft Graph requests. The limit also applies when Delete triggers Retire or Wipe.
The documentation now states that a tenant can submit up to 1,000 Retire actions per day, cumulative across individual, bulk, and Microsoft Graph API requests.
The documentation now states that individual, bulk, and Microsoft Graph Wipe requests share a cumulative tenant-wide daily limit of 500 actions.
The documentation now lists tenant-wide daily limits of 500 Wipe actions and 1,000 each for Retire and Delete. Counts are cumulative across individual, bulk, and Microsoft Graph submissions.
The documentation now explains that Yes disables and No enables catch-up scans because the settings are named “Disable catch-up...”. Full-scan catch-up is disabled when not configured, while quick-scan catch-up is enabled by default; the scan triggers after two missed scheduled scans are also specified.
The new Intune single device page, offering a consolidated device management view, will become the default in the September (2609) release, replacing the legacy page. All management features remain, but admins should update documentation and familiarize themselves with the new interface beforehand.
The documented default for catch-up full scans changed to disabled, while catch-up quick scans remain enabled by default. The settings now specify that catch-up scans occur after two consecutive missed scheduled scans and require a configured scheduled scan.
The documentation now explains how to retrieve existing MBAM groups with PowerShell and map them to equivalent Configuration Manager BitLocker portal groups during migration.
The documentation replaces version-specific diagnostic and usage data links with one consolidated article, stating that collection is consistent across supported current branch versions.
The 737-line reference page detailing Configuration Manager version 2509 diagnostic and usage data was deleted as part of consolidating information for supported current branch versions.
The page now includes an agent deprecation notice. The Microsoft Intune admin center link remains unchanged.
The Change review agent page now includes an agent-deprecation notice. The Intune admin center link remains unchanged.
The change review agent documentation now references the agent deprecation content using the corrected include path.
The agent-deprecation include reference changed from `intune/copilot/agents/includes/agent-deprecation.md` to `includes/agent-deprecation.md`.
The page was updated to include the agent deprecation notice while retaining the Intune admin center link.
