Intune 26H2 baseline profiles need updates as Configuration Manager 2609 drops Server 2012 clients

The period's strongest Intune item is new guidance for the Windows 11 version 26H2 security baseline and Settings Catalog support. It explicitly says existing baseline profiles don't update automatically, so adopting the 26H2 baseline means creating a new profile or updating an existing one. Remote Help availability is also documented for GCCH Android and Windows devices. For administrators who operate Configuration Manager, version 2609 adds a hierarchy-update prerequisite, changes several security and approval behaviors, and removes support for the listed Windows Server 2012 client operating systems.

• Intune · General

  26H2 baseline profiles require explicit administrator updates

  Intune guidance now covers the Windows 11 version 26H2 security baseline and Settings Catalog support, including new settings, updated defaults, and revised guidance. Existing security baseline profiles don't update automatically; administrators who want the 26H2 baseline must create a new profile or update an existing one.

• Configuration Manager · General

  Configuration Manager 2609 ends Server 2012 client support

  Configuration Manager 2609 no longer supports Windows Server 2012, Windows Server 2012 R2, or their Windows Storage Server editions as client operating systems. Administrators should identify affected devices and upgrade them to a supported Windows Server version.

• Configuration Manager · General

  2609 hierarchy updates require a top-level service connection point

  The 2609 update checklist requires a top-level service connection point. After the parent site is updated, secondary sites require manual updating.

• Configuration Manager · General

  2609 changes CMPivot, SQLCLR, CMG, and approval behavior

  The 2609 documentation records that CMPivot clients trust its signing certificate, SQLCLR no longer requires TRUSTWORTHY, and CMG storage shared-key access is automatically disabled. Upgrade checks warn about automatic computer approval, with the planned removal of automatic approval for all computers also called out.

• Intune · Apple

  Remote Help availability covers GCCH Android and Windows devices

  Remote Help is stated as available in US Government Community Cloud High (GCCH) for Android and Windows devices. GCCH IT support staff can provide real-time troubleshooting for enrolled devices using role-based access controls and Microsoft Entra ID sign-in.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.