Intune documentation now describes adding AOSP referenced apps without an APK or Google Play selection. Required assignments unhide device-resident apps, while Uninstall assignments hide them; Available assignments aren't supported.
26 October 2026
Week in brief
Configuration Manager 2609 reaches global availability as CMG tiers adopt new VM sizes
Configuration Manager 2609 became globally available for installation on October 26, while CMG guidance set out new D2ads_v6, D4ads_v6, and D8ads_v6 VM sizes for 2609 and 2603 with KB39169655. Intune’s most actionable additions cover AOSP referenced-app assignments and configuration constraints, plus Apple device-wide VPN route controls. Other updates mainly add connector-health troubleshooting, OEMConfig metadata, and in-development planning entries.
- Configuration Manager 2609 is globally available to all customers
Configuration Manager · GeneralThe installation checklist now states that version 2609 became globally available on October 26, replacing the early-update-ring opt-in instructions. Administrators can install it without following that documented opt-in process.
- CMG VM sizing shifts to D2ads_v6, D4ads_v6, and D8ads_v6Configuration Manager · General
For version 2609 and version 2603 with KB39169655, CMG tiers now use the D2ads_v6, D4ads_v6, and D8ads_v6 VM sizes. Existing deployments migrate automatically to the corresponding tiers, connection limits remain unchanged, and earlier versions retain their previous sizes. Verify Azure-region availability and vCPU quota headroom before updating.
- AOSP referenced apps gain a defined Intune assignment workflow
Intune · App managementNew guidance describes adding AOSP referenced apps without an APK or Google Play selection. Required assignments unhide apps already resident on devices, Uninstall assignments hide them, and Available assignments aren't supported. Setup requires AOSP-enrolled devices, the package name, and the app already deployed on devices or externally; the package name can't be changed after creation.
- AOSP managed-app configuration requires vendor-provided JSONIntune · App management
Updated managed Android app guidance adds AOSP referenced apps alongside Android Enterprise apps and specifies JSON-only configuration using vendor- or manufacturer-provided settings. Configuration Designer and Connected apps aren't supported for these apps.
For device-wide VPN profiles on iOS/iPadOS and macOS, administrators configure Include all networks and Exclude local networks; Intune derives the Enforce Routes value automatically. The settings don't apply to per-app VPN, and split tunneling isn't recommended with them.
For Intune administrators
Configuration Manager administrators can install 2609 without the documented early-update-ring opt-in. Before updating CMG, verify that the new VM sizes are available in the Azure region and that Dadv6 Family and regional vCPU quotas have headroom; keep the Small tier for lab or proof-of-concept use. Intune administrators setting up AOSP referenced apps need the package name and an app already present on devices or deployed externally. For managed-app configuration, use vendor- or manufacturer-provided JSON because Configuration Designer and Connected apps aren't supported. Apple VPN administrators should apply Include all networks and Exclude local networks only to device-wide profiles, not per-app VPN profiles.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
Updates this week
Microsoft Intune
6 updatesConfigure Managed Android Apps with Microsoft Intune - Microsoft Intune | Microsoft Learn
New featureThe documentation adds AOSP referenced apps alongside Android Enterprise apps, including platform and profile selections and JSON-only configuration guidance.
26 October 2026
Configure Oemconfig Android
Doc updateThe documentation now lists MEFERI with package name com.meferi.oemconfig and links to its OEMConfig page. Four related metadata links were removed.
26 October 2026
Ref Vpn Settings Apple
New featureIntune supports Apple’s Enforce Routes capability for device-wide VPN profiles on iOS/iPadOS and macOS. Administrators configure Include all networks and Exclude local networks; Intune derives the Enforce Routes value automatically.
26 October 2026
Overview
Doc updateThe overview now documents the Status column, connector details pane, Active/Warning/Action required statuses, health messages, and recommended troubleshooting steps for connectivity, permissions, and certificate template issues.
26 October 2026
In Development
New featureThe in-development page adds entries for Windows maintenance windows, eSIM deployment status, Defender Controlled Configuration, STIG audit baselines, and Remote Help diagnostics; Android Enterprise local actions and KEYENCE OEMConfig; and iOS/iPadOS JIT registration changes and renewal reminders.
26 October 2026
Microsoft Configuration Manager
6 updatesPerf Scale
Feature updateAction requiredThe guidance now documents new VM sizes for Configuration Manager 2609 and later, and 2603 with KB39169655. Existing CMG deployments migrate automatically to the corresponding tiers while connection limits remain unchanged; older versions retain the previous sizes.
26 October 2026
Cost
Feature updateFor version 2609 and version 2603 with KB39169655, CMG tiers now use D2ads_v6, D4ads_v6, and D8ads_v6 VM sizes. Earlier versions retain the previous sizes, and existing deployments migrate automatically when the update is installed.
26 October 2026
Size And Scale Numbers
Feature updateAction requiredConfiguration Manager 2609 and later, and 2603 with KB39169655, use Small, Medium, and Large CMG tiers with new VM sizes. Existing deployments are automatically mapped to the corresponding tiers, while client connection limits remain unchanged. Older versions retain the previous sizes and tiers.
26 October 2026
Setup Cloud Management Gateway
Doc updateThe setup instructions now link to VM sizing guidance by Configuration Manager version, capacity, and upgrade requirements. The Lab (B2s) size is now called the Small tier and remains intended only for lab or proof-of-concept use.
26 October 2026
Whats New Version 2609
Generally availableThe documentation now states that version 2609 is available for all customers to install as of October 26, 2026.
26 October 2026
Checklist For Installing Update 2609
Generally availableThe documentation now states that version 2609 became globally available for installation on October 26, 2026, replacing the early-update-ring opt-in instructions.
26 October 2026