Device management, Conditional Access, identity security, and endpoint compliance updates.
37 changes, newest first
LowChange
Bulk manage eSIMs on corporate-owned Android Enterprise devices
Device management. Microsoft Intune now supports bulk eSIM actions for corporate-owned Android Enterprise devices. From Devices > All devices > Bulk device actions , you can activate eSIMs on up to 100 selected devices running Android 15 or later by using a carrier activation server URL. Bulk eSIM activation is available only in the updated bulk device actions experience. When you bulk wipe supported devices,…
App management. Microsoft Intune now supports AOSP referenced app type that lets you identify an app by package name instead of uploading an APK on AOSP devices. You can assign Required or Uninstall intent to OEM, preloaded, or externally deployed apps that already exist on supported AOSP devices. Required makes an existing app unhidden, while Uninstall hides it. You'll also be able to target referenced apps with…
Device configuration. Microsoft Intune now supports Apple's Enforce Routes capability in iOS/iPadOS and macOS VPN profiles. Admins define routing behavior with Include all networks and Exclude local networks , and Intune automatically derives the appropriate Enforce Routes configuration. This helps reduce VPN traffic bypass and de-cloaking risks while keeping routing behavior consistent with Apple's platform…
Legacy Apple MDM software update workloads removed from Intune
Device configuration. Microsoft Intune is removing legacy Apple MDM software update workloads after Apple retired the underlying commands and payloads in OS 27. Admins should use Apple declarative device management update policies to continue managing software updates. This keeps Intune UI, Graph, and documentation aligned with supported Apple capabilities and provides a clearer path for future update deployments.…
Add support for the MEFERI OEMConfig app on Android Enterprise
Device configuration. Microsoft Intune now supports the MEFERI OEMConfig app ( com.meferi.oemconfig ) for Android Enterprise devices. Admins can use the existing Intune OEMConfig workflow to deploy settings exposed by MEFERI's OEM-provided schema, expanding supported device management options without custom workarounds. Add the app from Managed Google Play, assign it, and create an OEMConfig profile for the bundle.…
Setup Assistant legacy deprecation for Apple enrollment profiles
Device enrollment. Intune has ended support for Setup Assistant (legacy) authentication for iOS/iPadOS and macOS automated device enrollment (ADE) with user affinity to align with modern authentication standards. Existing profiles are automatically updated to Setup Assistant with modern authentication, and the legacy option is no longer available when creating or editing profiles; already-enrolled devices remain…
Administrator protection settings in Account protection policies
Device management. Microsoft Intune now includes two Administrator protection settings in endpoint security Account protection policies. On supported Windows 11 versions, admins can configure the Administrator Approval Mode type and choose the elevation prompt behavior for Administrator protection. For more information, see Account protection policy .
Push notification support update for Windows devices
Device management. We've improved connectivity for scenarios that rely on push notifications including Device actions , Win32 apps , PowerShell scripts and Remediations . For the best experience, we recommend updating firewall rules to include this new endpoint: *.trouter.communications.svc.cloud.microsoft For the current list of required network endpoints, see Network requirements for PowerShell scripts and Win32…
Apple OS 27 DDM status data added to device inventory
Device management. Microsoft Intune now adds Apple OS 27 declarative device management status data to device inventory. Admins can review new inventory for: device health for hardware components, enhanced logging sessions, content cache status, and Apple MDM and security states such as enrollment type, awaiting configuration, and lockdown mode. Values depend on supported OS, hardware, enrollment, and DDM…
Updated Windows support for Administrator protection settings
Device security. Microsoft Intune now supports two Administrator protection settings in the settings catalog on Windows 11 versions 24H2 and 25H2. Admins can configure the Administrator Approval Mode type and choose the elevation prompt behavior used with Administrator protection. For more information, see Settings catalog .
