Thursday, 22 January 2026

Migration planning and Conditional Access retirement create two 2026 action items

The updated Basic Mobility and Security migration guide makes license sequencing, policy replacement, and post-migration cleanup more concrete. Two Message Center notices add future deadlines: the Require approved client app Conditional Access control retires in June, and most Intune guided scenarios leave the admin center in March.

• Intune · Fundamentals

  Basic Mobility and Security migration guidance emphasizes staged licensing and policy cleanup

  The revised guide says assigning Intune licenses switches users to Intune management and prepares them for new policies. It recommends confirming license capacity, reviewing and deleting unneeded Basic Mobility and Security policies, reviewing group membership, replacing policies in Intune, and removing old policies so they cannot be assigned accidentally later.

• Intune · Compliance

  Require approved client app retires from Conditional Access in June

  Microsoft states that the Require approved client app control will retire in June 2026 and recommends Require application protection policy as the replacement. After retirement, the legacy control can no longer be enforced.

• Configuration Manager · Android

  Most Intune guided scenarios are scheduled for removal in March

  The Message Center announcement says all guided scenarios except Windows 365 Boot will be removed from the Intune admin center in March 2026. Existing configurations remain in place, but teams should use the alternative guidance for future setup and training.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.