July 2026 — Daily Intune News

Most July records are maintenance edits, but the supplied diffs identify several administrator-relevant exceptions. The largest is a gradual commercial Microsoft 365 E3 and E5 entitlement rollout: eligible tenants are automatically provisioned and receive a 30-day Microsoft 365 admin center notification. Intune also documents two previews—client-driven compliance reevaluation and controlled Defender configuration—while macOS compliance content gains a Bash workflow and an account-password warning. The evidence does not establish a general-availability release or retirement; the macOS entries are documentation and security guidance rather than proof of changed service behavior. The period’s sole Message Center item separately recommends Windows KB5101684 Preview for IT1431577.

Intune Suite · General
Selected Intune Suite capabilities are being bundled into commercial Microsoft 365 E3 and E5
Microsoft is gradually adding Remote Help, Advanced Analytics, and Intune Plan 2—including Microsoft Tunnel for mobile application management, specialty device management, and firmware over-the-air updates for supported devices—to Microsoft 365 E3. Microsoft 365 E5 includes those capabilities plus Endpoint Privilege Management, Enterprise Application Management, and Microsoft Cloud PKI. Eligible tenants are automatically provisioned, no action is required, and Microsoft will post a 30-day advance notification. This
Intune · Device security
Controlled Configuration gives Defender settings an Intune authority mode in preview
The Antivirus policy guidance adds Controlled configuration for Microsoft Defender settings (preview). In the Windows Security experience profile, under Defender, Controlled Configuration (Device) supports Not configured, Off (Default), Tamper Protection (On), and Controlled Configuration (On). The default turns off both controlled configuration and tamper protection; the controlled mode gives Intune or Defender security settings management exclusive precedence over Group Policy, Configuration Manager, third-party,
Intune · Device security
Client-driven compliance reevaluation is documented as a Windows preview
Supported Windows devices can detect certain local state changes—including device configuration and security-posture changes—and proactively request a compliance reevaluation instead of waiting for the next scheduled check-in. Administrators should account for this alternate evaluation timing when interpreting compliance results; the supplied evidence labels the capability preview and does not establish general availability.
Intune · Device security
Custom compliance guidance adds macOS Bash scripts and strict execution requirements
The custom compliance discovery-script procedure now documents macOS alongside Linux and Windows. macOS scripts use Bash, must run in 10 minutes or less, include a valid shebang, be UTF-8 encoded without a BOM, and return exit code 0 for success or a non-zero code for failure. This is a documentation expansion; the supplied diff does not establish a new service rollout.
Intune · Device security
macOS compliance guidance warns that password requirements expire every device account
The macOS compliance reference now warns that requiring a password in a compliance policy automatically expires the existing password for all accounts on the device, including accounts created by LAPS and Platform SSO. It recommends managing device passwords through a settings catalog policy with Change At Next Auth configured to False. This is security guidance and a behavior clarification, not evidence that the service behavior newly changed.

For Intune administrators

Commercial Microsoft 365 E3 and E5 administrators do not need to provision the newly bundled capabilities; monitor the advance notification and gradual rollout. Treat both Intune previews as preview features and validate their effects in controlled scopes. For macOS compliance, check script format and runtime requirements, and assess password-expiry consequences before enabling password requirements. Follow normal Windows update validation procedures for the KB5101684 Preview recommendation.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.

3076 updates by product

Microsoft Intune

523 updates

Updated

Updated Microsoft Intune documentation in intune/device-security/laps/monitor.md.

1 July 2026

1 July 2026

Windows

Follow up to IT1431577: Recommended update KB5101684 Preview for Windows devices

1 July 2026

1 July 2026

Wi-Fi settings list for Android devices in Microsoft Intune

Updated

Updated Microsoft Intune documentation in intune/device-configuration/templates/ref-wifi-settings-android-enterprise.md.

1 July 2026

Updated

Updated Microsoft Intune documentation in intune/solutions/azure-virtual-desktop.md.

1 July 2026

1 July 2026

1 July 2026

1 July 2026

1 July 2026

1 July 2026

1 July 2026

1 July 2026

Linux

Deployment guide: Manage Linux devices in Microsoft Intune

Updated

Updated Microsoft Intune documentation in intune/fundamentals/platform-guide-linux.md.

1 July 2026

Use custom Bash scripts to configure Linux devices in Microsoft Intune

Updated

Updated Microsoft Intune documentation in intune/device-configuration/templates/configure-custom-settings-linux.md.

1 July 2026

Windows Autopilot

Updated Microsoft Intune documentation in intune/solutions/cloud-native-endpoints/planning-guide.md.

1 July 2026

Device enrollment

How to enroll with Windows Autopilot

Updated

Updated Microsoft Intune documentation in intune/configmgr/comanage/autopilot-enrollment.md.

22 July 2026

Windows Autopilot

Updated

Updated Microsoft Intune documentation in intune/solutions/education/tutorial-school-deployment/enroll-autopilot.md.

1 July 2026

Endpoint analytics

ValidateNewPackageSource Method in Class SMS_DriverPackage

Updated

Updated Microsoft Intune documentation in intune/configmgr/develop/reference/osd/validatenewpackagesource-method-in-class-sms_driverpackage.md.

22 July 2026

Microsoft Intune Suite

2 updates

General

Index

Updated

Updated Microsoft Intune documentation in intune/whats-new/index.md.

6 July 2026

Windows

Windows Holographic for Business device settings to allow or restrict features using Intune

Updated

Updated Microsoft Intune documentation in intune/device-configuration/templates/ref-device-restrictions-windows-holographic.md.

1 July 2026

Endpoint Privilege Management

Updated Microsoft Intune documentation in intune/epm/tutorial-admin-to-standard-user.md.

1 July 2026

Windows

Troubleshoot Known Issues

Updated

Updated Microsoft Intune documentation in intune/epm/troubleshoot-known-issues.md.

24 July 2026

Microsoft Intune Remote Help

Updated Microsoft Intune documentation in intune/remote-help/start-session.md.

1 July 2026

Android

Plan

Updated

Updated Microsoft Intune documentation in intune/remote-help/plan.md.

27 July 2026

Endpoint analytics

Troubleshoot and Monitor Remote Help

Updated

Updated Microsoft Intune documentation in intune/remote-help/troubleshoot.md.

1 July 2026

Microsoft Security Copilot in Intune

1 July 2026

Vulnerability Remediation Agent

Updated

Updated Microsoft Intune documentation in intune/copilot/agents/vulnerability-remediation-agent.md.

1 July 2026

Copilot in Intune shows device information and helps troubleshoot

Updated

Updated Microsoft Intune documentation in intune/copilot/troubleshoot-devices.md.

1 July 2026

Endpoint analytics

Explore Intune data with natural language and take action

Updated

Updated Microsoft Intune documentation in intune/copilot/explorer.md.

1 July 2026

Fundamentals

Security Copilot in Intune features overview

Updated

Updated Microsoft Intune documentation in intune/copilot/index.md.

1 July 2026