Week in brief

Require approved client app retires in June; switch to application protection policy

The biggest admin signal is the June 2026 retirement of Microsoft Entra Conditional Access's **Require approved client app** control; a second Message Center notice says Microsoft Defender for Android will stop protecting personal profiles on enrolled devices by March 2026. The 63-record period was otherwise mostly documentation maintenance, but it also records OS enforcement for **Install Windows quality updates** in the `2026-01 B` quality update and clarifies scalar-property rules for Advanced Analytics Device Query. New Managed Home Screen pages document suspend and restore procedures for Android Enterprise corporate-owned Fully Managed and Dedicated devices; the supplied evidence does not establish a preview or general-availability launch.

  • Microsoft says the **Require approved client app** control will retire in June 2026 and will no longer be enforceable. Organizations should update affected policies to use **Require application protection policy** for equivalent and enhanced protection. This is a Message Center retirement notice.

  • By March 2026, Microsoft Defender for Android will end support for protecting personal profiles on enrolled devices and focus solely on securing corporate work profiles. Work profiles and unenrolled devices are unaffected, and Microsoft says no admin action is required.

  • In the Enrollment Status Page guidance, the **Install Windows quality updates** statement changed from saying the setting was available but not yet enforced by the OS, with enforcement planned for `2026-01 B`, to saying OS enforcement is included in the `2026-01 B` quality update. This updates the documented enforcement status rather than announcing a new policy setting.

  • The Device Query reference now says the `Device` entity cannot be used directly in scalar-requiring operators such as `distinct`, `summarize`, and `order by`. Administrators should use a specific scalar property instead, such as `Device.SerialNumber` or `Device.OSVersion`. This is a query limitation clarification.

  • The updated Windows update package guidance explicitly says deploying an `.msu` file as a Win32 app isn't the recommended approach and points administrators to Update rings, Feature updates, and Quality updates. Win32 deployment remains an option when more granular control is needed; this is operational guidance, not a change to the Win32 capability.

For Intune administrators

Before June 2026, find Conditional Access policies using **Require approved client app** and replace the control with **Require application protection policy**; after retirement, the old control will no longer be enforceable. No admin action is required for the Defender scope change, which doesn't affect corporate work profiles or unenrolled devices. If you use Device Query, change scalar operators to use properties such as `Device.SerialNumber` or `Device.OSVersion`. For normal Windows update deployment, follow the recommended Update rings, Feature updates, or Quality updates path rather than packaging `.msu` files as Win32 apps; use the Win32 method only when granular control is needed. Teams migrating from Basic Mobility and Security should use the revised license-assignment and policy-

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.

Updates this week

14

Migrate To Intune

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/migrate-to-intune.md.

23 January 2026

Migrate To Intune

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/migrate-to-intune.md.

23 January 2026

Remediations

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/remediations.md.

23 January 2026

Free Trial Sign Up

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/free-trial-sign-up.md.

21 January 2026

Free Trial Sign Up

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/free-trial-sign-up.md.

21 January 2026

Quickstart Create User

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/quickstart-create-user.md.

21 January 2026

Quickstart Create User

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/quickstart-create-user.md.

21 January 2026

Quickstart Create Custom Role

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/quickstart-create-custom-role.md.

20 January 2026
13

Mamedge 4 Acp Edge

Updated

Updated Microsoft Intune documentation in intune/intune-service/apps/mamedge-4-acp-edge.md.

23 January 2026

Add and Assign an App

Updated

Updated Microsoft Intune documentation in intune/intune-service/apps/quickstart-add-assign-app.md.

20 January 2026
9

Device Restore Managed Home Screen

Updated

Updated Microsoft Intune documentation in intune/intune-service/remote-actions/device-restore-managed-home-screen.md.

21 January 2026

Custom Notifications

Updated

Updated Microsoft Intune documentation in intune/intune-service/remote-actions/custom-notifications.md.

21 January 2026

Index

Updated

Updated Microsoft Intune documentation in intune/intune-service/remote-actions/index.md.

20 January 2026

Device Restore Managed Home Screen

Updated

Updated Microsoft Intune documentation in intune/intune-service/remote-actions/device-restore-managed-home-screen.md.

20 January 2026

Device Suspend Managed Home Screen

Updated

Updated Microsoft Intune documentation in intune/intune-service/remote-actions/device-suspend-managed-home-screen.md.

20 January 2026
5

Get started with macOS endpoints

Updated

Updated Microsoft Intune documentation in intune/solutions/end-to-end-guides/macos-endpoints-get-started.md.

22 January 2026

Try Intune Overview

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/try-intune-overview.md.

20 January 2026

Enroll a Windows device

Updated

Updated Microsoft Intune documentation in intune/intune-service/enrollment/quickstart-enroll-windows-device.md.

20 January 2026

Quickstart Setup Auto Enrollment

Updated

Updated Microsoft Intune documentation in intune/intune-service/enrollment/quickstart-setup-auto-enrollment.md.

20 January 2026
4
3

Device Restore Managed Home Screen

Updated

Updated Microsoft Intune documentation in intune/intune-service/remote-actions/device-restore-managed-home-screen.md.

22 January 2026

Device Suspend Managed Home Screen

Updated

Updated Microsoft Intune documentation in intune/intune-service/remote-actions/device-suspend-managed-home-screen.md.

22 January 2026

Device Suspend Managed Home Screen

Updated

Updated Microsoft Intune documentation in intune/intune-service/remote-actions/device-suspend-managed-home-screen.md.

21 January 2026
2

Macos Endpoints Get Started

Updated

Updated Microsoft Intune documentation in intune/solutions/end-to-end-guides/macos-endpoints-get-started.md.

22 January 2026
1
1

Quickstart Send Notification

Updated

Updated Microsoft Intune documentation in intune/intune-service/protect/quickstart-send-notification.md.

20 January 2026
1

Whats New

Updated

Updated Microsoft Intune documentation in autopilot/device-preparation/whats-new.md.

20 January 2026
1
1
8

Device Query Multiple Devices

Updated

Updated Microsoft Intune documentation in intune/advanced-analytics/device-query-multiple-devices.md.

24 January 2026

Device Query Multiple Devices

Updated

Updated Microsoft Intune documentation in intune/advanced-analytics/device-query-multiple-devices.md.

24 January 2026

Device Query Multiple Devices

Updated

Updated Microsoft Intune documentation in intune/advanced-analytics/device-query-multiple-devices.md.

24 January 2026

Device Query Multiple Devices

Updated

Updated Microsoft Intune documentation in intune/advanced-analytics/device-query-multiple-devices.md.

23 January 2026

Device Query Multiple Devices

Updated

Updated Microsoft Intune documentation in intune/advanced-analytics/device-query-multiple-devices.md.

23 January 2026

Device Query Multiple Devices

Updated

Updated Microsoft Intune documentation in intune/advanced-analytics/device-query-multiple-devices.md.

23 January 2026

Device Query Multiple Devices

Updated

Updated Microsoft Intune documentation in intune/advanced-analytics/device-query-multiple-devices.md.

23 January 2026

Device Query Multiple Devices

Updated

Updated Microsoft Intune documentation in intune/advanced-analytics/device-query-multiple-devices.md.

23 January 2026
Daily Intune.Admin.News

Get daily email updates

Get a concise summary of the latest Microsoft Intune updates delivered straight to your inbox.

Email signup will appear here once the Kit form is configured. Until then, use the daily RSS feed.