Week of 6 April 2026 — Daily Intune News

Week in brief

Endpoint Privilege Management now enforces scope tags on elevation requests

Endpoint Privilege Management is the clearest operational change this week: applicable scope tags now constrain which elevation requests administrators can view and manage. With no Message Center announcements supplied, the other notable items are documentation-led: a seven-step Edge for Business rollout guide, a compliance-driven Android device-administrator migration path, a current Windows VPN derived-credentials limitation, and an Apple deprecation notice on supervised macOS MDM update policies. These additions clarify deployment and support boundaries; they do not by themselves establish new feature availability or retirement dates.

Endpoint Privilege Management · Device security
EPM elevation-request administration now honors assigned scope tags
Changed behavior: the What's New entry says applicable scope tags are now enforced when viewing Endpoint Privilege Management elevation requests. Administrators can view and manage only requests for devices and users within their assigned scope. Review delegated administrator scope assignments because this changes visibility and management boundaries.
Intune · Apple
Edge for Business guidance separates app-level and device-level policy deployment
Documentation-only: the new Step 5 guide describes Settings Catalog as an enrolled-device, device-level control for Windows and macOS, while App Configuration Policies use the Managed Apps channel for non-enrolled devices. It says never to target both policy types at the same Edge client; enrolled Windows devices should use either Settings Catalog or the Microsoft Edge Security Baseline, not both. Levels 1, 2, and 3 are non-cumulative, with only one level deployed per user or device.
Intune · Device enrollment
Android migration guidance documents a compliance-driven work-profile path
Documentation-only: the migration guide directs administrators to create an Android device administrator compliance policy and set **Block devices managed with device administrator** to **Yes**. The user Resolve checklist then covers unenrollment, enrollment into personally owned work profile management, and resolution of remaining compliance issues. Prerequisites include Android Company Portal 5.0.4720.0 or later, an Intune-to-Android Enterprise connection, and work-profile enrollment configured; lingering device
Intune · Device security
Windows VPN profiles are flagged as not working with derived credentials
Current limitation and security guidance: the Intune derived-credentials page says using **Derived credential** as the authentication method for VPN profiles is not working as expected on Windows devices. The limitation affects Windows VPN profiles only and is expected to be fixed in a future release with no ETA. Treat Windows VPN use as unvalidated and plan or test around the limitation.
Intune · Device updates
Supervised macOS update-policy guidance now includes an Apple deprecation warning
Documentation-only: the new macOS software-update guide includes an Important notice titled **Apple MDM software updates deprecation**, while still documenting MDM-based policies for supervised macOS 12 through macOS 15 and actions such as **Download and install**, **Download only**, **Install immediately**, and **Notify only**. The supplied evidence provides no retirement date or replacement, so it supports a deprecation warning—not a confirmed deadline.

For Intune administrators

Prioritize scope review for delegated Endpoint Privilege Management administrators because elevation-request visibility and management are limited to assigned users and devices. For Edge, Android migration, Windows VPN, and macOS update work, use the documented prerequisites and constraints in design reviews; do not infer launch status or an Apple retirement deadline from these documentation additions.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.

Updates this week

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/multi-admin-approval.md.

6 April 2026

Updated Microsoft Intune documentation in intune/device-configuration/settings-catalog/ref-android-settings.md.

6 April 2026

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/whats-new-app-ui.md.

6 April 2026

Updated Microsoft Intune documentation in intune/intune-service/user-help/rename-your-device-cpwebsite.md.

6 April 2026

Send Custom Notifications

Removed

Updated

Updated

Updated Microsoft Intune documentation in intune/intune-service/user-help/reset-device-company-portal-website.md.

6 April 2026

6 April 2026

Windows 10 Virtual Machines

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/windows-10-virtual-machines.md.

6 April 2026

Updated Microsoft Intune documentation in intune/device-updates/byod-software-updates-guide.md.

6 April 2026

6 April 2026

8 April 2026

7 April 2026

7 April 2026

Update Microsoft 365 apps with the settings catalog in Microsoft Intune

Updated

Updated Microsoft Intune documentation in intune/device-configuration/settings-catalog/update-office.md.

7 April 2026

6 April 2026

Linux

Custom Settings Linux

Updated

Updated Microsoft Intune documentation in intune/intune-service/configuration/custom-settings-linux.md.

9 April 2026

Get the Microsoft Intune app for Linux

New

Added Microsoft Intune documentation in intune/user-help/company-portal/intune-app-linux.md.

8 April 2026

Deployment Guide Platform Linux

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/deployment-guide-platform-linux.md.

8 April 2026

Check Status Linux

Removed

Removed Microsoft Intune documentation in intune/intune-service/user-help/check-status-linux.md.

8 April 2026

Microsoft Intune App Linux

Removed

Removed Microsoft Intune documentation in intune/intune-service/user-help/microsoft-intune-app-linux.md.

8 April 2026

Windows Autopilot

Updated Microsoft Intune documentation in autopilot/whats-new.md.

6 April 2026

Windows

Frontline Worker Overview Windows

Updated

Updated Microsoft Intune documentation in intune/solutions/frontline-worker/frontline-worker-overview-windows.md.

8 April 2026

Microsoft Configuration Manager

App management

Updated Microsoft Intune documentation in intune/configmgr/comanage/overview.md.

8 April 2026

Certificates Overview

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/plan-design/security/certificates-overview.md.

7 April 2026

Capabilities In Technical Preview 1805

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/get-started/capabilities-in-technical-preview-1805.md.

7 April 2026

Troubleshooting

Capabilities In Technical Preview 1803

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/get-started/capabilities-in-technical-preview-1803.md.

7 April 2026

Capabilities In Technical Preview 1708

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/get-started/capabilities-in-technical-preview-1708.md.

7 April 2026

Device updates

About Client Settings

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/clients/deploy/about-client-settings.md.

7 April 2026

Endpoint Privilege Management

2 updates

Device enrollment

In Development

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/in-development.md.

7 April 2026

Device security

Whats New

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/whats-new.md.

7 April 2026

Microsoft Intune Remote Help

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/remote-help-deploy.md.

8 April 2026

Fundamentals

Intune Add Ons

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/intune-add-ons.md.

9 April 2026

3 updates

Endpoint analytics

Device Scopes

Updated

Updated Microsoft Intune documentation in intune/advanced-analytics/device-scopes.md.

7 April 2026

Device Query

Updated

Updated Microsoft Intune documentation in intune/advanced-analytics/device-query.md.

7 April 2026

Device Query Multiple Devices

Updated

Updated Microsoft Intune documentation in intune/advanced-analytics/device-query-multiple-devices.md.

7 April 2026

Microsoft Cloud PKI

Removed Microsoft Intune documentation in intune/cloud-pki/renew-ca.md.

Removed Microsoft Intune documentation in intune/intune-service/apps/apps-enterprise-app-management.md.

10 April 2026

Configure Device Apps

Updated

Updated Microsoft Intune documentation in intune/intune-service/industry/education/tutorial-school-deployment/configure-device-apps.md.

8 April 2026

7 April 2026

Change Review Agent

Updated

Updated Microsoft Intune documentation in intune/copilot/agents/change-review-agent.md.

7 April 2026

Device updates

Manage Vulnerability Remediation Agent

Updated

Updated Microsoft Intune documentation in intune/copilot/agents/manage-vulnerability-remediation-agent.md.

9 April 2026

Fundamentals

Admin Tasks

Updated

Updated Microsoft Intune documentation in intune/intune-service/fundamentals/admin-tasks.md.

8 April 2026