Daily Intune News
Aboutmerill.net
← Previous week
Next week →
Week in brief

Windows Autopilot automatic mode for Windows 365 drops preview label in updated guidance

The week was mostly documentation maintenance: 129 of 132 changes were updates involving terminology, links, numbering, formatting, and procedure clarification. The notable administrator-facing exceptions were Windows Autopilot device preparation for Windows 365, the Security Copilot Vulnerability Remediation Agent permission model, and Intune’s Defender for Endpoint and Mobile Threat Defense setup guidance. The Autopilot articles remove “preview” and replace Windows 365 Frontline references with Windows 365 Flex. A new device-based Conditional Access how-to also makes its licensing, role, and compliance-policy prerequisites explicit. One standalone app-based Conditional Access how-to was removed, which the supplied evidence supports as documentation consolidation rather than retirement of the capability.

  • Windows Autopilot · Device enrollment
    Windows 365 automatic-mode guidance drops the public-preview label

    The Windows Autopilot device-preparation automatic-mode article removes “(preview)” from its title, description, headings, and public-preview note. It also replaces Windows 365 Frontline shared and dedicated references with Windows 365 Flex. This is a documentation status and terminology change; it does not establish general availability on its own.

  • Security Copilot · Fundamentals
    Vulnerability Remediation Agent guidance defines an agentic-user RBAC model

    Security Copilot guidance now describes an agentic-user permission model for running the Vulnerability Remediation Agent. Permissions are delegated outside the Intune admin center in Microsoft Entra and Microsoft Defender. On the Intune side, the guidance names Read Only Operator or a custom role with Mobile apps/read and Device configurations/read; users viewing results need corresponding read access.

  • Intune · Device enrollment
    Defender connector guidance documents automatic launch on Android COBO and COPE

    The Mobile Threat Defense connector guidance documents an “Automatically launch Microsoft Defender for Endpoint during setup” toggle for Android Enterprise corporate-owned fully managed and corporate-owned work profile devices. It is available only for the Microsoft Defender for Endpoint connector and requires the “Grant MTD role permissions” toggle to be enabled as well.

  • Intune · Device security
    New device-based Conditional Access guide names setup prerequisites

    Intune added a dedicated how-to requiring a Microsoft Entra ID P1 or P2 license and either the Security administrator or Conditional Access administrator role. The procedure also requires Intune device compliance policies to be configured before creating the Conditional Access policy. This is a new documentation path, not evidence of a newly introduced Conditional Access capability.

  • Intune · Device security
    Custom compliance script uploads remain unable to use scope tags

    The revised custom-script guidance makes the limitation explicit: the upload workflow does not support scope tags. Administrators must have the default scope tag to create, edit, or view custom compliance discovery scripts.

For Intune administrators

Treat the Autopilot edit as a documentation and availability signal, not proof of general availability; confirm current Windows 365 and Autopilot availability before changing rollout plans. For the Vulnerability Remediation Agent, review the agentic user and delegated permissions assigned in Microsoft Entra and Microsoft Defender; the guidance lists Intune Read Only Operator or a custom role with Mobile apps/read and Device configurations/read. The agent remains documented as limited public preview and public-cloud only. If enabling the Defender for Endpoint automatic-launch toggle, also enable Grant MTD role permissions for Android Enterprise COBO and COPE devices. For device-based Conditional Access, confirm a Microsoft Entra ID P1 or P2 license, Security Administrator or Conditional‌ ‍‍

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.

Updates this week

Device security

58

Configure Integration

Updated

Updated Microsoft Intune documentation in intune/device-security/microsoft-defender/configure-integration.md.

15 May 2026

Enable Connector

Updated

Updated Microsoft Intune documentation in intune/device-security/mobile-threat-defense/enable-connector.md.

15 May 2026

Configure Integration

Updated

Updated Microsoft Intune documentation in intune/device-security/microsoft-defender/configure-integration.md.

15 May 2026

Configure Integration

Updated

Updated Microsoft Intune documentation in intune/device-security/microsoft-defender/configure-integration.md.

15 May 2026

Enable Connector

Updated

Updated Microsoft Intune documentation in intune/device-security/mobile-threat-defense/enable-connector.md.

15 May 2026

Endpoint Security Policies

Updated

Updated Microsoft Intune documentation in intune/device-security/endpoint-security-policies.md.

15 May 2026

Overview

Updated

Updated Microsoft Intune documentation in intune/device-security/mobile-threat-defense/overview.md.

15 May 2026

Setup Macos

Updated

Updated Microsoft Intune documentation in intune/device-security/laps/setup-macos.md.

15 May 2026

Setup Macos

Updated

Updated Microsoft Intune documentation in intune/device-security/laps/setup-macos.md.

14 May 2026

Configure Wsl

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/configure-wsl.md.

13 May 2026

Configure Noncompliance Actions

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/configure-noncompliance-actions.md.

13 May 2026

Create Custom Script

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/create-custom-script.md.

13 May 2026

Ref Defender Settings

Updated

Updated Microsoft Intune documentation in intune/device-security/security-baselines/ref-defender-settings.md.

13 May 2026

Custom Settings

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/custom-settings.md.

12 May 2026

Create Custom Script

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/create-custom-script.md.

12 May 2026

Create Policy

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/create-policy.md.

12 May 2026

Overview

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/overview.md.

12 May 2026

Ref Android Enterprise Settings

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/ref-android-enterprise-settings.md.

12 May 2026

Custom Settings

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/custom-settings.md.

12 May 2026

Manage Exchange Access

Updated

Updated Microsoft Intune documentation in intune/device-security/conditional-access-integration/manage-exchange-access.md.

12 May 2026

App Based Policies

Updated

Updated Microsoft Intune documentation in intune/device-security/conditional-access-integration/app-based-policies.md.

12 May 2026

Configure Noncompliance Actions

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/configure-noncompliance-actions.md.

12 May 2026

Configure Wsl

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/configure-wsl.md.

12 May 2026

Create Custom Json

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/create-custom-json.md.

12 May 2026

Custom Settings

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/custom-settings.md.

12 May 2026

Overview

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/overview.md.

12 May 2026

Ref Android Aosp Settings

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/ref-android-aosp-settings.md.

12 May 2026

Ref Android Enterprise Settings

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/ref-android-enterprise-settings.md.

12 May 2026

Ref Android Enterprise Settings

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/ref-android-enterprise-settings.md.

12 May 2026

Ref Linux Settings

Updated

Updated Microsoft Intune documentation in intune/device-security/compliance/ref-linux-settings.md.

12 May 2026

Create App Based Policy

Removed

Removed Microsoft Intune documentation in intune/device-security/conditional-access-integration/create-app-based-policy.md.

12 May 2026

Device Based Policies

Updated

Updated Microsoft Intune documentation in intune/device-security/conditional-access-integration/device-based-policies.md.

12 May 2026

Ref Android Administrator Settings

Updated

Changes Android support wording to “later,” corrects “device is reported,” and clarifies Google Mobile Services unavailable regions fail Play Protect evaluation.

12 May 2026

Upgrade

Updated

Changes the Microsoft Tunnel release entry from May 1 version 20260407.1 to May 7 version 20260507.2.

11 May 2026

Create Compliance Policy

Updated

Corrects the most secure MTD compliance threat level from Secured to Clear; devices with any threats remain noncompliant.

11 May 2026

Device enrollment

8

Enable Connector

Updated

Updated Microsoft Intune documentation in intune/device-security/mobile-threat-defense/enable-connector.md.

15 May 2026

Overview

Updated

Updated Microsoft Intune documentation in intune/device-security/microsoft-defender/overview.md.

15 May 2026

Setup Jamf Manually

Updated

Updated Microsoft Intune documentation in intune/device-security/conditional-access-integration/setup-jamf-manually.md.

13 May 2026

Monitor Policy

Updated

Corrects reporting prose and renumbers the compliance-reporting option step; the Noncompliant devices report remains under Devices > Monitor.

12 May 2026

Apple

7

Configure Platform Sso Macos

Updated

Updated Microsoft Intune documentation in intune/device-configuration/settings-catalog/configure-platform-sso-macos.md.

15 May 2026

Ref Device Restrictions Apple

Updated

Updated Microsoft Intune documentation in intune/device-configuration/templates/ref-device-restrictions-apple.md.

14 May 2026

Common Tasks

Updated

Updated Microsoft Intune documentation in intune/device-configuration/settings-catalog/common-tasks.md.

13 May 2026

Configure Platform Sso Macos

Updated

Updated Microsoft Intune documentation in intune/device-configuration/settings-catalog/configure-platform-sso-macos.md.

13 May 2026

Windows

4

Configure Bios Windows

Updated

Updated Microsoft Intune documentation in intune/device-configuration/templates/configure-bios-windows.md.

15 May 2026

Multi Admin Approval

Updated

Updated Microsoft Intune documentation in intune/fundamentals/role-based-access-control/multi-admin-approval.md.

13 May 2026

Android

3

Aosp Supported Devices

Updated

Adds a Cupra device to the Android Open Source Project supported-devices list.

13 May 2026

Aosp Supported Devices

Updated

Updated Microsoft Intune documentation in intune/fundamentals/aosp-supported-devices.md.

13 May 2026

Ref Android Settings

Updated

Updated Microsoft Intune documentation in intune/device-configuration/settings-catalog/ref-android-settings.md.

11 May 2026

Device configuration

3

Deploy Edr

Updated

Updated Microsoft Intune documentation in intune/device-configuration/endpoint-security/deploy-edr.md.

15 May 2026

Configure Universal Print

Updated

Updated Microsoft Intune documentation in intune/device-configuration/settings-catalog/configure-universal-print.md.

13 May 2026

Configure Universal Print

Updated

Changes Universal Print troubleshooting tracing reference from Print-Collect to TSS.

13 May 2026

App management

2

Fundamentals

2

Zero Trust

Updated

Updated Microsoft Intune documentation in intune/fundamentals/zero-trust.md.

12 May 2026

Multi Admin Approval

Updated

Updated Microsoft Intune documentation in intune/fundamentals/role-based-access-control/multi-admin-approval.md.

11 May 2026

Endpoint analytics

1

Index

Updated

Updated Microsoft Intune documentation in intune/whats-new/archive/index.md.

14 May 2026

Device enrollment

15

Overview

Updated

Updated Microsoft Intune documentation in autopilot/device-preparation/overview.md.

14 May 2026

Whats New

Updated

Adds GA for automatic-mode device-preparation policies that provision Cloud PCs at creation; Windows 365 Reserve remains preview.

11 May 2026

Whats New

Updated

Adds GA for automatic-mode device-preparation policies that provision Cloud PCs at creation; Windows 365 Reserve remains preview.

11 May 2026

Whats New

Updated

Updated Microsoft Intune documentation in autopilot/device-preparation/whats-new.md.

11 May 2026

General

9

Pre Release Construction

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/misc/pre-release-construction.md.

12 May 2026

37426535

Updated

Updated Microsoft Intune documentation in intune/configmgr/hotfix/2603/37426535.md.

11 May 2026

Windows

8

Support For Windows Adk

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/plan-design/configs/support-for-windows-adk.md.

13 May 2026

Support For Windows 10

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/plan-design/configs/support-for-windows-10.md.

13 May 2026

Support For Windows 11

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/plan-design/configs/support-for-windows-11.md.

13 May 2026

Support For Windows 10

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/plan-design/configs/support-for-windows-10.md.

13 May 2026

Support For Windows 10

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/plan-design/configs/support-for-windows-10.md.

13 May 2026

Support For Windows Adk

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/plan-design/configs/support-for-windows-adk.md.

13 May 2026

Device security

2

Atp Onboard

Updated

Updated Microsoft Intune documentation in intune/configmgr/tenant-attach/atp-onboard.md.

15 May 2026

Troubleshoot Endpoint Client

Updated

Updated Microsoft Intune documentation in intune/configmgr/protect/deploy-use/troubleshoot-endpoint-client.md.

12 May 2026

Compliance

1

36949461

Updated

Updated Microsoft Intune documentation in intune/configmgr/hotfix/2509/36949461.md.

11 May 2026

Troubleshooting

1

Cmpivot Tsg

Updated

Updated Microsoft Intune documentation in intune/configmgr/core/servers/manage/cmpivot-tsg.md.

12 May 2026

Troubleshooting

5

Fundamentals

3

Suggestions

Updated

Flags images in the manage-vulnerability-remediation-agent guidance for product-manager review or update.

12 May 2026
Daily Intune.Admin.News

Get daily email updates

Get a concise summary of the latest Microsoft Intune updates delivered straight to your inbox.

Email signup will appear here once the Kit form is configured. Until then, use the daily RSS feed.