Microsoft Intune – Wochenupdate KW 27 (29.06.2026)

Plattformübergreifend:

• Newly available protected app for Intune: ChatGPT is now available as a protected app for Microsoft Intune. For more information about protected apps, see Microsoft Intune protected apps.
• Intune support for Trustd Mobile as a mobile threat defense partner: You can now use Trustd Mobile as a mobile threat defense partner (MTD) for enrolled devices that run the following platforms: To learn more about this support, see Use Trustd Mobile with Microsoft Intune.
• Remote Help support for RemoteApp in Azure Virtual Desktop: Remote Help supports RemoteApp in Azure Virtual Desktop (AVD), enabling help desk agents to securely view and control apps running within RemoteApp sessions. For more information, see Launch Remote Help.
• Microsoft Tunnel adds support for Red Hat Enterprise Linux 9.7: Microsoft Tunnel Gateway now supports Red Hat Enterprise Linux (RHEL) 9.7 as a Linux server distribution. For the full list of supported distributions and their container requirements, see Prerequisites for the Microsoft Tunnel in Intune.

Windows:

• Enterprise App Management support for GCC High and DoD: Microsoft Intune now extends Enterprise App Management (EAM) to the GCC High (GCCH) and DoD cloud environments. Government organizations can use the EAM enterprise catalog to discover, deploy, and keep prepackaged Microsoft and third-party apps up to date without manual repackaging.
• Auto-update for Enterprise App Management applications: Microsoft Intune now supports automatic updates for Enterprise App Management (EAM) applications. When you enable auto-update for an EAM app with a required assignment, Intune detects when a newer version is available in the EAM catalog and automatically updates the app on targeted devices.
• Updated security baseline for Microsoft 365 Apps for Enterprise: An updated security baseline for Microsoft 365 Apps for Enterprise is now available in Microsoft Intune. This baseline aligns with the most recent Microsoft 365 Apps security guidance and includes updated policy recommendations to help protect against evolving threats.
• New setting added to the Windows security baseline version 25H2: The Intune security baseline for Windows, version 25H2, is updated to include one new setting, Disable Internet Explorer 11 Launch Via COM Automation, with a baseline default of Enabled. This setting was excluded from the version 25H2 baseline at its initial release due to a known issue, which is now resolved.

Android:

• New Android Enterprise settings in the Intune settings catalog: The settings catalog lists all the settings you can configure in a device policy, and all in one place. The following new Android Enterprise settings are available in the Microsoft Intune settings catalog (Devices > Manage devices > Configuration > Create > New policy > Android Enterprise for platform > Settings catalog for profile type).
• New supported OEMConfig apps for Android Enterprise: The following OEMConfig apps are available in Intune for Android Enterprise: For more information about OEMConfig, see Use and manage Android Enterprise devices with OEMConfig in Microsoft Intune.

iOS/macOS:

• Available macOS PKG apps update automatically when you upload a new version: For available macOS PKG apps, updates now deploy to devices automatically when the same app policy was updated with a new app version, so users no longer need to select Install or Reinstall in Company Portal to get the latest version. When you edit an existing available app policy with a newer version of the app that uses the same bundle ID, Intune deploys the update to the device automatically.
• Support for WPA3-Personal in iOS/iPadOS Wi-Fi profiles: Intune supports WPA3-Personal as a security-type option when configuring Wi-Fi device configuration profiles for iOS/iPadOS. Admins can now select WPA3-Personal alongside existing options such as WPA2-Personal.

Linux:

• New Microsoft Defender Antivirus settings for Linux Server devices: The existing endpoint security Antivirus policy for the Microsoft Defender Antivirus profile on Linux Server now includes new settings you can configure and deploy to your managed Linux devices: These settings: For details about the available Defender settings, see Set preferences for Microsoft Defender for Endpoint on Linux in the Microsoft Defender for Endpoint documentation.

Fazit: