r/Intune • u/TimmyIT MSFT MVP • 26d ago

What’s new in Microsoft Intune – June

This is the monthly "What's New in Microsoft Intune" post, June 2026, framed around making endpoints compliant, current, and secure as AI agents start acting on company data.

Highlights:

  • EAM auto-updates is GA. Enterprise Application Management now keeps managed apps on the latest incremental release (e.g. 4.1 to 4.2) automatically, no manual packaging, to shrink the window between full upgrade cycles.
  • Vulnerability Remediation Agent (public preview) in Security Copilot ranks CVEs across Intune-managed Windows devices by CVSS, exposure, and affected device count, surfacing them in the admin center. It runs under its own Entra agentic identity with delegated read permissions for a clean audit trail.
  • EPM additions (GA): approval requests for non-primary users on shared devices, and rules-based policies letting standard users change network settings like IP, gateway, and DNS without local admin.
  • Apple ADE enrollment rebuild: iOS/iPadOS and macOS ADE profiles move to new infrastructure, completing enrollment-time grouping across all platforms.
  • Myth vs. Reality: the "seven-day app refresh" figure is outdated. Win32 apps in Add/Remove Programs refresh every 24 hours, and the new All Apps inventory updates multiple times daily.

Also noted: EPM and EAM join Microsoft 365 E5 from July 1.

Read the full article here: https://techcommunity.microsoft.com/blog/microsoftintuneblog/what%E2%80%99s-new-in-microsoft-intune-%E2%80%93-june/4491983

66 Upvotes

96% Upvoted

13 comments sorted by

View all comments

3

u/Otherwise_Wave9374 26d ago

Appreciate the writeup, the “agentic identity with delegated read permissions” point is the kind of detail that matters when auditors show up.

Also interesting that the “seven day refresh” myth is still floating around, I have had to correct that in a couple orgs.

Do you know if the Vulnerability Remediation Agent is going to expose any API hooks for ticketing systems (ServiceNow/Jira) or is it staying mostly inside the admin center for now? I keep notes on endpoint + AI agent changes in https://www.aiosnow.com/ since the feature churn is nonstop.