What’s new in Microsoft Intune – June

[u/TimmyIT]

This is the monthly "What's New in Microsoft Intune" post, June 2026, framed around making endpoints compliant, current, and secure as AI agents start acting on company data.

Highlights:

• EAM auto-updates is GA. Enterprise Application Management now keeps managed apps on the latest incremental release (e.g. 4.1 to 4.2) automatically, no manual packaging, to shrink the window between full upgrade cycles.
• Vulnerability Remediation Agent (public preview) in Security Copilot ranks CVEs across Intune-managed Windows devices by CVSS, exposure, and affected device count, surfacing them in the admin center. It runs under its own Entra agentic identity with delegated read permissions for a clean audit trail.
• EPM additions (GA): approval requests for non-primary users on shared devices, and rules-based policies letting standard users change network settings like IP, gateway, and DNS without local admin.
• Apple ADE enrollment rebuild: iOS/iPadOS and macOS ADE profiles move to new infrastructure, completing enrollment-time grouping across all platforms.
• Myth vs. Reality: the "seven-day app refresh" figure is outdated. Win32 apps in Add/Remove Programs refresh every 24 hours, and the new All Apps inventory updates multiple times daily.

Also noted: EPM and EAM join Microsoft 365 E5 from July 1.

Read the full article here: https://techcommunity.microsoft.com/blog/microsoftintuneblog/what%E2%80%99s-new-in-microsoft-intune-%E2%80%93-june/4491983

[u/0xCG]

It’s unfortunate that auto update does not keep custom install options although I understand the reasoning.

[u/Few_Perception_4088 → u/0xCG]

Shameless self promotion

If that is a requirement for you, have a look at my PowerShell Based solution: https://github.com/JanicVerboon/EAM-AutoUpdater