In this blog post, I will list the new features of Microsoft Intune based on each service release. Microsoft regularly adds new features to the Intune service, presented in a YYMM format. For example, an Intune Service Release 2312 indicates that it was released in December 2023.
All updates released by Microsoft are gradually rolled out to all Intune organizations. Therefore, if you do not see a feature even though you are on the latest release, it will eventually be enabled automatically on your tenant. No action is required from your end.
Microsoft Intune updates are released frequently, sometimes multiple times a month. Whenever a major release is released, a service release number is applied to identify the feature set easily.
Previously, New Features for Intune were released in service packs every year or two, and major product releases were released every four years. Now, Microsoft is releasing more frequent updates for Intune.
Table of Contents
How to Find Intune Service Release Version
You can easily find the Intune Service Release version from the Intune admin center. Let’s check the steps:
- Sign in to the Intune admin center.
- Click on Tenant Administration > Tenant status.
On the Tenant status page, you will not only find the Intune Service Release number but also the following details:
- Intune Tenant Name
- Tenant location
- MDM Authority
- Account status
- Total Enrolled Devices
- Total Licensed Users and Total Intune Licenses
Order of Intune Monthly Update Rollout
After the successful rollout of new features to Microsoft Corp, which can take a couple of weeks, each Intune monthly update can take up to three days to fully deploy. For Detailed Information about how Intune Service Updates work, please refer to the link: Microsoft Intune Service Updates.
Below is the sequence of UI rollout each month:
- Day 1: Asia Pacific (APAC) – 24-hour waiting period
- Day 2: Europe, Middle East, Africa (EMEA) – 24-hour waiting period
- Day 3: North America
- Day 4+: Intune for Government
Some of the features can take more than three days. Therefore, if there is a new Intune Service release and you do not see one of the newest features or settings in your Intune organization, you may have to wait for some time before enabling them.
Intune Service Release Numbers, Monthly Updates, New Features Information
The following sections of this post will provide all the information about the latest Intune service release number, which could include monthly or weekly updates. The new features are a part of the Intune service release. I will strive to keep the information below updated as Microsoft releases new features for Intune.
Microsoft Intune Service Release 2403 | March 2024 Intune Updates
In March 2024, Microsoft released Service Release 2402 for Intune. Microsoft has added the following new features to the Intune service. For complete documentation and detailed information on this service release, please refer to the following link: Intune Service Release 2402.
- New elevation type for Endpoint Privilege Management.
- Extended capabilities for Managed Google Play apps on personally-owned Android devices with a work profile.
- New settings available in the Apple settings catalog.
- New settings available in the Windows settings catalog.
- New archive file scan settings added to Antivirus policy for Windows devices.
- New compliance setting lets you verify device integrity using hardware-backed security features.
- New compliance settings for Android work profile, personal devices.
- Windows quality updates support for expediting non-security updates.
- Introducing a remote action to pause the config refresh enforcement interval.
- Updated security baseline for Windows version 23H2.
- Use a rootless implementation of Podman to host Microsoft Tunnel.
- Improvements for Intune deployments of Microsoft Defender for Endpoint.
- New enrollment configuration for Windows Hello for Business.
Microsoft Intune Service Release 2402 | February 2024 Intune Updates
In February 2024, Microsoft released Service Release 2402 for Intune. Microsoft has added the following new features to the Intune service. For complete documentation and detailed information on this service release, please refer to the following link: Intune Service Release 2402.
- Additional app configuration permissions for Android apps.
- Newly available protected apps for Intune.
- Update to Intune Management Extension on Windows.
- Use assignment filters on Endpoint Privilege Management (EPM) policies.
- New settings are available in the Apple settings catalog.
- Import up to 20 custom ADMX and ADML administrative templates.
- New setting for updating MAC address randomization on Android Enterprise devices.
- Turn Off Copilot in Windows setting in the Windows settings catalog.
- Windows Autopilot self-deploying mode is now generally available.
- Windows Autopilot for pre-provisioned deployment is now generally available.
- ESP setting to install required apps during Windows Autopilot pre-provisioning
- New local primary account configuration for macOS automated device enrollment.
- Await final configuration for macOS automated device enrollment now generally available.
- AOSP devices check for new tasks and notifications approximately every 15 minutes.
- New device management experience for Government clouds in Microsoft Intune.
- Bulk approval of drivers for Windows driver update policies.
- Customization pane support for excluding groups.
- New Microsoft Cloud PKI service
Microsoft Intune Service Release 2401 | January 2024 Intune Updates
In January 2024, Microsoft released Service Release 2401 for Intune. Microsoft has added the following new features to the Intune service. For complete documentation and detailed information on this service release, please refer to the following link: Intune Service Release 2401.
| Sr. No. | New Feature | Description |
|---|---|---|
******* App Management Updates ******* | ||
| 1. | DMG and PKG apps update | The size limit for DMG and unmanaged PKG apps, which can be deployed via Intune on Mac devices, has been updated to 8 GB. |
| 2. | Store-signed LOB apps | Intune now supports the deployment of store-signed LOB apps to Surface Hub devices. |
| 3. | Route SMS/MMS messages to the specific app | You can create an app protection policy to determine which SMS/MMS app must be used when the end user intends to send a message after getting redirected from a policy-managed app. |
| 4. | End user’s app PIN reset | For applications that require PIN access, users can reset the app PIN at any time. This functionality is designed for applications that mandate access via a PIN. |
| 5. | Maximum app package size. | The maximum package size for uploading apps to Intune has changed from 8GB to 30GB for paid customers. Trial tenants are still restricted to 8GB. |
******* Device Configuration Updates ******* | ||
| 1. | Disable location on Android Enterprise devices. | On the Intune admin center, Go to Devices > Configuration profiles > Create profile > Android Enterprise for platform > Fully Managed, Dedicated, and Corporate-Owned Work Profile > Device Restrictions for profile type > General. Use the Location configuration and set it to Block. |
| 2. | Pick a Date and Time for managed Software updates on iOS/iPadOS and macOS. | On the Intune admin center, Go to Devices > Configuration profiles > Create profile > iOS/iPadOS or macOS for platform > Settings catalog for profile type > Declarative Device Management > Software Update. Previously, you had to type the date and time manually. Now, there’s a date and time picker for the Target Local Date Time setting. |
******* Device Management Updates ******* | ||
| 1. | New device management experience in Microsoft Intune | Microsoft is updating the device management experience in the Intune admin center. These updates include UI changes and more controls to enhance the navigation experience. |
| 2. | BlackBerry Protect Mobile now supports app protection policies. | You can now use Intune app protection policies with Blackberry Protect Mobile. Intune now supports BlackBerry Protect Mobile for mobile application management (MAM) scenarios for unenrolled devices. |
******* Device Security Updates ******* | ||
| 1. | Intune Defender Update Control Policies | You can now use the Endpoint security policy for Defender update control (AV policy) from the Intune admin center with devices managed by Defender for Endpoint security settings. |
******* Intune App Updates ******* | ||
| 1. | Newly available protected apps for Intune | PrinterOn Print by PrinterOn, Inc. (iOS/iPadOS) Align for InTune by MFB Technologies, Inc. (iOS/iPadOS) |
******* Monitoring and troubleshooting Experience ******* | ||
| 1. | Monitoring reports for devices | On the Intune admin center, Go to Devices > Monitor to find a new list of device monitoring reports available for you. |
| 2. | Exported report data maintains search results. | Example: When you perform a search for a report and filter it by OS “Windows,” then proceed to search for a specific keyword, such as “PC,” within the search results. Subsequently, when you export the data, the search filter will retain and acknowledge both the OS “Windows” and the keyword “PC” queries in the exported data. |
| 3. | Easy upload of diagnostic logs for Microsoft Tunnel servers | You can now use a single click within the Intune admin center to have Intune enable, collect, and submit eight hours of verbose logs for a Tunnel Gateway Server to Microsoft. |
Microsoft Intune Service Release 2312 | December 2023 Intune Updates
In December 2023, Microsoft released Service Release 2312 for Intune. Microsoft has added the following new features to the Intune service. For complete documentation and detailed information on this service release, please refer to the following link: Intune Service Release 2312.
- Support for adding unmanaged PKG-type applications to managed macOS devices is generally available.
- Windows MAM is supported in government cloud environments and 21 Vianet in China.
- Updated security baseline for Microsoft Edge v117
- Support for variables in non-compliant email notifications
- Updated report visualization for Microsoft Defender for Endpoint connector
- New settings for scheduling Antivirus scans added to Antivirus policy for Windows devices
- Microsoft Tunnel support for direct proxy exclusion list in VPN profiles for Android Enterprise
- Microsoft Tunnel server health metric to report on TLS certificate revocation
Microsoft Intune Service Release 2311 | November 2023 Intune Updates
In November 2023, Microsoft released Service Release 2311 for Intune. Microsoft has added the following new features to the Intune service. For complete documentation and detailed information on this service release, please refer to the following link: Intune Service Release 2311.
- New grace period status added in apps for Android, Android AOSP
- New settings available in the Apple settings catalog
- Settings to manage Windows Subsystem for Linux are now available in the Windows settings catalog
- Enrollment for iOS/iPadOS devices in shared device mode is now generally available
- Additional settings for the Linux Antivirus policy template
- Updated security baseline for Microsoft 365 Apps for Enterprise
- Deprecation and replacement of two settings found in the Linux and macOS endpoint security Antivirus policies
- Microsoft Defender Firewall profiles are renamed to Windows Firewall
- Win32 app grace period settings on a device
- Configure offline caching in Microsoft 365 (Office) for Android devices
Microsoft Intune Service Release 2310 | October 2023 Intune Updates
In October 2023, Microsoft released Service Release 2310 for Intune. Microsoft has added the following new features to the Intune service. For complete documentation and detailed information on this service release, please refer to the following link: Intune Service Release 2310.
- Update for Android Company Portal App
- Minimum SDK version warning for iOS devices
- Minimum OS for Apple LOB and store apps
- Android (AOSP) supports line-of-business (LOB) apps
- Configuration scripts for unmanaged macOS PKG apps
- FSLogix settings are available in the Settings Catalog and Administrative Templates
- New settings are available in the macOS settings catalog.
- Web-based device enrollment with JIT registration for personal iOS/iPadOS devices
- Remote Help for Android is now Generally available
- Import and export settings catalog policies
- A new setting to block users from using the same password to unlock the device and access the work profile on Android Enterprise personally-owned devices with a work profile.
- Samsung ended support for kiosk mode on Android device administrator (DA) devices.
- Web-based device enrollment with JIT registration for personal iOS/iPadOS devices.
- Configure declarative software updates and passcode policies for Apple devices in the Settings Catalog.
- Mvision Mobile is now Trellix Mobile Security.
- Newly available protected app for Intune.
endpoint.microsoft.comURL redirects tointune.microsoft.com.
Microsoft Intune Service Release 2309 | September 2023 Intune Updates
In October 2023, Microsoft released Service Release 2309 for Intune. Microsoft has added the following new features to the Intune service. For complete documentation and detailed information on this service release, please refer to the following link: Intune Service Release 2309.
- MAM for Windows general availability
- OEMConfig profiles that don’t deploy successfully aren’t shown as “pending.”
- Config Refresh settings are in the settings catalog for Windows Insiders
- Managed Settings is now available in the Apple settings catalog.
- New settings are available in the macOS settings catalog
- Intune integration with the Zebra Lifeguard Over-the-Air service is generally available
- SSO support is available during enrollment for fully managed and corporate-owned Android Enterprise devices with a work profile.
- Introducing Remote Help on macOS
- Management certificate expiration date
- Windows Defender Application Control (WDAC) references will update to App Control for Business
- Intune supports iOS/iPadOS 15.x as the minimum version
- Government tenant support for endpoint security Application Control policy and managed installer
- Endpoint Privilege Management support for Windows 365 devices
- Elevation report by Publisher for Endpoint Privilege Management
- macOS support with Intune Endpoint security policies for Endpoint detection and response
- Linux support with Intune Endpoint security policies for Endpoint detection and response
- Updated reports for Update rings for Windows 10 and later
- Introducing Remote Launch on Remote Help
- Microsoft Intune ending support for Android device administrator on devices with GMS access in August 2024.
Microsoft Intune Service Release 2308 | August 2023 Intune Updates
In August 2023, Microsoft released Service Release 2308 for Intune. Microsoft has added the following new features to the Intune service. For complete documentation and detailed information on this service release, please refer to the following link: Intune Service Release 2308.
- Managed Home Screen end-users prompted to grant exact alarm permission.
- Managed Home Screen notifications.
- New macOS web clip app type.
- Win32 app configurable installation time.
- Samsung Knox conditional launch check.
- Remote Help for Android in public preview.
- Group Policy Analytics is generally available.
- New SSO, login, restrictions, passcode, and tamper protection settings are available in the Apple settings catalog.
- Just-in-time registration and compliance remediation for iOS/iPadOS Setup Assistant with modern authentication now generally available.
- Awaiting final configuration for iOS/iPadOS automated device enrollment now generally available.
- Changes to Android notification permission prompt behavior.
- Defender Update controls to deploy updates for Defender is now generally available.
- Elevation report by applications for Endpoint Privilege Management.
- New settings are available for macOS’s antivirus policy.
- Newly available protected app for Intune – VerifyRMS by Mackey LLC (iOS)
- CloudDesktop log now collected with Windows diagnostics data
- Anomaly detection device cohorts in Intune Endpoint analytics is generally available
- Improved user experience for device timeline in Endpoint Analytics
- Updates for compliance policies and reports
- Turn off the Store application setting to disable end-user access to Store apps and allow managed Intune Store apps.
- Introducing a new role-based access control (RBAC) permission under the resource Android for work
Microsoft Intune Service Release 2307 | July 2023 Intune Updates
In July 2023, Microsoft released Service Release 2307 for Intune. Microsoft has added the following new features to the Intune service. For complete documentation and detailed information on this service release, please refer to the following link: Intune Service Release 2307.
- Intune supports the new Google Play Android Management API.
- App report for Android Enterprise corporate-owned devices.
- Add unmanaged PKG-type applications to managed macOS devices [Public Preview].
- New settings available for the iOS/iPadOS web clip app type
- Change to default settings when adding Windows PowerShell scripts
- Added Support for Scope tags
- New settings are available in the macOS settings catalog.
- Compliance Retrieval service support for MAC address endpoints
- Settings insight within Intune security baselines is generally available
- Tamper protection support for Windows on Azure Virtual Desktop
- EpmTools PowerShell module for Endpoint Privilege Management
- Endpoint Privilege Management support to manage elevation rules for child processes
- Newly available protected app for Intune – Dooray! for Intune.
- Updated reports for Setting compliance and Policy compliance are in the public preview.
- Updates to app configuration policy reporting
- New BitLocker profile for Intune’s endpoint security Disk encryption policy
- Uninstall Win32 and Microsoft Store apps using the Windows Company Portal
- Intune support for Zebra devices on Android 13
- Defender for Endpoint security settings management enhancements and support for Linux and macOS in public preview.
Microsoft Intune Service Release 2306 | June 2023 Intune Updates
In June 2023, Microsoft released Service Release 2306 for Intune. Microsoft has added the following new features to the Intune service. For complete documentation and detailed information on this service release, please refer to the following link: Intune Service Release 2306.
- Android (AOSP) supports assignment filters
- On-demand remediation for a Windows device
- Windows Driver update management in Intune is generally available
- MAM for Microsoft Edge for Business [Preview]
- New settings available in the Apple settings catalog
- Device Firmware Configuration Interface (DFCI) supports Asus devices
- Saaswedo Datalert telecom expense management is removed in Intune
- Settings insight within Intune security baseline
- New endpoint security Application Control policy in preview
- Endpoint analytics is available to tenants in the Government Cloud
- Introducing in-session connection mode switch in Remote Help
- Update to Endpoint Privilege Management reports
- Endpoint Privilege Management runs with an elevated access option now available on the top-level menu for Windows 11.
- Newly available protected apps for Intune:
- Idenprotect Go by Apply Mobile Ltd (Android)
- LiquidText by LiquidText, Inc. (iOS)
- MyQ Roger: OCR scanner PDF by MyQ spol. s r.o.
- CiiMS GO by Online Intelligence (Pty) Ltd
- Vbrick Mobile by Vbrick Systems
- Microsoft Intune troubleshooting pane is now generally available
- Updated troubleshooting + support pane in Intune
- Download mobile app diagnostics
- New Devices from HTC and Pico supported on Microsoft Intune for Android Open Source Devices
- Microsoft Store for Business or Microsoft Store for Education
- Android Enterprise 11+ devices can use Zebra’s latest OEMConfig app version
Microsoft Intune Service Release 2305 | May 2023 Intune Updates
In May 2023, Microsoft released Service Release 2305 for Intune. Microsoft has added the following new features to the Intune service. For complete documentation and detailed information on this service release, please refer to the following link: Intune Service Release 2305.
- Update to macOS shell scripts maximum running time limit.
- Assignment filters support app protection policies and app configuration policies.
- Update to MAM reporting in Intune.
- Global quiet time app policy settings.
- Introducing enhanced chat in Remote Help.
- Remote Help administrators can reference audit log sessions.
- Turn on/off Personal data encryption on Windows 11 devices using the settings catalog.
- Visual Studio ADMX settings are in the Settings Catalog and Administrative Templates.
- Group policy analytics supports scope tags.
- Introducing Intune integration with the Zebra Lifeguard Over-the-Air service (public preview).
- New Google domain allowlist settings for Android Enterprise personally owned devices with a work profile.
- Renaming Proactive remediation to Remediations and moving to a new location.
- Remediations are now available in Intune for US Government GCC High and DoD.
- Create inbound and outbound network traffic rules for VPN profiles on Windows devices.
- New settings are available in the macOS settings catalog.
- Wipe device action and new obliteration behavior setting available for macOS.
- Account-driven Apple User Enrollment is available for iOS/iPadOS 15+ devices (public preview).
- New security baseline for Microsoft 365 Office Apps.
- Security baseline update for Microsoft Edge version 112.
- Newly available protected apps for Intune
- Achievers by Achievers Inc.
- Board.Vision for iPad by Trusted Services PTE. LTD.
- Global Relay by Global Relay Communications Inc.
- Incorta (BestBuy) by Incorta, Inc. (iOS)
- Island Enterprise Browser by Island (iOS)
- Klaxoon for Intune by Klaxoon (iOS)
- Device Firmware Configuration Interface (DFCI) supports Dynabook devices
- eSIM bulk activation for Windows PCs via download server is now available on the Settings Catalog
- macOS shell scripts maximum running time limit
- DMG app installation for macOS
- Deprecation of Microsoft Store for Business and Education
- Remote Help now supports conditional access capability
- Updated settings for Microsoft Defender in endpoint security Antivirus policy
