The Intune 2506 release brings several new features & improvements that include support for Enterprise App Catalog apps in Windows Autopilot, Apple AI screen capture control, ARM64 support for Win32 apps, Policy Reporting Service (PRS) V3 and much more. The 2506 updates are being deployed throughout June 2025 across APAC, EMEA, NASA and globally. Administrators should check the Tenant Status blade to confirm when their environment has been updated.
The following are the new features and enhancements included in Intune service release 2406 release in June 2025:
Check out the previous updates released for Intune
The following are the new features and enhancements included in Intune service release 2406 release in June 2025:
1. Add Enterprise App Catalog apps to ESP blocking apps list
Windows Autopilot now includes support for Enterprise App Catalog applications. With Microsoft Intune Enterprise App Management, IT administrators can efficiently manage apps from the Enterprise App Catalog. Through Windows Autopilot, administrators can designate apps from the catalog as blocking apps within the Enrollment Status Page (ESP) and Device Preparation Page (DPP) profiles. This ensures critical applications are installed before users gain access to the desktop environment.2. Managed Home Screen orientation changes with Android 16
Starting with Android 16, devices with display settings of 600dp or larger no longer enforce screen orientation based on app configurations. This update affects the Managed Home Screen (MHS) on larger devices, such as tablets. On these Android 16 devices, screen orientation is now controlled by the device's orientation settings rather than the MHS settings you specify.3. Microsoft Intune support for Apple AI screen capture control
Intune app protection policies now feature a dedicated setting to manage Apple AI screen capture. This functionality is supported by apps updated to version 19.7.12 or later for Xcode 15, and version 20.4.0 or later for Xcode 16 of the Intune App SDK and App Wrapping Tool. Currently, screen capture is disabled when the "Send Org data to other apps" app protection policy is set to any value other than "All apps."4. New Block Bluetooth setting in the Android Enterprise settings catalog
Starting in the Intune 2406 update, there's a new Block Bluetooth setting (Devices > Manage devices > Configuration > Create > New policy > Android Enterprise for platform > Settings catalog for profile type). When set to True, Bluetooth is disabled on the device. In addition, there is also a Block Bluetooth Configuration setting that prevents end users from changing the Bluetooth setting on the device.5. New reporting system for improved performance and data consistency
Microsoft Intune is rolling out the new Policy Reporting Service (PRS) V3. The new system brings faster report generation, improved reliability, and better data consistency. Users will notice quicker updates in the Intune admin center and fewer issues with stale data. No action is required from users, as your reports transition automatically.6. New attributes and S/MIME baseline requirements for SCEP certificate profiles
Intune supports two new attributes G={{GivenName}} and SN={{SurName}} for subject name settings in SCEP and PKCS device configuration profiles. Beginning July 16th, you are required to use these attributes in the subject name format if you're using a third-party public certificate authority (CA) integrated with the Intune SCEP API. This is for issuing SMIME (encryption or signing) certificates anchored up to a public root CA. After that date, a public CA will not issue or sign S\MIME certificates that omit these attributes.7. New status column in Windows hardware attestation report
Starting in the Intune 2406 release, Microsoft has added a new column, Attest Status, to the Windows hardware attestation report, improving visibility into attestation errors. This column shows error messages received during the attestation process, helping you identify issues from both the service and client sides. Error types shown in this column include:- WinINet errors
- HTTP bad request errors
- Other attestation-related failures
8. ARM64 support for Win32 apps
When adding a Win32 app to Intune, you can select an option to check and install the app on Windows devices running ARM64 operating systems. This capability is available from the Microsoft Intune admin center by selecting Apps > All apps > Create. The ARM64 option is available by selecting the operating system architecture option under the Requirements step.8. Vulnerability Remediation Agent for Intune (public preview)
The Vulnerability Remediation Agent is currently in a limited public preview and available to only a select group of customers. If you’re interested in gaining access or would like to learn more, please reach out to your sales team for further details and next steps.9. Idle Reboot Allowed in Apple settings catalog
A new setting, Idle Reboot Allowed has been added to the apple settings catalog. To view this setting, go to Devices > Manage devices > Configuration > Create > New policy > iOS/iPadOS or macOS for platform > Settings catalog for profile type. In addition, the Microsoft Edge category has been updated with hundreds of new settings.Check out the previous updates released for Intune
