The September 2025 Microsoft Intune Service Release (2509) introduces several impactful updates, including PowerShell script support for Win32 apps, new settings for Android Enterprise, Intel vPro Fleet Services integration in Intune, new copilot features in Intune and much more.
The updates should be automatically rolled out to all the tenants across major regions such as APAC, NASA, and EMEA. For more information on previously released updates, read the article on Intune monthly updates.
The following are the new features and enhancements included in Intune service release 2509 released in September 2025:
1. Block Private Space: When set to True, users are prevented from creating or using private spaces on the device. All existing private spaces will be deleted.
2. USB Access: Allows admins to select what files and/or data can be transferred via USB. If admins block file transfer, only files are blocked from being transferred. Other connections are allowed, like a mouse. If admins block USB data transfer, all data is blocked.
The new feature's key capabilities include:
The updates should be automatically rolled out to all the tenants across major regions such as APAC, NASA, and EMEA. For more information on previously released updates, read the article on Intune monthly updates.
For more details, refer to Microsoft documentation on New Features in Intune September 2025 Update.
The following are the new features and enhancements included in Intune service release 2509 released in September 2025:
1. PowerShell script support when installing Win32 apps
Windows devices managed through Intune now support uploading PowerShell scripts to install Enterprise App Catalog apps, offering a flexible alternative to command-line deployment.2. End of support for older versions of the Android Intune Company Portal app
Support for Android Intune Company Portal versions earlier than 5.0.5421.0 ended on October 1, 2025. Devices running an older version of the app might no longer maintain their registration status and can be marked noncompliant. To keep devices registered and compliant, users must download the latest version of the Company Portal from the Google Play Store.3. Filter device configuration profiles by the policy type
In the Intune admin center, navigate to Devices > Configuration > Policies. Use the "Add filters" feature to refine your policy list based on platform, scope tags, or last modified date. Additionally, you can filter policies by type, such as settings catalog, custom, device restrictions, and other available policy types.4. Settings available in both Templates and Settings Catalog for Android Enterprise
Some settings that were only available in Templates are now also supported in the settings catalog. The following settings are in the settings catalog:| Feature Category | New Settings |
| Applications |
|
| General |
|
| System Security |
|
| Users and accounts |
|
5. Device category management supports Multi Admin Approval
Intune device categories now support Multi Admin Approval, enhancing security and control. When enabled, any changes to device categories—such as creating, editing, or deleting—must be approved by a second administrator before implementation. This dual-authorization process safeguards your organization against unauthorized or accidental role-based access control modifications.6. New Private Space and USB access settings in the Android Enterprise settings catalog
Two new settings Block Private Space and USB Access have been introduced in September 2025 update of Intune for Android devices.1. Block Private Space: When set to True, users are prevented from creating or using private spaces on the device. All existing private spaces will be deleted.
2. USB Access: Allows admins to select what files and/or data can be transferred via USB. If admins block file transfer, only files are blocked from being transferred. Other connections are allowed, like a mouse. If admins block USB data transfer, all data is blocked.
7. Intel vPro Fleet Services integration in Intune partner portal
Microsoft Intune now seamlessly integrates with Intel vPro Fleet Services, delivering hardware-level remote management directly within the Intune platform. This advanced solution empowers IT administrators to securely manage, recover, and troubleshoot Intel vPro devices, even when the operating system is unresponsive or the device is powered down.The new feature's key capabilities include:
- Hardware-level BIOS and OS recovery through Intel Active Management Technology (AMT)
- Centralized workflows within Intune
- Enhanced security and access control
- Broad compatibility with Intel vPro devices (2018 or later)
8. Device Inventory (formerly Resource explorer)
The Resource explorer pane under Monitor for Windows devices is now called Device Inventory. Only the name has changed—the experience and data remain the same.9. New features in Copilot for Microsoft Intune
Starting in Intune 2509 release, three new features have been updated in Copilot for Intune and they include;- Easier access to Copilot Chat - Copilot Chat is embedded directly into the Intune admin center header.
- Context-aware conversations with Copilot Chat - As you type, a dynamic prompt box provides real-time suggestions and recommends prompts relevant to what you're trying to ask.
- Expanded support for Windows 365 Cloud PC - With this general availability update, Copilot now supports Windows 365 Cloud PC management. IT admins can access important info, like licensing status, connection quality, configuration details, and performance metrics. This feature makes it easier for admins to monitor and manage Cloud PCs directly from the Intune admin center.
