2406 Microsoft Intune New Features June Update

Let’s discuss 2406 Microsoft Intune New Features June Update. Microsoft Intune 2406 brings various improvements and new features to empower device management and security. It allows end users and IT admins to ensure their organisation’s security.

Microsoft is dedicated to introducing various enhancements and improvements in Intune. Users can explore innovative features on Intune every week with a weekly Update. Microsoft initiated this to encourage device management most easily.

Every month, Microsoft releases Intune’s new features and Enhancements as a monthly Service Release. At the initial stage, users may not get the latest features. Updating all the features will take days or weeks because the rollout is incomplete.

Here, we can review 2406 Microsoft Intune New Features June Update. Usually, Microsoft releases new features in 3 or more releases via Intune Service Release. In this blog post, I will help you quickly access new features and enhancements of Microsoft Service Release features.

Patch My PC
2406 Microsoft Intune New Features June Update - Fig.1
2406 Microsoft Intune New Features June Update – Fig.1
Index
2406 Microsoft Intune New Features June Update
Endpoint Privilege Management Support for MSI and PowerShell File Types
View the Certification Authority Key type in Microsoft Cloud PKI Properties
US GCC and GCC High Support for Managed Home Screen
Updated Managed App Report
Apple Settings Satalog Updated with New Settings
OS Version Picker Available for Configuring Managed iOS/iPadOS DDM Software Updates using the Settings Catalog
Intune Admin Center UI Updates at Devices By Platform
RBAC Changes to Enrollment Platform Restrictions for Windows
Updates to Replace Wandera with Jamf is Complete in the Intune Admin Center
View BitLocker Recovery Key in Company Portal Apps for iOS and macOS
New Granular RBAC Controls for Intune Endpoint Security
2406 Microsoft Intune New Features June Update – Table.1

2406 Microsoft Intune New Features June Update

The new feature provides many capabilities for users. These new features of the Intune Service release can enhance users’ experiences, and administrators can manage their organizations with these features.

Microsoft Intune Service Release 2406 has easier device management and provides many app management features, Security solutions, etc.

Endpoint Privilege Management Support for MSI and PowerShell File Types

Endpoint Privilege Management S (EPM) elevation rules now support the elevation of Windows Installer and PowerShell files. EPM previously supported executable files. EPM supports file extensions such as .msi and .ps1 with this new update.

2406 Microsoft Intune New Features June Update - Fig.2
2406 Microsoft Intune New Features June Update – Fig.2

View the Certification Authority Key type in Microsoft Cloud PKI Properties

Microsoft introduced a new property called CA on Microsoft Cloud PKI. This feature will be available in the admin center. It shows the type of certification authority keys used for signing and encryption.

ValueDetails
HSMIt indicates the use of a hardware security module-backed key
SWUse of a software-backed key is indicated
2406 Microsoft Intune New Features June Update – Table.2

Certification authorities created with a licensed Intune Suite or Cloud PKI standalone add-on use HSM signing and encryption keys. Certification authorities created during a trial period use software-backed signing and encryption keys.

2406 Microsoft Intune New Features June Update - Fig.3
2406 Microsoft Intune New Features June Update – Fig.3

US GCC and GCC High Support for Managed Home Screen

With this new update, sign in for the US Government Community (GCC), US Government Community (GCC) High, and U.S. Department of Defense (DoD) environments. For more information by Managed Home Screen (MHS).

Updated Managed App Report

Users will get details about Enterprise App Catalog apps for a specific device in the Managed report. This feature can be accessed from the Microsoft Intune Admin Center. Now, this feature is available as a preview.

Apple Settings Satalog Updated with New Settings

Exciting News! The New Settings Catalog lists all the settings you can configure in a device policy, all in one place. The Settings Catalog for iOS/iPadOS or macOS has been updated with new settings.

To view this setting, navigate to Devices > Configuration > Create > macOS for platform > Settings catalog for profile type in the Microsoft Intune admin center. The Settings Catalog allows you to find device policy settings easily.

iOS/iPadOSmacOS
Restrictions: Allow Web Distribution App InstallationPrivacy > Privacy Preferences Policy Control: Bluetooth Always
System Configuration > Font: Font, NameApplies to: iOS/iPadOS, macOS
2406 Microsoft Intune New Features June Update – Table.3
2406 Microsoft Intune New Features June Update - Fig.4
2406 Microsoft Intune New Features June Update – Fig.4

OS Version Picker Available for Configuring Managed iOS/iPadOS DDM Software Updates using the Settings Catalog

Users can configure Apple’s declarative device management (DDM) feature to manage software updates on iOS/iPadOS devices with the Intune Settings Catalog. With this new update, you can select a target OS version from a list of updates made available by Apple and Manually enter the target OS version, if needed.

Intune Admin Center UI Updates at Devices By Platform

Exciting News! The Intune Admin Center has been updated with a new User Interface. You can select Devices > By platform to view the policy options for your selected platform. These platform-specific pages are updated and include navigation tabs.

2406 Microsoft Intune New Features June Update - Fig.5
2406 Microsoft Intune New Features June Update – Fig.5

RBAC Changes to Enrollment Platform Restrictions for Windows

Role-Based Access Controls (RBAC) for all enrollment platform restrictions are now updated on Microsoft Intune Admin Center. The Global Administrator and Intune Service Administrator roles can create, edit, delete, and reprioritize enrollment platform restrictions. The new changes apply to Android, Apple and Windows 10/11 OSs.

New Changes in RBAC Enrollment Platform Restrictions for Windows
The Behaviour of the scope tag is not changed, and you can use scope tags as usual
The user will still be unable to view enrollment platform restrictions in the admin center
2406 Microsoft Intune New Features June Update – Table.4
2406 Microsoft Intune New Features June Update - Fig.6
2406 Microsoft Intune New Features June Update – Fig.6

Updates to Replace Wandera with Jamf is Complete in the Intune Admin Center

2406 Service Release, completed rebranding in the Microsoft Intune admin centre to support replacing Wandera with Jamf. The new update includes Jamf and changes to the minimum required platforms for the Jamf connector. The supported OSs are Android 11 and, later, iOS/iPadOS 15.6 and later.

View BitLocker Recovery Key in Company Portal Apps for iOS and macOS

This new update allows the end user to view the BitLocker recovery key for an enrolled Windows device and the FileVault recovery key for an enrolled Mac in the Company Portal app. It is also available for iOS and the Company Portal app for macOS.

This new capability can reduce Helpdesk calls if the end-user gets locked out of their corporate machines. This experience is similar to the recovery process on the Company Portal website, which also allows end users to see recovery keys.

New Granular RBAC Controls for Intune Endpoint Security

Microsoft Started replacing the Role-Based Access Control (RBAC) rights to endpoint security policies that are granted by the Security baselines permission with a series of more granular permissions for specific endpoint security tasks.

2406 Microsoft Intune New Features June Update - Fig.7
2406 Microsoft Intune New Features June Update – Fig.7

We are on WhatsApp now. To get the latest step-by-step guides, news, and updates, Join our Channel. Click here. HTMD WhatsApp.

Author

Anoop C Nair is Microsoft MVP! He is a Device Management Admin with more than 20 years of experience (calculation done in 2021) in IT. He is a Blogger, Speaker, and Local User Group HTMD Community leader. His main focus is on Device Management technologies like SCCM 2012, Current Branch, and Intune. He writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc.

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.