Microsoft Intune October 2026 Update Brings New Security and Network Controls

Microsoft has outlined the new features arriving in its October 2026 Intune update, including additional security controls, network management options, and improvements for Apple devices.

The update builds on the changes Microsoft introduced in September and gives IT administrators more flexibility when managing devices, security policies, and Windows updates.

Microsoft Intune adds new security baselines and compliance tools

Microsoft has introduced a new security baseline for Windows 365 for Agents Cloud PCs. Administrators can use it to apply Microsoft’s recommended Windows security configurations while customizing policies for specific agentic workloads.

The update also makes Security Technical Implementation Guides (STIGs) available to commercial Intune customers.

These guides help organizations audit Windows device configurations against security recommendations from the Defense Information Systems Agency (DISA), making it easier to identify potential compliance gaps.

Employees can now change approved network settings without IT assistance

Microsoft is expanding Endpoint Privilege Management (EPM) to let employees modify certain network settings directly through Company Portal.

Users can change company-approved IPv4 and IPv6 configurations, including IP addresses and DNS server settings, without contacting an administrator or helpdesk.

IT teams retain control over which changes employees can make. Administrators can also require users to provide a justification before applying certain network modifications.

Windows Autopatch gets more update management controls

Microsoft has expanded Windows Autopatch management capabilities, bringing controls previously available for driver updates to Windows quality updates.

The change gives IT administrators greater flexibility when managing and deploying Windows updates across company devices.

Microsoft improves Intune management for Apple devices

The October update also introduces several changes for organizations managing Macs, iPhones, and iPads.

• Automated Device Enrollment: Administrators can skip the Device Features tour during setup on supported iOS 27 and iPadOS 27 devices.
• macOS check-ins: The Intune management client checks for configurations immediately after the first sign-in, continues checking frequently for several hours, and then returns to hourly checks.
• Settings Catalog: Microsoft has added configuration options for application settings, Apple Intelligence, network and web filtering, and the macOS login window.
• Company Portal: Users can download declarative Volume Purchase Program (VPP) apps through the Apps tab on iOS and iPadOS.
• Device inventory: Microsoft plans to add Apple OS 27 declarative device management (DDM) status information to device inventory.

These changes aim to simplify Apple device deployment, improve configuration management, and give administrators more visibility into managed devices.

Microsoft has also recently introduced a new Google Workspace authentication policy for managed Android phones, expanding Intune’s capabilities beyond Windows and Apple devices.

Meanwhile, Microsoft has published a separate overview of the new Copilot features introduced in October 2026, highlighting updates across its AI services.