Recast’s Endpoint Management Recap, Vol. 76

Introduction

Hello, everyone! I am Prajwal Desai, a Microsoft Intune & Windows 365 MVP dedicated to sharing my expertise through blogs, forums, and video tutorials. 

We’re nearly halfway through 2026, and there have already been many exciting announcements. As I always say, it’s an honor to present the latest edition of the Recast Endpoint Management Recap. Don’t forget to subscribe to this newsletter on the left-hand side of this page. 

Prajwal’s take on Microsoft news

May has been an eventful month, marked by numerous developments and significant announcements from Microsoft in areas such as Intune, Configuration Manager, and Windows 365. In case you haven’t yet had time to catch up on all the news, here’s a recap of the important updates. 

1. Configuration Manager version 2603 has been released for early adopters. It’s a significant update and patches several issues reported in the previous versions. 

2. App inventory in Microsoft Intune has been enhanced to update Windows apps on a more frequent schedule. It only uploads changes since the last sync, which can help limit additional network usage. 

3. For eligible devices managed through Windows Autopatch, Hotpatch is enabled by default beginning with the May 2026 security update. 

4. A new Windows 365 monitoring and reporting platform, now in public preview, consolidates Cloud PC health, performance, and configuration data into integrated dashboards in Intune. 

5. Starting in mid-April 2026, customers running Windows Server 2022 and Windows Server 2019 will have the ability to opt in to the Windows Server 2025 feature update from the Settings Dialog. 
6. Azure Virtual Desktop Hybrid is now in public preview, which means customers can run Azure Virtual Desktop session hosts on-premises using their existing hardware and preferred hypervisor connected through Microsoft Azure Arc. 

Microsoft product announcements & updates

Here are the latest releases and change announcements across the Microsoft family of products. 

Microsoft Intune & Autopatch  

• Intune Service Release for April 2026 [Read Announcement] 

• Android Enterprise management support for Android XR [Read Article] 

• Reassess your Windows update policies via Autopatch report [Read Article] 

• Migrating frontline mobile devices [Read Article] 

• Intune Help and Support [Reddit][Feedback] [Discussions] 

Windows 365 & Flex 

• What’s new in Windows 365 Enterprise [Read Announcement] 

• Windows 365 + Intune Advanced Endpoint Management Capabilities [Read Article] 

• New Windows 365 monitoring and reporting platform [Read Article] 

• User-initiated provisioning for Windows 365 Reserve [Read Article] 

• Windows 365 News and Insights [Read Blog] 

• Windows 365 Help and Support [Reddit] [Community Hub] 

Microsoft Entra  

• Microsoft Entra latest releases & announcements [Read Announcement] 

• Troubleshoot prompt injection protection [Read Documentation] 

• Explicit Forward Proxy (preview) overview [Read Announcement] 

• Microsoft Entra ID Governance licensing for guest users [Read Documentation] 

• Entra Help and Support [Reddit] 

Configuration Manager  

• What’s new in Configuration Manager Current branch versions [Documentation] 

• Technical preview for Configuration Manager [Documentation] 

• Summary of changes in Configuration Manager current branch, version 2603 [Read Documentation] 

• KB36949461 Hotfix Rollup for Configuration Manager 2509 [Read Documentation] 

• Configuration Manager Help and Support [Reddit][Feedback][Discussions] 

Microsoft 365 

• Microsoft 365 Latest Product Updates and Insights [Documentation] 

• Microsoft 365 Copilot release notes [Documentation] 

• Agent governance, intelligent workflows, and connected app experiences [Read Blog] 

• Microsoft 365 Copilot, human agency, and the opportunity for every organization [Read Blog] 

Microsoft Defender for Endpoint and Security  

• Microsoft Defender for Endpoint Updates and Insights [Documentation] 

• Microsoft Security Response Center (MSRC) [Security Updates] 

• Hardening administrative actions [Read Documentation] 

• Assess Secure Boot status with Microsoft Defender [Read Documentation] 

Microsoft Windows Client and Server 

• Windows 11 updates and release information [Documentation] 

• Windows 10 updates and release information [Documentation] 

• Windows 11 Insider Blog, Updates, Announcements. [Read Blog] 

• Dynamically remove apps from managed Windows 11 devices [Read Article] 

• Configuring firewall and proxies for smooth Windows updates [Read Article] 

• Opt-In Windows Server 2025 Feature Update [Read Article] 

• Windows Server updates and release information [Documentation][Discussions] 

• Windows 11 Help and Support [Reddit][Discussions] 

Video: The Intune App Problem, Solved 

Jonathan Edwards (Bearded365Guy) recently took a look at Application Workspace and how it simplifies application management across Intune, ConfigMgr, macOS, AVD, Citrix, and more. Check it out below. 

Video: Right Click Tools Release Show - April 2026  

Watch the April Right Click Tools Release Show webinar on demand if you missed the rundown of what was included in this release and what we’re working on next for the systems management community.  

From the Community – blog series & video blogs‍

Blog posts

• [Entra] Entra ID Custom CSS styling (@Justin) 

• [Entra] App Instance Lock enabled by default for new applications (@Daniel Bradley) 

• [Entra] Recover Entra Joined Device Sign-in (@Sreejith Reghunathan) 

• [Intune] Autopilot Device Preparation Policy (v2): A Practical Deep Dive (@Paraskevas Petsanas) 

• [Intune] Automatically populate a devices group based on a registry key on your Intune devices (@Damien Van Robaeys) 

• [Intune] Migrating Microsoft 365 Apps (Office Click-to-Run) Management from SCCM to Intune (@Eswar Koneti) 

• [Intune] Multi Admin Approval in Intune: Great Feature, But Know the Gaps (@Jannik Reinhard) 

• [Intune] Deploying PowerShell Scripts with Microsoft Intune (@Harm Veenstra) 

• [Intune] What the 2026 Secure Boot Certificate Expiry Means for Endpoint Admins (@Daniel Engberg) 

• [Intune] Securing the DaaS environment (@Dominiek Verham) 

• [Intune] Protect Intune against Attacks (@NiklasTinner) 

• [Intune] Fix Lenovo Intelligent Sensing Service Locking Screens with Intune (@Florian Salzmann) 

• [Intune] Creating Desktop Shortcuts using Intune (@prajwaldesai) 

• [Intune] Apple’s Stricter TLS Requirements Are Coming (@SomeshPathak) 

• [Intune] Set Up and View App Inventory Data in Intune (@Jorge Suarez) 

• [Intune] Enable Defender updates during OOBE (@Jan Mulder) 

• [ConfigMgr] Configuration Manager 2603 Upgrade Guide (@prajwaldesai) 

• [AVD] Azure Virtual Desktop Hybrid Explained [@DieterKempeneers] 

• [Windows 365] Using a Windows 365 Cloud PC via a USB-C connected iPhone (@NiallBrady) 

• [Microsoft 365] Microsoft Agent 365 vs. Microsoft 365 Agents (@jannikreinhard) 

Videos 

• [Intune] Update devices from Windows 11 24H2 to 25H2 using Intune Proactive Remediation scripts (@Chander Mani Pandey) 

• [Intune] How to Remove Copilot Apps from Windows 11 (@getrubix) 

• [MS Security] Build secure verification with Microsoft Entra Verified ID 

• [MS Security] Microsoft Defender | New deployment tool in Defender 

Upcoming events  

To find events near you, check out Recast’s Events and Tradeshow page for details.

Thank you

Thank you for reading Recast’s Endpoint Management Recap – Vol. 76. Stay tuned for more helpful content in our next edition.

Follow Recast on X, LinkedIn, Discord (#recast-software), Bluesky, and YouTube for the latest news and updates.