What’s New in Microsoft Intune – March 2025

Microsoft has published a recap of all the new capabilities added to its Microsoft Intune during the month of March 2025. From seamless Apple device management to enhanced Windows 365 Frontline and Samsung Knox security, IT admins now have new tools to simplify and secure enterprise device management.

Apple’s Declarative Device Management (DDM) has introduced new controls for managing iOS, iPadOS, and macOS devices, and Microsoft Intune is keeping up with these new capabilities. Previously, IT admins had to manually update policies to specify new OS versions and enforce time delays for updates.

The latest Microsoft Intune update lets administrators create policies that automatically keep Apple devices on the latest OS version. It’s possible to use groups and time delays to release updates first to a small set of devices ahead of the broader deployment.

Enhanced configuration of Windows 365 Frontline shared Cloud PCs (preview)

Shared device mode in Windows 365 Frontline allows multiple users to access a single cloud PC with a non-personalized desktop experience. Previously, there was no guarantee that device configuration would be delivered before users signed in.

“Releasing in early April, we have a public preview of Windows Autopilot device preparation provisioning specifically for Windows 365 Frontline Cloud PCs in shared mode. This capability takes advantage of “automatic mode” in Intune for device preparation policies so that required apps and scripts are delivered to the shared instance before users sign in,” Microsoft explained.

To use this feature, IT admins need to create a Device Group and assign the necessary apps and scripts to it. Next, they will create a device preparation profile in automatic mode using Microsoft Intune. Finally, administrators need to develop a Windows 365 Frontline Cloud PC provisioning policy with shared mode and assign the device preparation profile

Microsoft will also release a public preview of Windows Autopilot device preparation provisioning for Windows 365 Frontline Cloud PCs in shared mode. This feature leverages Microsoft Intune’s automatic mode for device preparation policies to ensure that required apps and scripts are delivered to the shared instance before users sign in.

Microsoft Intune Remote Help updates and Samsung Knox Mobile Enrollment

Microsoft has announced that Remote Help is now available for Azure Virtual Desktop VMs configured for multisession use. These multisession VMs now have access to the more secure support Remote Help experience. This feature simplifies reporting and monitoring, which is beneficial for security teams.

Last but not least, Microsoft has announced a new partnership with Samsung to bring new features and security capabilities to Samsung Knox devices. Administrators can use the Knox Mobile Enrollment tool to enroll multiple Android Enterprise devices (such as dedicated devices, fully managed devices, and corporate-owned devices with a work profile) simultaneously.

Administrators can control which applications can be used on these devices. Samsung Galaxy devices can benefit from enhanced security through hardware-backed attestation.