In development for Microsoft Intune - October 2019

To help in your readiness and planning, this page lists Intune UI updates and features that are in development but not yet released. In addition to the information on this page:

  • If we anticipate that you'll need to take action before a change, we'll publish a complementary post in Office message center.
  • When a feature enters production, whether it's a preview or generally available, the feature description will move from this page to What's new.
  • This page and the What's new page are updated periodically. Check back for additional updates.
  • Refer to the Microsoft 365 roadmap for strategic deliverables and timelines.


This page reflects our current expectations about Intune capabilities in a future release. Dates and individual features might change. This page doesn't describe all features in development.

RSS feed: Find out when this page is updated by copying and pasting the following URL into your feed reader:

App management

Apply dark mode in iOS Company Portal

Dark mode is planned for iOS Company Portal. You'll be able to download company apps, manage your devices, and get IT support in the color scheme of your choice. For more information about iOS Company Portal, see How to configure the Microsoft Intune Company Portal app.

Run Win32 apps on Windows 10 S-mode devices

You'll be able to install and run Win32 apps on devices that are managed in Windows 10 S mode. Create one or more supplemental policies for S mode by using the Windows Defender Application Control (WDAC) PowerShell tools. Use the Device Guard signing portal to sign the supplemental policies. Then upload and distribute the policies through Intune.

In Intune, you'll find this capability by selecting Client apps > Windows 10 S supplemental policies.

Set app availability based on a date and time

As an admin, you'll be able to configure the start time and deadline for a required app. At the start time, the Intune management extension will download the app content and cache it. The app will be installed at the deadline time. For available apps, the start time will dictate when the app is visible in Company Portal.

To set app availability based on date and time:

  1. In Intune, select Client apps > Apps.
  2. Select an app from the list or add a new one by selecting Add.
  3. From the app blade, select Assignments > Add group.
  4. Set the Assignment type to Required and then select Included Groups.
  5. Set Make this app required for all users to Yes.
  6. Select Edit to modify the End user experience options.
  7. On the End user experience blade, set the Software available time as needed.

For more information, see Add apps to Microsoft Intune.

Require Win32 apps to restart

You'll be able to require a Win32 app to restart after a successful installation. You can choose the amount of time (the grace period) before the restart.

Display notifications for the Company Portal app on Windows

We'll update the Company Portal app on Windows devices to display toast notifications to users, even when the application is closed. The update will show notifications for available apps only when the installation status is completed or failed. The Company Portal app won't show notifications for required applications.

Display installation status messages for the Company Portal app

The Company Portal app will show additional app installation status messages to end users. The following conditions will apply to new Win32 dependency features:

  • App failed to install. Dependencies defined by the admin were not met.
  • App installed successfully but requires a restart.
  • App is in the process of installing but requires a restart to continue.

Assign the Microsoft Edge beta for macOS

You'll be able to add and assign the latest version of the Microsoft Edge beta to Intune for macOS devices.

To assign the Microsoft Edge beta for macOS devices:

  1. In Intune, select Client apps > Apps > Add app > Microsoft Edge - macOS.
  2. Assign the Microsoft Edge beta to the intended groups. Microsoft AutoUpdate (MAU) keeps Microsoft Edge up to date.

For more information about Microsoft Edge, see Manage web access by using Microsoft Edge with Microsoft Intune.

Configure app notification content for organization accounts

Intune APP on Android and iOS devices will allow you to control app notification content for organization accounts. This feature will require support from applications and might not be available for all APP-enabled applications. For more information about APP, see What are app protection policies?

Device configuration

New device firmware configuration interface profile for devices that run Windows 10 and later

On Windows 10 and later, you can create a device configuration profile to control settings and features:

  1. Select Device configuration > Profiles > Create profile.
  2. For the platform, select Windows 10 and later.

A new device firmware configuration interface profile type will allow Intune to manage UEFI (BIOS) settings.

For information about the current settings you can configure, see Apply features and settings on your devices by using device profiles in Microsoft Intune.

This feature applies to Windows 10 RS5 (1809) and later, on select devices.

Device enrollment

For iOS devices, customize the enrollment privacy window of Company Portal

By using Markdown, you'll be able to customize the Company Portal privacy window that end users see during iOS enrollment. Specifically, you can customize the list of things that your organization can't see or do on the device.

Device management

Edit the Group Tag value for Autopilot devices

You'll be able to edit the Group Tag value for Autopilot devices:

  1. Select Intune > Device enrollment > Windows enrollment > Windows Autopilot > Devices.
  2. Choose the device.
  3. In the pane on the right, change the Group Tag value.
  4. Select Save.

Target macOS user groups to require Jamf management

You'll be able to target specific groups of users to require their macOS devices to be managed by Jamf. This targeting will enable you to apply the Jamf compliance integration to a subset of macOS devices while other devices continue to be managed by Intune. Targeting will also let you gradually migrate users' devices from one mobile device management (MDM) system to the other.

Deploy software updates to macOS devices

You'll be able to deploy software updates to groups of macOS devices. This feature includes critical, firmware, configuration file, and other updates. You can send updates on the next device check-in. Or you can select a weekly schedule to deploy updates in or out of periods that you set.

This feature helps when you want to update devices outside standard work hours or outside hours when your help desk is fully staffed. You'll also get a detailed report of all macOS devices that have updates deployed. You can drill into the report by device to see the status of a particular update.

Monitoring and troubleshooting

Android report on the Devices overview page

We'll add a new report to the Devices overview page. The report displays how many Android devices have been enrolled in each device management solution. The chart shows device counts for work profile, fully managed, dedicated, and device-administrator enrolled.

To see the report, choose Intune > Devices > Overview.

Updated support experience

As part of continuing improvements, we'll update the in-console support experience for Intune. We'll improve the in-console search and feedback for common issues, and we'll streamline the workflow to contact support.


These notices provide important information that can help you prepare for future Intune changes and features.

End of support for legacy PC management

Legacy PC management is going out of support on October 15, 2020. Upgrade devices to Windows 10 and reenroll them as MDM devices to keep them managed by Intune.

Learn more

Decreasing support for Android device administrator

Android device administrator (sometimes referred to "legacy" Android management and released with Android 2.2) is a way to manage Android devices. However, improved management functionality is now available with Android Enterprise (released with Android 5.0). In an effort to move to modern, richer, and more secure device management, Google is decreasing device administrator support in new Android releases.

How does this affect me?

Because of these changes by Google, Intune users will be impacted in the following ways:

  • Intune will only be able to provide support for device administrator-managed Android devices running Android 10 and later (also known as Android Q) through the summer of 2020. This date is when the next major version of Android is expected to be released.
  • Device administrator-managed devices that are running Android 10 or later after the summer of 2020 will no longer be able to be entirely managed.      
  • Device administrator-managed Android devices that remain on Android versions below Android 10 will not be impacted and can continue to be entirely managed with device administrator.
  • For all devices running Android 10 and later, Google has restricted the ability for device administrator management agents like Company Portal to access device identifier information. This impacts the following Intune features after a device updates to Android 10 or later:
    • Network access control for VPN will no longer work.
    • Identifying devices as corporate-owned with an IMEI or serial number will not automatically mark devices as corporate-owned.
    • The IMEI and serial number will no longer be visible to IT admins in Intune.


      This only impacts device administrator-managed devices on Android 10 and later and does not affect devices being managed as Android Enterprise.

What do I need to do to prepare for this change?

To avoid the reduction in functionality coming in the summer of 2020, we recommend the following:

  • Don't onboard new devices into device administrator management.
  • If a device is expected to receive an update to Android 10, migrate it off of device administrator management to Android Enterprise management and/or app protection policies.

Additional information

Update your Android Company Portal app to the latest version

Intune periodically releases updates to the Android Company Portal app. In November 2018 we released a company portal update, which included a back-end switch to prepare for Google's change from their existing notification platform to Google's Firebase Cloud Messaging (FCM). When Google retires their existing notification platform and moves to FCM, end users will need to have updated their Company Portal app to at least the November 2018 release to continue communicating with the Google Play store.

How does this affect me?

Our telemetry indicates you have devices with a Company Portal version earlier than 5.0.4269.0. If this version or later of the Company Portal app is not installed, IT-pro-initiated device actions like wipe, reset password, available and required app installs, and certificate enrollment may not work as expected. If your devices are MDM-enrolled in Intune, then you can see the Company Portal versions and users by going to Client apps – Discovered apps. Selecting earlier versions of the Company Portal app will allow you to see which end users have the devices that haven't updated the Company Portal app.

What do I need to do to prepare for this change?

Ask end users of Android devices that have not updated to update the Company Portal app through Google Play. Notify your help desk in case a user has not kept auto-updating the Company Portal app. See the link in Additional information for more on Google's FCM platform and change.

Additional information

New full-screen experience coming to Intune

We're rolling out updated create and edit UI experiences to Intune in the Azure portal. This new experience will simplify the existing workflows by using a wizard-style format condensed within one blade. This update will do away with "blade sprawl" or any create and edit flows that require you to drill down into deep blade journeys. The create workflows will also be updated to include assignments (except for app assignment).

How does this affect me?

The full-screen experience will be rolled out to Intune both at and over the next few months. This update to the UI will not impact functionality of your existing policies and profiles, but you will see a slightly modified workflow. When you create new policies, for example, you will be able to set some assignments as part of this flow instead of doing so after creating the policy. See the blog post at Additional information for screenshots of what the new experience will look like in the console.

What can I do to prepare for this change?

You do not need to take any action but can consider updating your IT-pro guidance if necessary. We'll update our documentation as this experience rolls out to various blades in Intune on the Azure portal.

Additional information

Plan for change: Intune App SDK and app protection policies for Android moving to support Android 5.0 and higher in October

Intune will be moving to support Android 5.x (Lollipop) and higher in October. Update any wrapped apps with the latest Intune App SDK and update your devices.

How does this affect me?

If you're not using or plan to use either the SDK or APP for Android, this change won't affect you. If you are using the Intune App SDK, be sure to update to the latest version and also update your devices to Android 5.x and higher. If you don't update, apps will not receive updates, and the quality of their experience will diminish over time.

Below find a list of common devices enrolled in Intune that run Android version 4.x. If you have one of these devices, take the appropriate steps to make sure that this device will support Android version 5.0 or higher or that it will be replaced with a device that supports Android version 5.0 or higher. This list is not exhaustive of all devices that may need to be evaluated:

  • Samsung SM-T561
  • Samsung SM-T365
  • Samsung GT-I9195
  • Samsung SM-G800F
  • Samsung SM-G357FZ
  • Motorola XT1080
  • Samsung GT-I9305
  • Samsung SM-T231

What do I need to do to prepare for this change?

Wrap your apps with the latest Intune App SDK. You may also set the "Require minimum OS version (Warning only)" conditional launch setting to notify end users on personal devices to upgrade.

Intune plan for change: Nearing end of support for Windows 7

As we messaged in MC148476, posted last September 2018, and again in MC176794 back in March 2019, Windows 7 reaches its end of extended support on January 14, 2020. At that time, Intune will retire support for devices running Windows 7 so we can focus our investment on supporting newer technologies and providing great new end-user experiences. After that date, technical assistance and automatic updates that help protect your Windows 7 PC will no longer be available through Intune. Microsoft strongly recommends that you move to Windows 10 before January 2020 to avoid a scenario where you need service or support that is no longer available. Read more about the Windows support lifecycle here.

How does this affect me?

You are receiving this message because you are currently managing Windows 7 PCs using the legacy Intune PC software agent. Because less than a year remains before the end of Windows 7 extended support, we strongly encourage your organization to begin upgrading to Windows 10 as soon as possible.

PC management capabilities are built directly into the Windows 10 operating system, and you no longer need to install a client agent such as the Intune software client for Windows 7. Starting with Windows 8.1, Microsoft uses the Mobile Device Management (MDM) architecture to provision, configure, update, and manage Windows PCs. When you have set up Intune, you can simplify Windows enrollment by enrolling Windows 10 PCs into Intune through the MDM channel. We recommend that you use this "agentless" MDM management solution to manage your Windows 10 PCs.

What do I need to do to prepare for this change?

We encourage your organization to immediately consider this action plan:

  • Plan and upgrade the Windows 7 fleet to Windows 10 before January 14, 2020.
  • Explore Windows 10 deployment support to learn more about how to upgrade your existing fleet of Windows 7 PCs to Windows 10.
  • Review the Desktop App Assure offer through FastTrack, which will assist with the Microsoft application compatibility promise.
  • Transition existing legacy Intune software client managed devices to the Microsoft-recommended solution to manage Windows 10 using MDM management. Enroll all new Windows 10 PCs using MDM management for Intune in the Azure portal.

See the blog post here for more information.

See also

For details about recent developments, see What's new in Microsoft Intune.