The new features in Intune June 2025 release include Enterprise App Catalog apps in Windows Autopilot, Apple AI screen capture control, ARM64 support for Win32 apps, Policy Reporting Service (PRS) V3, and much more.
Throughout June 2025, the Intune 2506 service updates are being deployed globally, as well as in APAC, EMEA, and NASA. Administrators should check the Tenant Status blade to confirm when their environment has been updated.
Check out Microsoft’s official blog post on What’s New in Microsoft Intune June 2025.
New Features in Microsoft Intune June 2025 Release
The June 2025 service release of Microsoft Intune offers the following new features and enhancements for customers.
1. Deploy Enterprise App Catalog during Windows Autopilot
You can now deploy Enterprise App Catalog apps while provisioning Windows devices with Autopilot. Through Windows Autopilot, administrators can designate apps from the catalog as blocking apps within the Enrollment Status Page (ESP) and Device Preparation Page (DPP) profiles.
2. Managed Home Screen orientation changes with Android 16
Starting with Android 16, devices with display settings of 600dp or larger no longer enforce screen orientation based on app configurations. This update affects the Managed Home Screen (MHS) on larger devices, such as tablets. On these Android 16 devices, screen orientation is now controlled by the device’s orientation settings rather than the MHS settings you specify.
3. Support for Apple AI screen capture control
Intune app protection policies now feature a dedicated setting to manage Apple AI screen capture. This functionality is supported by apps updated to version 19.7.12 or later for Xcode 15, and version 20.4.0 or later for Xcode 16 of the Intune App SDK and App Wrapping Tool.
4. Feature to block Bluetooth Android Enterprise settings catalog
Starting in the Intune 2506 release, there’s a new Block Bluetooth setting. This setting can be accessed by going to Devices > Manage devices > Configuration > Create > New policy > Android Enterprise for platform > Settings catalog for profile type. When set to True, Bluetooth is disabled on the device. In addition, there is also a Block Bluetooth Configuration setting that prevents end users from changing the Bluetooth setting on the device.
5. New reporting system for improved performance and data consistency
Microsoft Intune is rolling out the new Policy Reporting Service (PRS) V3. The new system brings faster report generation, improved reliability, and better data consistency. Users will notice quicker updates in the Intune admin center and fewer issues with stale data. No action is required from users, as your reports transition automatically.
6. New attributes and S/MIME baseline requirements for SCEP certificate profiles
Intune supports two new attributes G={{GivenName}} and SN={{SurName}} for subject name settings in SCEP and PKCS device configuration profiles. Beginning July 16th, you are required to use these attributes in the subject name format if you’re using a third-party public certificate authority (CA) integrated with the Intune SCEP API. This is for issuing SMIME (encryption or signing) certificates anchored up to a public root CA. After that date, a public CA will not issue or sign S\MIME certificates that omit these attributes.
7. New status column in Windows hardware attestation report
Starting in the Intune 2506 release, Microsoft has added a new column, Attest Status, to the Windows hardware attestation report, improving visibility into attestation errors. This column shows error messages received during the attestation process, helping you identify issues from both the service and client sides. Error types shown in this column include:
- WinINet errors
- HTTP bad request errors
- Other attestation-related failures
8. Deploy Win32 apps for ARM64 devices
When adding a Win32 app to Intune, you can select an option to check and install the app on Windows devices running ARM64 operating systems. This capability is available from the Microsoft Intune admin center by selecting Apps > All apps > Create. The ARM64 option is available by selecting the operating system architecture option under the Requirements step.
9. Vulnerability Remediation Agent for Intune (public preview)
The Vulnerability Remediation Agent is currently in a limited public preview and available to only a select group of customers. If you’re interested in gaining access or would like to learn more, please reach out to your sales team for further details and next steps.
10. Idle Reboot Allowed in Apple Settings Catalog
With Intune 2506 update a new setting, Idle Reboot Allowed has been added to the Apple settings catalog. To view this setting, go to Devices > Manage devices > Configuration > Create > New policy > iOS/iPadOS or macOS platform > Settings catalog for profile type. In addition, the Microsoft Edge category has been updated with hundreds of new settings.
