The Microsoft Intune August 2025 update (2508) brings bunch of new updates that include new ADMX-backed policies for the Edge browser, managed installer support for user and device groups, a variety of day-zero settings in the Apple settings catalog, compatibility with Ubuntu 22.04 and newer versions, and more.
The Intune service release 2508 updates will be released worldwide, in APAC, EMEA, and NASA throughout August 2025. In order to verify when their environment has been updated, administrators should look at the Tenant Status blade.
Reference: What’s New in Microsoft Intune: August 2025 – Microsoft Intune Blog
What’s New in Microsoft Intune August 2025 Update
Let’s explore the new features and enhancements included in August 2025 update for Microsoft Intune.
1. Intune now supports Ubuntu 22.04 and later as a client.
Microsoft Intune, along with its Linux app, now supports Ubuntu 22.04 LTS and Ubuntu 24.04 LTS, while dropping support for Ubuntu 20.04 LTS. Devices already enrolled with Ubuntu 20.04 LTS will remain enrolled even though the version is no longer supported.
2. Managed installer support for user and device groups
Microsoft has improved the Managed Installer policy, making it possible to target specific user and device groups with multiple individual policies. Previously, the policy applied universally across all Windows devices as a tenant-wide configuration. This update adds flexibility by allowing separate policies to be assigned to different device groups.
3. Android app configuration policies support new variable values
Intune’s Android Enterprise app configuration policies now support more variable values, including account name, device name, employee ID, MEID, serial number, and the last four digits of the serial number.
4. New day zero settings available in the Apple settings catalog
The following new day zero settings have been added to the Apple settings catalog. To view these, go to Devices > Manage devices > Configuration > Create > New policy > iOS/iPadOS or macOS for platform > Settings catalog for profile type.
| iOS/iPadOS | Declarative Device Management (DDM) > Audio Accessory Settings: Temporary Pairing Disabled Temporary Pairing Unpairing Time Unpairing Policy Unpairing Hour Declarative Device Management (DDM) > Safari Settings: Accept Cookies Allow Disabling Fraud Warning Allow History Clearing Allow JavaScript Allow Private Browsing Allow Popups Allow Summary Page Type Homepage URL Extension Identifier Restrictions: Allow Safari History Clearing Allow Safari Private Browsing Denied ICCIDs For iMessage And FaceTime Denied ICCIDs For RCS |
| macOS | Authentication > Extensible Single Sign On Kerberos: Allow Platform SSO Auth Fallback Declarative Device Management (DDM) > Safari Settings: Allow History Clearing Allow Private Browsing Allow Summary Page Type Homepage URL Extension Identifier Restrictions: Allow Safari History Clearing Allow Safari Private Browsing |
5. Wipe remote action supports multiple administrative approval (MAA)
The multiple administrative approval (MAA) feature boosts security by needing a second admin’s sign-off before making changes. This extra verification step works with the Wipe remote action, helping to minimize the risk of unauthorized or compromised actions triggered by just one admin account.
6. Configure Windows Backup for Organizations (public preview)
Starting in the Intune service release 2508, administrators can configure a new feature in public preview called Windows Backup for Organizations. This feature enables you to back up your organization’s Windows 10 or Windows 11 settings and restore them on a Microsoft Entra-joined device.
7. New resolution button improves compliance remediation experience
Microsoft has improved the Just in Time (JIT) compliance remediation experience for device users in Microsoft Intune. Intune has collaborated with Microsoft Defender to:
- Remove user clicks required to view and learn remediation steps.
- Add a Resolve button to reduce time-to-remediation.
8. Declarative software update reports for Apple devices
Apple devices now support several new software update reports, leveraging Apple’s built-in declarative reporting infrastructure. This advanced infrastructure enables Intune to provide a near real-time view of the software update status for managed devices.
The list of new reports include:
- A per-device software update report
- Apple software update failures
- Apple software update report
- Apple software update summary report
Note that the above reports support the following devices: iOS 17 and later, iPadOS 17 and later, and macOS 14 and later.
9. Multi-administrator approval support for role-based access control
With Intune service release 2508, multi-administrator approval (MAA) now integrates with role-based access control. When activated, any role changes, such as updates to permissions, admin groups, or member group assignments, must be approved by a second administrator before taking effect.
10. Platform SSO is generally available (GA)
Platform SSO in Microsoft Entra allows single sign-on (SSO) using a Microsoft Entra ID on macOS devices. You can set up Platform SSO through the Intune settings catalog and use Intune to deploy the configuration to your macOS devices.
Also Read: New Features in Intune June 2025 Release
