summary (300 characters): Microsoft Intune’s June 2025 update enhances app protection policies, expanding support to 126 apps across iOS and Android. New features simplify Samsung Knox integration and enable blocking apps during Windows Autopilot enrollment, empowering secure remote work while protecting personal data. Unique bullet points in HTML:

What’s New in Microsoft Intune: June 2025 Update
Microsoft Intune keeps evolving to meet modern security and remote work needs. The June 2025 update focuses heavily on application protection policies, making data security smarter and more user-friendly. If you’re managing devices or apps in your enterprise, these changes are worth a close look.
Application Protection Policies: More Control, Less Hassle
Application protection policies (APP) now offer enhanced ways to secure company data on personal devices without full device enrollment. Intune lets IT pros restrict actions like copy-pasting, screenshots, or unauthorized file sharing within managed apps. This means employees can keep their personal data private while companies maintain control over sensitive information.
“Users can be confident that their employer isn’t able to see any of their personal data or access their device at all.”
These policies work seamlessly across iOS, Android, and Windows, making cross-platform management easier than ever.
Expanded Partner Application Ecosystem
Microsoft has doubled its list of supported apps since 2022 by publishing the Mobile Application Management SDK. Independent software vendors (ISVs) can now integrate Intune’s app protection features directly into their apps.
Currently, 126 apps support Intune’s APP features: 4 Android-only, 39 iOS-only, and 83 available on both platforms. This month’s new additions include Datasite for Intune, Nitro PDF Pro, and SMART TeamWorks, among others.
“The list of ISVs has doubled since 2022, and this month our list of supported applications has grown to a total of 126 apps.”
For IT admins, this means more flexibility and better protection options across a broader app ecosystem.
Simplified Samsung Knox Integration
Samsung Knox attestation, which prevents device tampering, is now easier to enable. Intune automatically activates Knox attestation by default on supported Samsung devices running the latest OS. Previously, admins had to create special policies or filters for Knox, but now it’s streamlined.
This update reduces policy management overhead and boosts security on Samsung devices without extra admin effort.
New Enrollment Blocking for Enterprise Apps
To close security gaps during device setup, Intune now lets IT pros block access to Windows desktops until essential apps are installed. Using Windows Autopilot, admins can mark certain apps as “blocking apps” to enforce this.
This feature ensures devices aren’t usable until all critical security and management apps are in place, strengthening endpoint protection from day one.
Why It Matters
These updates reflect Microsoft’s commitment to balancing security with user privacy and convenience. Intune’s evolving app protection policies empower organizations to secure data without heavy-handed device control. Plus, the expanded app ecosystem and simplified Samsung Knox integration make life easier for IT teams.
Curious how these features fit into your Zero Trust strategy? Or which apps you want supported next? Microsoft invites feedback to keep Intune evolving.
Stay in the loop by bookmarking the Microsoft Intune Blog and following @MSIntune on X (formerly Twitter).
From the Microsoft Intune Blog articles