Posted in

What’s New in Microsoft Intune – January 2026

by ailona•

Microsoft Intune January 2026 updates streamline app deployment with PowerShell installers, refine Endpoint Privilege Management to preserve user context, centralize admin tasks in a unified queue, adopt ACME for Apple enrollments, and add ADE setup assistant controls for onboarding.

January 2026 updates to Microsoft Intune introduce executable PowerShell installers for Win32 apps, improved Endpoint Privilege Management, admin tasks GA, and ACME support for Apple enrollment. These changes reduce repackaging work and improve auditability for elevated operations. Admins gain clearer workflows and stronger certificate management for Apple devices.

Main feature/change and impact

Intune now supports uploading a PowerShell script as the Win32 app installer, eliminating frequent binary repackaging. The script runs natively, packages with app content, and reports installation status using return codes. This reduces deployment cycle time and improves visibility for compliance teams. Endpoint Privilege Management now preserves user profiles during elevation, improving audit trails and compatibility with profile-dependent installers.

Practical implications

Deployment teams can update install logic without rebuilding app packages, speeding rollouts and fixes. Regulated industries can embed compliance checks and environment validation directly in installers. Admin tasks centralizes EPM requests, MDE actions, offboarding, and approvals into one queue, improving prioritization and audit recording. Apple enrollment moves from SCEP to ACME, reducing unauthorized certificate risks and automating certificate lifecycle operations.
“January is like that for IT admins.”
These updates lower operational friction and tighten security controls for endpoint management. Next steps: validate PowerShell installer behavior in a controlled lab, update EPM approval rules, and test ACME enrollment for Apple devices.

Key points from the article:

  • Win32 apps support native PowerShell installer scripts for faster deployments
  • EPM preserves user profiles during elevation to maintain identity and auditing
  • Admin tasks centralizes requests, approvals, and security actions in one queue
  • ACME replaces SCEP for stronger, automated Apple device certificate issuance
  • ADE adds 12 Setup Assistant screens for customizable Apple enrollment flows

    • Related Coverage:

    From the Microsoft Intune Blog articles