WSL containers went GA on September 29, and the enterprise control Microsoft shipped with it is two Intune settings: a switch for the whole feature and a registry allow list for images. Neither appears on the Learn Intune page for WSL yet, so the setting names come from the announcement, not the docs.
Windows 11 26H2 went GA on September 29 as an enablement package: KB5121794, one restart, and a cumulative update you have to be current on first. The catch is policy, not code. Allow Temporary Enterprise Feature Control turns on every dormant feature at the next restart rather than the one you wanted, and Microsoft’s own EPM troubleshooting page says Administrator protection breaks Endpoint Privilege Management elevation on the same device today. Read that page before you pilot either one.
