Microsoft’s June 2025 (2506) Microsoft Intune service update delivers new capabilities in Enterprise App Catalog integration, Apple AI feature controls, Android 16 behavior changes, Apple Settings Catalog expansions, and Bluetooth restrictions.
This breakdown answers the most common “What’s new?” and “Why does it matter?” questions, plus explains how Devicie’s Intune automation platform helps you deploy, secure, and scale these updates.
A: The Enterprise App Catalog now integrates with Autopilot Enrollment so you can add Catalog apps as blocking apps in Enrollment Status Page (ESP) and Device Preparation Page (DPP) profiles.
Why it matters:
Installs key business apps before a user reaches the desktop.
Cuts post-enrolment setup time for IT admins and MSPs.
Improves first-day productivity for end users.
How Devicie helps:
Pre-built ESP/DPP templates with updated App Catalog settings.
Multi-tenant rollout across all customer environments.
A: New standalone App Protection Policy settings for Genmojis, Writing Tools, and screen capture.
Why it matters:
Helps you meet data protection and compliance requirements.
Lets IT teams allow or block specific AI features at a granular level.
How Devicie helps:
Apple AI feature settings included in Devicie’s compliance-aligned policy packs.
Automated deployment across all managed Apple devices.
A: On displays 600dp or larger, Managed Home Screen will no longer enforce orientation, device settings take priority.
Why it matters:
Avoids kiosk/shared device disruptions after OS upgrades.
Reduces help desk calls related to display behavior.
How Devicie helps:
Detects and corrects configuration drift caused by OS updates.
Keeps orientation policies consistent across fleets.
A: The Apple Settings Catalog now includes:
iOS/iPadOS Managed Settings – Idle Reboot Allowed
macOS Authentication > Extensible SSO – Allow Device Identifiers in Attestation
Hundreds of new Microsoft Edge settings
Note: Apple has deprecated the Identification payload in macOS 15.4.
Why it matters:
Gives IT more precision for balancing security and usability.
Expands options for device-specific compliance policies.
How Devicie helps:
Pre-tested templates for rapid deployment of new Apple + Edge settings.
Unified endpoint reporting to track usage.
A: Two new restrictions are available:
Block Bluetooth – Fully disables Bluetooth.
Block Bluetooth Configuration – Prevents users from changing Bluetooth settings.
Why it matters:
Reduces attack surface by stopping unauthorized device-to-device connections.
Essential for high-security environments like finance, healthcare, and government.
How Devicie helps:
Enforces Bluetooth restrictions across all Android tenants.
Supports conditional application based on compliance posture.
A: They help you:
Speed up onboarding with ready-to-use devices.
Tighten compliance with AI and Bluetooth restrictions.
Stay ahead of Android/iOS/macOS behavioral changes.
Manage configurations with greater precision.
A: Devicie provides:
Rapid configuration updates for new Intune features.
Automated compliance alignment with CIS, Essential Eight, and ISO 27001.
Drift prevention after OS updates.
Unified endpoint reporting.
Multi-tenant scalability for MSP efficiency.
Talk to Devicie about automating Intune deployment, compliance, and drift prevention so your team spends less time configuring and more time delivering value.