It’s June 2024 and the Intune 2406 update has been released with a set of exciting new features. Let’s look at what’s new in this service release 2406 and how it can benefit your organization.
As you know, the Intune updates are released every month, and with every release we see a set of new features, additional apps support and fixes included. Most of these new features are implemented based on user feedback. So next time, when you try out a feature, do let the MS Intune team know about how the feature worked for you.
If your existing Intune tenant is at service release 2405, it may take a few days to update to the latest release. All the new features included with 2406 service release are available only after the tenant is updated to the latest version.

New Features in Intune 2406 Service Release
Let’s look at the new features and improvements that were added to Intune 2406 service release, released in the month of June 2024. For more details, refer to Microsoft documentation on Intune 2406 New Features.
1. Endpoint Privilege Management support for MSI and PowerShell file types
When you create Endpoint Privilege Management (EPM) elevation rules, Intune 2406 now supports the elevation of Windows Installer and PowerShell files in addition to executable files. You can now enter the new file extensions .msi and .ps1. that are fully supported by EPM.
2. Intune replaces Wandera with Jamf as Mobile Threat Defense connector
Wandera has been acquired by Jamf and hence in the Intune admin center you will notice that Wandera is now replaced with Jamf as Mobile Thread Defense connector. The minimum required platforms to use the Jamf connector:
- Android 11 and later
- iOS / iPadOS 15.6 and later

3. 6 New protected apps for Intune
The following protected apps are now available in Microsoft Intune service release 2406:
- Atom Edge (iOS) by Arlanto GmbH
- HP Advance for Intune by HP Inc.
- IntraActive by Fellowmind
- Microsoft Azure (Android) by Microsoft Corporation
- Mobile Helix Link for Intune by Mobile Helix
- VPSX Print for Intune by Levi, Ray & Shoup, Inc.
3. OS Version Picker for iOS/iPadOS Software Updates
When you use settings catalog to configure software update policy for iOS/iPadOS devices, you have the option to select a target OS version. You can choose to select the latest update or use the drop-down to select the specific target OS version.

4. RBAC changes to enrollment platform restrictions for Windows
Starting in Intune 2406 service release, the Global Administrator and Intune Service Administrator roles can create, edit, delete, and reprioritize enrollment platform restrictions. For more information, see Create device platform restrictions.
5. View BitLocker recovery key in Company Portal apps for iOS and macOS
Bitlocker is an encryption method for Windows and FileVault is for Mac. Starting in Intune 2406, end users can view the BitLocker recovery key for an enrolled Windows device and the FileVault recovery key for an enrolled Mac in the Company Portal app for iOS and Company Portal app for macOS.
Microsoft says this feature will reduce helpdesk calls in the event the end user gets locked out of their corporate machines.
6. New enrollment time grouping feature for devices
Intune version 2406 introduces a novel feature known as Enrollment time grouping, which offers a more efficient method of grouping devices during enrollment. When this feature is enabled, Intune adds devices to the appropriate group without requiring inventory discovery and dynamic membership evaluations. Note that this feature is available only for Windows 11 devices, enrolling via Windows Autopilot device preparation.
7. US GCC and GCC High support for Managed Home Screen
Managed Home Screen (MHS) now supports sign-in for the US Government Community (GCC), US Government Community (GCC) High, and U.S. Department of Defense (DoD) environments.