Sure! Here’s the translation:
Intune Suite
Creation of EPM policies: Based on recurring requests, it is possible to create policies with just a few clicks.
New report in Intune: Allows monitoring of CPU and RAM performance, enabling proactive replacement or upgrading of machines (e.g., adding RAM).
New actions for Microsoft Cloud PKI: Three new actions are available: removing a certification authority, temporarily suspending a certification authority, and certificate revocation. These actions are accessible in the Intune console and via Graph.
PO Privilege Management: Users can now request privilege elevation for PowerShell scripts and MSI files, thanks to a recent Microsoft update.
Device Enrollment
Linux support in Intune: After CentOS, Red Hat Enterprise is now supported by Intune. These distributions can be enrolled, compliance profiles can be deployed, and conditional access can be used.
Android device management: Until now, it was necessary to create a business Google account to link Microsoft Intune to Google. From now on, for new tenants, a Microsoft business account is sufficient. Tenants that already configured a business Google account are unaffected.
New enrollment method on iOS/iPadOS: Since iOS/iPadOS 15, users can enroll their device directly through settings by adding their work account, simplifying the process compared to the previous method using the company portal.
Device Management
CPU architecture-based filters: It is now possible to apply configurations based on CPU architecture, improving profile management.
Profile consolidation: The “Identity Protection” and “Account Protection” profiles have been merged into one. Legacy profiles are still supported.
Copilot in Intune: Copilot allows quick retrieval of machine information directly from Intune, optimizing management time. A new feature, Device Query, allows real-time queries to a machine for additional information without impacting the user.
Device Configuration
Multi-Administrative Approval (MAA): This feature allows verification and approval of changes made by administrators before they are applied. It is now extended to include Windows, non-Windows applications, and Azure Virtual Desktop. This approval system applies before production rollout.
Clipboard management settings: You can now block clipboard operations between the server and client (and vice versa) in Azure Virtual Desktop directly from the Settings Catalog.
Android Enterprise: It is now possible to reverse and block access to Play Store apps, even after initially granting permission, which was not possible before.
New remote actions for iOS and Android: You can now remove, reapply, or reinstall a configuration profile or an app directly on an individual device, simplifying management and troubleshooting.
Security
It is now possible to set update policies based on the device’s local time in Microsoft Intune. For instance, if you force an update at midnight, each device will update at midnight in its own time zone. This means a device in Paris will update at midnight Paris time, and a device in New York will update at midnight New York time. This feature is particularly useful for roaming users.
App Management
Managed Home Screen for Android Fully Managed: It is now possible to customize and enhance the user experience on fully managed Android devices via the Managed Home Screen.
Discovered Apps report: This report, which shows installed applications on devices, now includes information about the publisher, not only for Store apps but also for Win32 and other apps.
Dedicated application deployment logs on Windows: A specific log file for application deployment and uninstallation is now available, making troubleshooting app-related issues on Intune clients easier.
Application deployment on macOS: DMG and PKG applications can now be made available in the company portal for Mac users, simplifying their management.
Let me know if you need further adjustments!


Leave a comment