The admin centre Sync action got fuller in 2607, and the properties catalog can now read the registry. Neither fixes a policy that was never going to apply.
New in service release 2607. A shell script that emits JSON, a rules file that judges it, and strict data types that fail quietly when you get them wrong.
New in preview: Intune-delivered Defender settings can now override Group Policy, Configuration Manager and local scripts. Useful, and not something to switch on tenant-wide.
Version 2609 moves ConfigMgr to one release a year. That is a maintenance signal, not a deprecation notice, and permanent co-management remains supported.
The app limit went to twenty five, managed installer stopped skipping Win32 apps, and Windows 365 automatic mode reached GA. Hybrid join still is not supported.
The checks that actually narrow it down, in the order that saves the most time.
