Microsoft Intune changes to start biting unprepared admins
Summary
Microsoft has started enforcing updates to its Intune mobile application management (MAM) service from 19 January 2026. Apps that use the Intune App SDK or are wrapped for iOS, plus the Intune Company Portal for Android, must be on supported releases or risk being blocked from launching. The change affects both third-party and Microsoft apps (including Outlook and Teams), and administrators who haven’t prepared may see users lose access or call support.
Key technical requirements include specific Intune App SDK releases for iOS tied to the Xcode version used (20.8.0+ for Xcode 16, 21.1.0+ for Xcode 26) and matching App Wrapping Tool updates. Android is somewhat less painful: once a Microsoft app with the updated SDK and the updated Company Portal are present, Android apps should update. The rollout timing can vary by organisation depending on MAM conditional access, offline grace periods and other policy settings.
Key Points
- Enforcement date: changes start from 19 January 2026 (deadline was earlier extended from 15 December 2025).
- iOS apps must use specific Intune App SDK releases: 20.8.0+ for Xcode 16 builds and 21.1.0+ for Xcode 26 builds; App Wrapping Tool must also be updated to matching versions.
- Android requires the Intune Company Portal to be updated; once updated alongside one Microsoft app with the new SDK, Android apps will update more smoothly.
- Microsoft apps such as Outlook and Teams are affected — users may be blocked from launching them if not updated.
- Impact timing depends on an organisation’s MAM policy configuration (conditional access, offline grace periods, MTD integration, etc.).
- Administrators should rebuild/wrap affected iOS apps with the required SDK/tool versions and ensure Company Portal updates are rolled out to Android devices.
Why should I read this?
If you run Intune for your organisation, this is one you’ll want to skim — pronto. Get those SDKs, wrapping tools and Company Portal updates in order now unless you enjoy early-morning tickets from users who can’t open Outlook or Teams. In short: it’s a small admin task now, but a big user problem if you ignore it.
Source
Source: https://www.theregister.com/2026/01/19/microsoft_intune_deadline/
