All the Exciting New Features in Microsoft Intune July 2025: LAPS for Mac, Real-Time Apple Updates, and More

Microsoft Intune continues to shape the future of endpoint management in 2025 with critical updates, particularly for IT teams managing multi-platform environments. The Microsoft Intune July 2025 release brings significant advancements aimed at streamlining device management, enhancing security, and reducing IT friction—especially for organizations supporting Apple, Windows, and cross-platform deployments. Below, we break down the key highlights that will redefine administrative workflows and IT support best practices this month and how much has changed from last month.

1. Local Admin Password Solution (LAPS) Integration for macOS

A long-requested feature has arrived: intuitive, secure credential management for macOS via LAPS integration. With the Microsoft Intune July 2025 update, organizations using Automated Device Enrollment (ADE) can now provision Macs with a dedicated local administrator account. This administrator account is created automatically during enrollment, with the following security measures in place:

• Strong, Encrypted, Randomized Passwords: Automatically generated and rotated every six months.

• Simple Credential Retrieval: IT admins can securely access the current password from the Intune portal, complete necessary support tasks, rotate the password, and return control—without compromising user or enterprise security.

• Dynamic User Naming: New user accounts can use dynamic variables (like {{username}}, {{serialNumber}}, {{partialupn}}, and others) for customizable, standardized account creation based on organizational policy.

This solution means help desks no longer need to request or manage static administrator passwords, which streamlines support and closes the door on a common security loophole for Mac fleets.

2. Real-Time Visibility for Apple Device Updates

Managing Apple device updates can be a logistical challenge, especially when troubleshooting failures and compatibility issues. The Microsoft Intune July release introduces real-time update monitoring for Apple devices:

• Live Update Status: IT can watch update download and installation progress for individual Apple endpoints.

• Automatic Failure Diagnostics: The new reporting system built on Apple’s declarative device management (DDM) framework helps admins quickly spot failures and understand user interactions with ongoing updates.

• Improved Response: By knowing exactly where issues occur, IT teams can remediate devices—or alert users—faster than ever, minimizing downtime.

With Apple’s legacy MDM update workflows being deprecated, these reporting enhancements arrive at a crucial moment for many organizations.

3. Microsoft Intune App Management Improvements

Maintaining a large app portfolio is simpler and more transparent in July’s release:

• Relationship Viewer for Apps: This new graphical tool displays the connections between Win32 and Enterprise App Catalog apps within Intune. Admins can easily visualize dependencies, upgrades, and installation relationships, improving clarity and reducing accidental deployment issues.

• Apple VPP API v2.0 Support: With Apple shifting its Volume Purchase Program (VPP) API to v2.0, Intune now integrates the new and improved version, delivering faster, more scalable experiences for bulk app distribution on iOS and macOS.

• New Data Storage Services for Android/iOS: Intune app protection policies now allow organizations to specify iManage and Egnyte as options when authorizing where organizational data can be saved from mobile devices. This adds greater flexibility and compliance control for enterprise workflows.

4. Device Configuration: Multi-Display Settings for Windows

A significant quality-of-life improvement for endpoints running Windows 24H2 is the ability to pre-configure multi-display settings directly from within Intune. This update:

• Lets IT admins automatically set display preferences (extended, mirrored, etc.) using the Windows Settings Catalog.

• Ensures all managed devices present a consistent, efficient multi-monitor experience out-of-the-box.

• Reduces manual configuration overhead and speeds up large-scale deployments where monitors are mission-critical.

5. Enhanced Security Baselines and Endpoint Privilege Management

Security Baseline for Microsoft Edge v128

Organizations committed to secure browsing experiences gain a new baseline with support for Microsoft Edge v128. The baseline includes:

• The latest recommended security settings for the new Edge version.

• Streamlined deployment from Intune to ensure all managed Windows devices are kept up-to-date with best-practice configurations.

Endpoint Privilege Management (EPM) Enhancements

Managing what processes can be run with elevated rights is crucial against modern threats. The following enhancements are now generally available:

• Wildcard Support in Elevation Rules: EPM now lets admins write elevation rules using wildcards, offering granular, flexible access control.

• File Arguments Parameters: Elevation policies may now restrict or allow elevated access based not only on file but also on command-line arguments—helping administrators control sensitive scenarios (e.g., scripting, installations).

6. New Protected Apps and Application Catalog Expansion

July 2025 introduces additional first- and third-party apps to Intune’s protected apps program. For instance, MoveInSync—developed by MoveInSync Technologies—is now available for Intune-managed Windows 10 and later corporate devices. This addition brings more choices to organizations looking for secure, managed alternatives in their productivity stack.

7. General Quality-of-Life and Admin Experience Enhancements

• Streamlined UI for Apps Workload: The Intune admin portal interface for app management now features a more concise navigation structure, helping admins find key information faster and with fewer clicks.

• Broader Organizational Storage Exemptions: Expanded exclusions for iManage and Egnyte give organizations finer control over permitted document destinations under app protection policies.

8. Global Rollout Details

Monthly Intune rollouts occur in phases:

• Day 1: Asia Pacific (APAC)

• Day 2: Europe, Middle East, Africa (EMEA)

• Day 3: North America

• Day 4+: Government tenants

Some features may take several weeks to reach all customers, especially those in regulated or government environments. Organizations should watch the official Microsoft docs and portals for personalized rollout schedules and further advisories.

July 2025 Microsoft Intune Highlights

July 2025 delivers one of Microsoft Intune’s most impactful update cycles, particularly for organizations juggling diverse device ecosystems. From automatic admin password management in macOS, enhanced app visibility, to tightly controlled update workflows and expanded security options, these changes help IT teams move faster and more securely—so organizations can focus on productivity, not firefighting.

IT decision makers and help desk professionals should review these features, adjust their policies, and leverage Microsoft Intune’s documentation to maximize their endpoint management ROI in the months ahead.

For a comprehensive list of all updates, as well as in-depth configuration guides, consult the official Microsoft Intune documentation and update portals.