Jun 22 - 28
macOS and Intune community highlights for June 22 - 28, 2026: 9 community items and 3 Intune release-note entries.
A roundup of what stood out across the macOS and Intune community for June 22 - 28, 2026 — updates from Microsoft, posts from community blogs, and discussions worth a look. Follow each link for the full story.
Microsoft published 3 new macOS-relevant release-note entries this week. See What's New in Intune for the summaries.
Microsoft announcements
Intune Customer Success · MikeGriz · Jun 19, 2026
Microsoft's internal Intune administration team shares lessons from deploying Platform SSO (PSSO) on macOS prior to macOS 26, describing how it binds Primary Refresh Tokens to the device's Secure Enclave to enable token protection policies and phishing-resistant MFA via Touch ID. The post covers available authentication methods (Secure Enclave, Smart Card, Password Sync), a settings catalog setup using the Company Portal SSO extension, and the first-time registration flow. It notes common issues including a password policy that silently blocked registration, users dismissing the registration banner, and macOS updates breaking SSO, and outlines manual registration through System Settings…
Tags: platform-sso, macos, secure-enclave, authentication
Community blog posts
Andrew Taylor · Andrew Taylor · Jun 19, 2026
Andrew Taylor's June 19th 2026 newsletter centers on Intune Suite features reaching E5 and some E3 licenses, aggregating community posts on Endpoint Privilege Management, Remote Help with unattended access, Advanced Analytics, Device Query, and Windows 365 integration. It also links to coverage of macOS app packaging, signed App Control policies, Security Baselines, KQL queries for old BIOS versions, multi-app kiosk account notifications, Windows 365 Reserve, and an updated drive mapping script. Microsoft content includes Windows Ready Print, enterprise app management security, a Vulnerability Remediation agent in public preview, and Platform SSO setup for macOS.
Tags: intune suite, epm, advanced analytics, macos
Reddit highlights
r/Intune · u/leytachi · Jun 22, 2026
A user setting up Intune for Mac devices without Apple Business Manager attempted to follow Microsoft's documented macOS Direct Enrollment process. At Step 2, Export Enrollment Profile, they could not find the Download profile option for macOS and only saw download options for iOS and iPadOS, including ACME and SCEP profiles. They asked whether they were missing anything.
Tags: macos, direct-enrollment, intune, apple
r/Intune · u/5agsr · Jun 20, 2026
An administrator is attempting to configure Google Chrome auto-update on macOS devices through Intune using two separate plists, one for auto-update under com.google.Keystone and another for the Chrome SSO extension and relaunch notification settings under com.google.chrome. The default plist works but the update check timing is inconsistent, so the author tried adding a checkInterval value of 16200 (4.5 hours) to enforce a scheduled check, but the tests have failed. The author is asking the community to identify what is being done incorrectly.
Tags: macos, chrome, auto-update, plist
r/Intune · u/senectus · Jun 19, 2026
A user asks how other administrators deploying Intune-managed macOS devices keep OpenAI Codex updated for users without local admin rights, noting the app appears to update daily. They describe this as a significant challenge. No answers are included in the text.
Tags: macos, app-updates, intune, admin-rights
r/Intune · u/TimmyIT · Jun 18, 2026
Microsoft's internal Intune team published a write-up on rolling out Platform SSO to their Macs, covering settings-catalog setup, the user registration flow, and a troubleshooting reference with error codes. The post describes Platform SSO's security features, including tokens bound to the Mac's Secure Enclave, Touch ID instead of passwords, and token protection comparable to what they had on Windows via Hello for Business.
Tags: platform sso, macos, settings catalog, touch id
r/Intune · u/Immediate_Prior_9290 · Jun 17, 2026
An administrator reports that Company Portal 6.2.1 repeatedly crashes on a macOS 26.5.1 device fully enrolled in Intune, with crash logs pointing to the Mac SSO Extension failing during XPC decoding due to invalid or legacy-formatted data. Platform SSO is assigned and shows as Succeeded, and attempts to reinstall Company Portal, clear SSO containers, re-enroll, and verify the Platform SSO config did not resolve the issue. The poster asks whether others are seeing this on macOS 26.x with Company Portal 6.2.1 and whether any workarounds exist or Microsoft is aware.
Tags: company portal, platform sso, macos, crash
r/Intune · u/chromespy200 · Jun 16, 2026
An administrator is configuring OneDrive on macOS devices to enable it as a login item, silently sign users in, and silently enable Known Folder Move. Devices are enrolled via ABM/ADE/Intune with user affinity and users register with Platform SSO, and OneDrive is set as a login item via mobileconfig with settings catalog options for Known Folder Move, blocking external sync, disabling personal accounts, and tutorials. The issue is that after restart OneDrive opens a window with the user email pre-populated but still requires the user to click next and select the folder location, and the author asks whether this is expected behavior or a misconfiguration.
Tags: onedrive, macos, known-folder-move, platform-sso
r/Intune · u/Dry_Finance478 · Jun 16, 2026
A user asks whether anyone has successfully deployed the NinjaOne RMM agent for macOS along with PPPC settings through Intune. They report that the deployment shows success, but the screen capture permissions are not being enabled silently.
Tags: macos, pppc, ninjaone, deployment
Last updated
Was this helpful?