Apple has officially released iOS / iPadOS 26 and macOS 26 Tahoe — and Microsoft Intune is ready on day one. With day-zero support, organizations can confidently upgrade their devices immediately, knowing management features and security policies remain fully compatible.
In this article, we’ll break down what Intune’s day-zero support means, the new settings added, and how enterprises can take advantage of them.
What Is Day-Zero Support?
Day-zero support ensures that when Apple ships a new operating system, Microsoft Intune already works with it. That means:
- No waiting for compatibility patches
- Faster adoption of the newest OS features
- Better security posture with immediate access to Apple’s latest patches
For IT teams, this reduces downtime, improves compliance, and streamlines device lifecycle management.
Key Intune Enhancements for iOS/iPadOS & macOS 26
To keep pace with Apple’s changes, Intune has expanded its Settings Catalog for both MDM (Mobile Device Management) and DDM (Declarative Device Management).
1. Audio Accessory Controls
Organizations can now manage temporary AirPods and Beats pairing with new options such as:
- Temporary Pairing Disabled
- Unpairing Time
- Unpairing Policy
- Unpairing Hour
2. Safari Management
Admins gain granular control over Safari, including the ability to manage:
- Accept Cookies
- Disable Fraud Warning
- Private Browsing
- JavaScript
- Pop-ups
- Extensions
- Homepage URL
3. Restrictions
New restrictions help tighten security and compliance:
- Prevent Safari history clearing and private browsing
- Block or allow specific apps using bundle IDs
- Restrict iMessage, FaceTime, and RCS via Denied ICCIDs
4. Default Applications
IT can now restrict changes to default calling and messaging apps, ensuring consistency across managed devices.
5. Web Content Filtering
Admins can define whether Safari browsing history is retained or blocked when using content filters.
Purebred Derived Credentials Upgrade
For organizations using Purebred v3 derived credentials, iOS 26 brings a smoother user experience. To benefit from the changes, ensure that the Company Portal app is updated to version 5.2509.0 or newer.
Supported vs. Allowed OS Versions
Microsoft clarified its support policy for Apple devices:
- Supported versions: The latest three OS versions are fully supported. (iOS/iPadOS 26, 18, 17 and macOS 14+).
- Allowed versions: Devices up to three versions below supported can still enroll, but may not receive new feature updates reliably.
For user-less devices (like shared iPads enrolled without user affinity), this distinction is critical to avoid broken functionality.
Why It Matters for Enterprises
- Stronger security – immediate support for Apple’s latest patches
- Better compliance – granular controls for Safari, apps, and accessories
- Operational efficiency – no upgrade delays for IT teams
- Clear lifecycle planning – knowing which OS versions are safe to use and when to upgrade
What IT Teams Should Do Now
- Update the Company Portal app to v5.2509.0+ for Purebred users.
- Review the new Settings Catalog to apply relevant controls.
- Audit device OS versions and plan upgrades to stay within the supported range.
- Test policies in a controlled environment before organization-wide rollouts.
Final Thoughts
With Apple’s latest OS releases, Microsoft Intune has once again delivered day-zero support — helping IT teams stay secure, compliant, and productive. By updating apps, exploring the new settings, and ensuring devices run on supported versions, enterprises can fully leverage the latest iOS, iPadOS, and macOS features from day one.
