What’s New in Microsoft Intune: April 2025 Update Delivers Granular Controls and Enhanced Device Management

April 2025 brings a suite of impactful enhancements to Microsoft Intune, Microsoft’s cloud-based endpoint management platform. This month’s update, announced by Microsoft’s Scott Sawyer, focuses on “small changes that can make a big difference,” delivering new granular controls that boost both productivity and security for organizations managing diverse device fleets.

Enhanced Naming for Android Enterprise Devices

One of the headline features in this release is the introduction of custom naming templates for Android Enterprise device enrollment profiles. Historically, IT administrators faced challenges with inconsistent device naming, often resulting in confusion, reporting errors, and inefficiencies. Devices would need to be manually renamed after enrollment-a process prone to mistakes and delays.

With this update, administrators can now define naming templates that automatically assign consistent, informative names to devices during enrollment. These templates can blend static text with dynamic variables, such as device type, serial number, or username, making it easier to recognize and manage devices at a glance. For example, a device could be named “SALES-TABLET-12345” or “ENG-PIXEL-67890,” instantly surfacing key information for IT teams.

This feature will be generally available to eligible tenants by the end of April 2025 and is slated for future expansion to Android Open Source Project (AOSP) devices. To configure this, admins can log into the Intune admin center, navigate to Devices > Android > Enrollment, and set up their custom naming conventions within the enrollment profile.

Learn more from the documentation:

• Set up enrollment for Android Enterprise fully managed devices
• Set up Intune enrollment for Android Enterprise dedicated devices
• Set up Android Enterprise work profile for corporate owned devices

New Apple Intelligence Controls

Microsoft continues to enhance Intune’s Apple device management capabilities, with this month’s update bringing new controls for Apple Intelligence-a suite of AI-powered tools on iOS devices. The focus is on extending security to unmanaged devices and providing more granular productivity controls for administrators. Key updates include:

1. Screen Capture Block: IT admins can now allow or deny screen capture from within the Apple Intelligence app, helping prevent accidental or intentional data leaks. This builds on earlier controls introduced for managed apps in January.
2. Writing Tools and Genmojis: Organizations can now block or allow the use of these Apple Intelligence features within application protection policies (APPs), providing more flexibility in balancing AI productivity with corporate data security.

These changes empower organizations to safely leverage AI on iPhones and iPads while maintaining strict control over sensitive data.

Streamlined Volume Purchase Program (VPP) API for Apple Devices

For organizations using Apple Business Manager or Apple School Manager, Intune now connects to version 2.0 of the Apple Volume Purchase Program (VPP) API. Previously, large-scale app licensing operations-such as deploying 25 apps to 10,000 devices-would require 25,000 individual requests, slowing down deployments and updates. With the new API, the same operation now takes just 10 requests, dramatically accelerating high-volume scenarios.

Additionally, changes made in Apple Business or School Manager are now reflected in Intune in near real-time, compared to the previous sync-based architecture. This improvement ensures that IT admins can respond quickly to organizational needs, especially during critical periods like back-to-school rollouts.

A Commitment to Continuous Improvement

The Microsoft Intune April 2025 update exemplifies how incremental, targeted improvements can have a significant impact on IT operations. By closing gaps in device naming, expanding security controls for Apple devices, and streamlining app deployment at scale, Intune continues to evolve as a robust, cross-platform endpoint management solution.

Admins are encouraged to stay up to date with these changes by following the official Microsoft Intune Blog and engaging with the Intune community on LinkedIn and X (formerly Twitter) @MSIntune and @IntuneSupportTeam. As always, feedback and feature requests are welcomed to help shape future releases.

Stay tuned to msftnewsnow.com for more in-depth coverage of Microsoft Intune and all the latest in Microsoft enterprise technology.