You can now defer the visibility of non-OS software updates up to 90 days on supervised devices. As currently enrolled devices update to macOS Big Sur, IT will be able to exercise the same level of control on these devices as supervised macOS devices enrolled using Automated Device Enrollment or Apple Configurator.Ī new restriction for managing non-OS software updates on macOS 11 is now available in the Microsoft Endpoint Manager admin center. All Mac enrollments in Microsoft Endpoint Manager except those enrolled using Automated Device Enrollment (ADE) are considered user-approved. Starting in macOS Big Sur, all user-approved enrollments are automatically considered supervised. Excluded Domains for per-app VPN connections.Prevent users from disabling automatic VPN.“Enable direct download” setting for associated domains.We now support the following new device configurations on Intune-managed Macs running macOS Big Sur and later: We are delighted to deliver new functionality enabled by the innovations on macOS 11 – ensuring that you enable productivity for your users wherever they are working or learning this fall. Microsoft Intune is excited to support Apple in their launch of macOS 11.