KBY Technologies Logo

Admin deadlines

What Microsoft and Apple are retiring, changing or enforcing, and when

One list for endpoint and identity admins: Intune, Entra ID, Exchange Online, Windows, PowerShell and Apple device management. Each entry says who is affected and what to do, and quotes the vendor line that gives the date.

Next 90 days
2
Upcoming in total
2
Passed in the last 6 months
2

Each date is quoted from the vendor’s own page. Dates move; check the source before you act. Where a vendor gives only a month or a rough period, we show that, not a made-up day. Checked 9 Nov 2026.

Clear

Upcoming (filtered)

November 2026

Q4 2026This quarterMicrosoftEnd of supportVendor gives an approximate period only

Intune moves to macOS 15 and later

IntunemacOS

Who is affected
Organisations enrolling Macs with Intune. New Macs on macOS 14 or earlier will not be able to enrol; Macs already enrolled stay enrolled but are no longer supported.
What to do
  1. Filter Devices > All devices by macOS and add the OS version column to find Macs on macOS 14.x or earlier.
  2. Upgrade those Macs to macOS 15 or later, or replace hardware that cannot run it.
  3. Upgrade spare and new-stock Macs before they are handed out, so enrolment does not fail.
Source
Plan for change: Intune is moving to support macOS 15 and higher later this year“Later in calendar year 2026, we expect macOS Golden Gate 27 to be released by Apple. Microsoft Intune, the Company Portal app, and the Intune mobile device management agent support macOS 15 and later.”
In development for Microsoft Intune (Microsoft Learn)
Updated minimum supported version for macOS“Microsoft Intune will update its minimum supported macOS version after Apple releases macOS 27. Intune, the Company Portal, and the Intune management agent will support macOS 15 and later.”
In development for Microsoft Intune (Microsoft Learn)

On KBY:Intune vs Jamf for Mac management

Checked 9 Nov 2026 Link to this deadline

February 2027

In 84 daysAppleRetirement

Original Apple Developer ID Sub-CA expires: affected .pkg installers stop installing

macOS

Who is affected
Mac admins who deploy installer packages signed with a Developer ID certificate issued by the original Sub-CA, including in-house packages and older third-party packages in Intune, Jamf or other MDM. Notarised apps with a secure timestamp keep working.
What to do
  1. Run pkgutil --check-signature on every .pkg you deploy and note which ones chain to the original Developer ID Certification Authority.
  2. Re-sign in-house packages with a certificate from Developer ID Certification Authority (G2) and re-upload them.
  3. Ask vendors for re-signed packages and replace cached copies in your MDM before February 1, 2027.
Source
“The original Developer ID Certification Authority (Sub-CA) expires on February 1, 2027. Certificates issued by this authority will stop working on that date.”
Upcoming expiration of Developer ID Certification Authority (Sub-CA) (Apple Developer News)
“Installer packages (.pkg): Starting February 1, 2027, .pkg files signed with an affected certificate will no longer install.”
Upcoming expiration of Developer ID Certification Authority (Sub-CA) (Apple Developer News)

On KBY:Intune vs Jamf for Mac management

Checked 9 Nov 2026 Link to this deadline

Put these dates in your calendar

The calendar feed uses the filter you have selected and refreshes daily in Outlook, Apple Calendar and Google Calendar. Each event carries the actions and the source link.

Download .ics JSON

webcal://www.kbytechnologies.com/deadlines/calendar.ics?products=macos

Embed the next deadlines on your intranet

Paste this into a SharePoint embed web part or any page that allows iframes. Add &limit=10 to the URL for more rows.

<iframe src="https://www.kbytechnologies.com/deadlines/embed?products=macos" title="Upcoming Microsoft and Apple admin deadlines" width="400" height="460" loading="lazy" style="width:100%;max-width:480px;border:1px solid #e2e8f0;border-radius:12px"></iframe>

Recently passed

Dates from the last 6 months. If one of these still applies to you, you are already past the vendor’s date.

14 days agoMicrosoftRetirement

Intune removes legacy Apple MDM software update policies

IntunemacOSiOS/iPadOS

Who is affected
Intune admins who still manage iOS/iPadOS or macOS updates with legacy MDM software update policies or the update-delay restriction settings. Apple removed the underlying commands and payloads in OS 27.
What to do
  1. Recreate update rules as declarative device management (DDM) software update policies in the settings catalog.
  2. Check that every Apple device group is covered by a DDM update policy before deleting the old policies.
  3. Re-check deferral settings: the legacy restriction keys for delaying updates were removed in OS 27.
Source
Week of October 26, 2026 (Service release 2610)“Microsoft Intune is removing legacy Apple MDM software update workloads after Apple retired the underlying commands and payloads in OS 27. Admins should use Apple declarative device management update policies to continue managing software updates.”
What's new in Microsoft Intune (Microsoft Learn)
Changes in 27.0“Removed: mdm/commands/system.update.schedule.yaml”
apple/device-management CHANGES.md (Apple, GitHub)

On KBY:Intune vs Jamf for Mac management

Checked 9 Nov 2026 Link to this deadline

14 days agoMicrosoftRetirement

Intune ends Setup Assistant (legacy) authentication for Apple automated device enrollment

IntunemacOSiOS/iPadOS

Who is affected
Organisations using Apple automated device enrollment (ADE) profiles with user affinity that still authenticated with Setup Assistant (legacy). Existing profiles move to modern authentication; enrolled devices stay enrolled.
What to do
  1. Open each ADE profile with user affinity and confirm it now shows Setup Assistant with modern authentication.
  2. Enrol one test iPhone and one test Mac to check MFA and Conditional Access prompts during Setup Assistant.
  3. Update enrolment guides and helpdesk scripts that describe the old sign-in screens.
Source
Week of October 26, 2026 (Service release 2610)“Intune has ended support for Setup Assistant (legacy) authentication for iOS/iPadOS and macOS automated device enrollment (ADE) with user affinity to align with modern authentication standards.”
What's new in Microsoft Intune (Microsoft Learn)

On KBY:Intune vs Jamf for Mac management

Checked 9 Nov 2026 Link to this deadline

How this list is made

  • Only dates stated on Microsoft Learn, Microsoft Lifecycle, Windows release health, Apple Developer or Apple’s published device management schema are included.
  • The quoted line is copied from that page. Where the date is only in a table, the row is quoted with cells separated by “|”.
  • Items without a vendor-stated date are left out, even when they are widely reported.
  • Days remaining are counted in UK time. A month or quarter counts as due for the whole period.