Merge pull request #19449 from MicrosoftDocs/main

Auto Publish – main to live - 2026-01-26 18:30 UTC

Author: learn-build-service-prod[bot]

autopilot/whats-new.md

@@ -1,7 +1,7 @@
 ---
 title: What's new in Windows Autopilot
 description: News and resources about the latest updates and past versions of Windows Autopilot. # RSS subscription is based on this description so don't change. If the description needs to change, update RSS URL in the Tip in the article.
-ms.date: 09/09/2025
+ms.date: 01/26/2026
 ms.collection:
   - M365-modern-desktop
   - tier2
@@ -28,11 +28,11 @@ appliesto:
 ## Enrollment Status Page support for installing Windows security updates during Windows OOBE
 
 Date added: *September 3, 2025*<br>
-Date updated: *September 9, 2025*
+Date updated: *January 26, 2026*
 
-> [!IMPORTANT]
+> [!NOTE]
 >
-> As of September 9, 2025, this capability is delayed to help ensure delivery of the best possible experience. The new setting on the Enrollment Status Page (ESP) can be configured on both new and existing ESP profiles, but the automatic installation of monthly security update releases and the new user interface isn't available yet. This post will be updated with a revised timeline as soon as it's available.
+> As of January 13, 2026, this capability is included in the Windows `2026-01 B` quality update.
 
 The Windows out-of-box experience (OOBE) by default installs the latest available monthly security update releases to help ensure devices are secure and up to date from day one. Windows OOBE is used by Intune and by Windows Autopilot scenarios through the Intune enrollment status page (ESP) configurations. Intune refers to these monthly security update releases as quality updates.
 

intune/intune-service/apps/mamedge-3-scc.md

@@ -1,7 +1,7 @@
 ---
 title: Step 3. Integrate Mobile Threat Defense for App Protection Policy
 description: Step 3. Integrate Mobile Threat Defense signals with Microsoft Edge for Business app protection policies in Microsoft Intune.
-ms.date: 01/23/2026
+ms.date: 01/26/2026
 ms.topic: how-to
 ms.reviewer: samarti
 ms.custom:
@@ -64,13 +64,13 @@ Use the conditional launch settings to maintain progressive security across the
 
 - **Offline grace period (Block access)**: Set to **10080** minutes.
 - **Offline grace period (Wipe data)**: Set to **90** days.
-- **Max allowed device threat level**: Select **Low**, with the **Block access** action.
+- **Max allowed device threat level**: Select **High**, with the **Block access** action.
 
 #### Level 2 – Enhanced
 
 - **Disabled account**: Set to **Block access**.
 - **Min OS version**: Enter **10.0.22621.2506** and select **Block access**.
-- **Max allowed device threat level**: Select **Medium**, with the **Block access** action.
+- **Max allowed device threat level**: Select **Low**, with the **Block access** action.
 - **Offline grace period (Wipe data)**: Set to **30** days.
 
 #### Level 3 – High