The June 2026 Intune service release shipped Enterprise App Management auto-updates, EPM approvals for any signed-in user, and rules-based elevation for network settings. Here’s what each one fixes in a least-privilege rollout, and how to switch them on without breaking things.