Microsoft has officially begun enforcing stricter security rules across its Intune mobile application management (MAM) platform. Starting January 19, 2026, devices running outdated Intune SDKs, wrappers, or Company Portal versions can no longer launch protected work apps, including Outlook, Teams, and OneDrive. The move strengthens enterprise security but immediately impacts organizations that failed to update their mobile environments in time.
Microsoft confirmed that iOS wrapped apps, iOS SDK–integrated apps, and the Intune Company Portal for Android must run the latest supported versions to remain functional. If users continue running older builds, Intune blocks app launch entirely rather than allowing limited access.
On Android, once a single Microsoft app updates alongside the Company Portal, the system automatically updates other managed apps. iOS requires more direct action because developers must rebuild or rewrap their apps using the updated SDK or wrapper.
Which Apps and Users Are Affected
The enforcement impacts:
- Microsoft apps such as Outlook, Teams, and OneDrive on managed devices.
- Custom and line-of-business iOS apps wrapped with the Intune App Wrapping Tool or built using the Intune App SDK.
- Android devices running an outdated Intune Company Portal app.
If any of these components remain outdated, users lose access to protected work apps until they update. Microsoft warns that even one outdated dependency can trigger a block.
IT administrators can identify affected users in the Intune admin center by navigating to:
Apps → Monitor → App protection status
The dashboard highlights users running unsupported SDK or app versions, allowing teams to take corrective action before business workflows stall.
Official Fixes and Required Versions
Microsoft provides clear version requirements to restore access and maintain compliance:
iOS App SDK Requirements
- Apps built with Xcode 16: Upgrade to Intune App SDK v20.8.0
- Apps built with Xcode 26: Upgrade to Intune App SDK v21.1.0
iOS App Wrapping Tool Requirements
- Xcode 16 builds: Use wrapper version v20.8.1
- Xcode 26 builds: Use wrapper version v21.1.0
Developers must rebuild or rewrap their apps using these versions before redeploying to users. Without this update, Intune blocks app launches automatically.
Android Company Portal Requirement
- Users must update the Intune Company Portal app to version 5.0.6726.0 or newer.
Once the Company Portal updates, Android typically handles SDK synchronization automatically across managed apps.
How IT Teams Should Prepare Right Now
Microsoft recommends several immediate actions to avoid user lockouts:
- Notify users to update Microsoft apps directly from the App Store or Play Store.
- Enable Conditional Launch policies in Intune:
- Set a minimum SDK version to block apps older than SDK 20.8.0 on iOS.
- Configure a minimum app version warning for older Microsoft apps.
- Enforce a minimum Company Portal version on Android devices.
- Audit compliance reports inside the Intune admin center and remediate flagged devices quickly.
These steps ensure devices remain compliant and users retain uninterrupted access to business-critical apps.
What Users Must Do to Restore Access
If your work apps suddenly fail to launch, update the affected app immediately from your device’s app store. If the issue persists, contact your IT team to confirm device compliance and SDK compatibility. Admin teams should prioritize SDK upgrades, wrapper rebuilds, and Company Portal updates to prevent widespread access interruptions.
Microsoft confirms that failure to update results in automatic blocking until devices meet the new security baseline.
