baramundi Management Suite 2026 R2: Intune Co-Management, Reporting, and AI Integration

As the old saying goes: With the right tools, the job is half done. If you want to ensure the best possible stability for your infrastructure, you should not go without baramundi, even if you are already using Intune (opens in new tab). That is why we have continued to work on co-management in this release.

Conditional Access for mobile devices, introduced as a preview in the last release, is now moving into production. The compliance status of devices managed by baramundi is now fed directly into the access policies of Microsoft Entra ID. In addition, the global enrollment token simplifies the onboarding of large numbers of Windows endpoints, for example in BYOD scenarios (opens in new tab). Intune device commands such as restart, wipe, or Autopilot Reset can now be triggered directly from the Management Center, eliminating the cumbersome switch to the Intune console entirely. Admins can now also sign in to the Management Center directly with their Entra ID account.

Compliance only exists if you can also prove it. Our new reporting feature provides IT teams with historical reports and current dashboards at the click of a button. It includes:

• Asset management
• Vulnerability trends
• Update status
• Installed software
• Operating system distribution

In addition, we have provided our users with a wide range of Power BI templates that enable a quick start and can be customized individually.

The user-centric reports are particularly practical. They show all endpoints and assets assigned to a specific employee. This makes onboarding and offboarding considerably easier. The solution is based on a separate data warehouse that is populated via the baramundi Data Integration Service. It runs both on-premises and in the cloud and supports simultaneous operation across multiple Management Servers.

Companies with many branch offices know the problem: Some devices in Internet mode hardly ever see the Management Server. Until now, agent updates required a complicated workaround. With the new release, agent setups can now also be updated via a Content Delivery Network provided by baramundi. To ensure this remains secure, all setups are signed and automatically checked for integrity. IT admins also explicitly approve each version, so that rollouts take place in a controlled manner.

Our Management Suite is a social creature. It enjoys playing well with other programs. The reason is our powerful interface, which has become significantly better with this version: baramundi Connect 2.0 (opens in new tab) has gained additional controllers, including for Intune actions, API key management, and thresholds. Building on this, two Technical Previews are available. Both are available as open source under the MIT license on GitHub:

• MCP Server: Nearly 300 functions of the Management Suite become usable by AI assistants. Users query their environment in natural language, without any API knowledge. The existing permissions of the Management Suite continue to apply unchanged.
• n8n integration: The Management Suite becomes its own building block in low-code workflows, for example for reconciliation with the CMDB or automated endpoint onboarding.

Both previews are intended only for evaluation and testing and are not yet recommended for production use.

With R2, a frequently requested feature for Google Android management is finally here: the Work Profile for Fully Managed Devices. The new profiles, an additional job step for upgrading Managed Google Play accounts, and a transparent installation status make management considerably easier.

In license management, data from Application Usage Tracking is now directly visible. Unused licenses can thus be released and reassigned more easily, instead of purchasing new ones at great expense.

In addition, we have once again improved many details in this release:

• The Endpoint Job History is back; completely redesigned and fully traceable.
• The Management Center displays the most recently installed and required cumulative update for each Windows endpoint.
• The new job step “Determine variables” simplifies working with Linux variables.
• In the Automation Studio, frequently used VBScript functions are now available as native actions. This makes the transition to the post-VBScript era easier.
• New enrollment modes for the Management Agent increase security against unknown devices.
• Users from domains without a trust relationship will in future sign in via LDAPS instead of IPC$.

For security reasons, we always recommend switching to the latest version anyway, and with this potpourri of features and improvements, there are certainly enough reasons to tackle the update right away. Enjoy!