Skip to Content

MC1519854 Windows bulk enrollment token validity period is changing to 90 days

Summary

  • Microsoft Intune is reducing the maximum validity period for newly issued Windows bulk enrollment tokens from 180 days to 90 days.
  • This affects organizations that use Windows bulk enrollment through Windows Configuration Designer and have provisioning workflows dependent on longer-lived tokens.
  • Existing bulk enrollment tokens issued before the change will keep their original expiration dates.
  • IT admins should review provisioning processes and ensure newly issued tokens are used within the new 90-day validity window.

Primary Service: Intune
Admin Impact: Medium
User Impact: Low
Release Start: 15 Nov 2026
Release End: 31 Dec 2026
Services: Intune, Windows
Category: Plan for change
Tags: Admin Action, Feature Update

History

10/21/2026 Item Added to Message Center

Microsoft Message

As part of Microsoft’s Secure Future Initiative, Microsoft is reducing the maximum validity period for newly issued bulk enrollment tokens used for Windows bulk enrollment through Windows Configuration Designer from 180 days to 90 days. This change strengthens security by reducing the period these tokens remain valid. Tokens issued before the change will retain their original expiration dates.

Rollout schedule

This change will start to roll out in mid-November 2026 and is expected to be completed by the end of December 2026.

How this affects your organization

Our telemetry indicates that your organization has a bulk enrollment token with more than 90 days for expiration. Existing tokens issued before the change will retain their original expiration dates.

After this change, newly issued bulk enrollment tokens will have a maximum validity period of 90 days.

What to do to prepare

If your organization uses bulk enrollment for Windows devices, review your provisioning workflows and plan to use newly issued bulk enrollment tokens within their 90-day validity period. No action is required for existing tokens; existing tokens will retain their original expiration dates.

For more information, refer to Bulk enrollment for Windows devices.