EPM for Windows and Mac (Cloud and Pathfinder) 26.1.1495

Improved identity authentication for Windows and Mac by updating Entra ID user group information when EPM policies are updated. The periodic refresh of Entra ID user group data is now configurable between 4 and 24 hours.

For more information, see Identity authentication.

Added Identity fields to Windows messages so customers can configure how identity authentication messaging is presented to end users on the endpoint.
To see this setting, go to a message and expand Message: Body Options.

For more information, see Identity authentication.

• Added macOS Application Definition API
  Added Policy Editor APIs (via the Management API) to read, create, and delete macOS application definitions. Using the API, customers can edit policies programmatically.

• Updated Application Description validation
  Removed duplicate Application Description validation and added an Application Index field. This allows customers to correlate applications in the request payload with specific errors returned in responses from the Windows or macOS Policy Editor API endpoints.

We’ve updated settings to be interactive even when the policy is in read-only mode.

• Message previews
  Can now click Preview when accessing Windows and macOS messages.

  

• Application Rule filters
  The Rule Filters count is clickable in Windows and macOS Application Rules pages, allowing quick access to filters applied to an app rule, including when the policy is opened in read-only mode.

  

Updated Windows QuickStart templates to include multi‑language translations for the Reason field used in Messages.

The Applications page now gives you more flexibility in how and when you access your data.
You can refine filters before running a query, then execute it on demand when you’re ready. This helps reduce unnecessary processing and ensures results reflect exactly what you need.
Downloading data is now even easier. You can generate a CSV on demand without running the query first. The Prepare Download modal also includes an Available Records count, so you can confirm how many records match your filters before exporting.
Together, these enhancements streamline your workflow and provide clearer visibility into your application data.

ℹ️

For more information, see

• Download a query | Pathfinder
• Run a query | Pathfinder
• Download a query | EPM-WM Cloud
• Run a query | EPM-WM Cloud

We’ve introduced a powerful new custom time and date filter on the Applications page, giving you greater precision when analyzing your data.
You can now select a specific start and end date and time within the last 90 days, allowing you to focus on exact activity windows; whether you’re investigating an incident, reviewing a deployment, or tracking changes.
When loading a saved Applications view, the selected custom time range is now clearly displayed, ensuring full visibility into the timeframe being used before you run a query or download data.
This enhancement gives you sharper insights, clearer context, and greater confidence in your analysis.

ℹ️

For more information, see

• Set a custom date range filter | Pathfinder
• Set a custom date range filter | EPM-WM Cloud

Improved the error message on the Events page for high‑volume queries that cannot return results, so that users are clearly advised to reduce the time range (for example, to the last 7 days) before running the query again.

• Updated toast and page notifications: Added clarity to the toast and notifications on the Applications page, so that the customer knows to input a custom start and end date when the Custom Time Range filter has been selected.
• Updated the notification to input the custom date and time range when downloading from the Applications page.
• Updated Custom Date & Time Range in Saved Applications View & Load Applications View within Analytics, Applications page
• Enhanced the saved views in the Users page; customers have visibility of the columns and filters saved.

Enhanced visibility of BT Recommended Views by adding the BT logo to the root folder.

Enhanced Analytics so that it will display references to the Computer Group name even after its deleted.

Users will now receive notifications when their computer logs and CSV files are ready for download. These notifications will appear both in the panel and in the new "All Notifications" view, ensuring users are promptly informed when their requested files are available.

Added email notifications to new JIT Application Access and JIT Admin requests. EPM users can now opt out to receive email alerts when new requests are raised, with direct links to the relevant JIT request for quick action. Notifications are sent only to users with approval permissions, and each user can enable or disable these notifications in their settings.

Updated the headings for 'Policy Assigned to Group' and 'Current Applied Policy' on the computer details policy tab to emphasize that they are headers for the 'Policy' and 'Revision' fields.

• API security hardening: Aligned API security headers by refining cache-control (added max-age=0), standardizing CSP with an explicit object-src directive on all responses, and enabling HSTS with subdomain coverage.
• Updated audit and event log endpoints to verify that the authenticated caller is associated with the agentID for which audit activity is being submitted.
• Updated the JIT admin access request endpoints to verify that the authenticated caller is associated with the agentId for which status inquiries or requests are being submitted.
• Updated Dockerfiles to ensure that the last USER is a USER other than root.
• Restricted the AuthorizationRequestAudit endpoint to admins only.

Updated Webhook URL validation to prevent '.' characters and updated colon validation to check for a count greater than 0, rather than a count greater than 1.