What’s New with Hexnode: Q2 2026 Highlights

Another quarter has flown by, and true to tradition, we gathered on Wednesday, 15 July 2026, for our latest What’s New with Hexnode webinar!

We dived deep into an exciting line-up of new features, security upgrades, and long-awaited integrations designed to make managing endpoints smoother, faster, and more secure.

If you couldn’t make it to the live stream, don’t worry! You can catch the full recorded session on-demand anytime.

Watch the Q2 2026 Webinar Recording
Here is a quick round-up of the major highlights and features we discussed during our Q2 2026 release cycle.

1. Return to Service (RTS) for Apple Devices

Hexnode UEM now officially supports Apple’s Return to Service (RTS) feature for iOS 17+, iPadOS 17+, and visionOS 26.0+. Instead of resetting a device back to the manual factory “Hello” screen, RTS automates the recovery phase entirely. The device erases its data, reboots, automatically connects to a pre-configured Wi-Fi profile, and re-enrolls directly back into Hexnode UEM without any manual setup assistant steps.

How it helps:

Zero-Touch Turnaround: Ideal for shared device redeployment, employee offboarding, or routine IT refreshes.

Network Automation: A new Wi-Fi profile configuration page lets you enforce the removal of temporary deployment networks once a new corporate Wi-Fi profile is associated.

2. Technician Profile & Login Revamp

We have completely overhauled the Technicians and Roles workflow under the Admin tab. Instead of configuring security rules one by one for every single admin, you can now create a Technician Profile template containing all sign-in requirements, CAPTCHA limits, IP restrictions, allowed browsers, and customisable password policies, then apply it to multiple technicians instantly.

How it helps:

Portal Security: Lock down portal access by specifying allowed IP ranges and permitted web browsers.

Granular Control & UPN Support: Added support for User Principal Names (UPN) logins, a new “Read-Only Technician” default role for auditors, and role templates to quickly build out custom automation permissions.

3. Root and Intermediate Certificate Deployment for Windows

Windows administrators can now seamlessly push root and intermediate certificates (.cer or .crt formats) directly via Hexnode policies to Windows 10 and 11 endpoints. Admins can specify exactly where the certificate should live, including the System Store (Root/Intermediate) or the User Store.

How it helps:

Seamless Authentication: Eliminates the manual hassle of installing certificates needed to establish trust for enterprise Wi-Fi, VPNs, and SCEP deployments.

4. Bidirectional ServiceNow Integration

This powerful new integration bridges the gap between IT Service Management (ITSM) and Unified Endpoint Management. It enables a dual-way connection where ServiceNow admins gain full device context and can trigger remote actions (like Lock Device, Scan Device, or Install/Uninstall apps) directly from the ServiceNow console. Concurrently, Hexnode admins can view open ServiceNow incidents directly in the UEM portal.

How it helps:

Unified IT Workflows: Resolves support tickets faster by combining incident reports with live device status and immediate remediation actions, without switching consoles.

5. Android Password Token Management

Securing device-level permissions during setup is critical to ensuring remote actions work down the line. Hexnode has added a frictionless Auto-enable option within Android Enterprise enrollment profiles for devices running Android 9+. Admins can now choose to automatically enable the permission, require users to grant it, or suppress the prompt based on their deployment behaviour.

How it helps:

Touch-Free Deployments: Automatically grants the Password Token permission during enrollment with zero user interaction, guaranteeing that IT can always remotely clear or reset a forgotten device password when required.

6. Dynamic Device Grouping Enhancements

Organising your fleet just got a major intelligence upgrade. Dynamic Device Groups now support complex condition filters based on Policies (Name, Version, and Mapping types) as well as Incidents (unresolved counts across endpoints, apps, identity providers, and patches).

How it helps:

Hands-off Management: Devices automatically move into or out of groups as their policy status or incident severity changes, making it effortless to track rollout progress or isolate compromised endpoints instantly.

7. Enhanced Patch Automation & Deployment

Hexnode has expanded OS patch management with granular deployment controls for both Windows and macOS. Admins can now configure automatic patch retry intervals, install or uninstall updates directly from the Patches tab, override maintenance windows for critical security flaws, and execute pre- or post-deployment scripts for manual Windows updates.

How it helps:

Flexible Remediation: Gives IT teams total command over how and when patches land on devices, preventing system updates from interrupting end-user productivity while making sure urgent vulnerabilities are addressed immediately.

8. Policy Deployment Enhancements & Exclusions

We’ve brought deep execution reporting to the Policy Reports module, allowing admins to view clear device-level success states and precise failure remarks. More importantly, you can now add Policy Exclusions.

How it helps:

Tailored Targeting: Easily exclude specific devices, users, or Organisational Units (OUs) from a policy association without modifying the master target groups or altering the original policy rules.

What’s Next for Hexnode?

As we look past Q2, our engineering teams are already hard at work on what’s coming next down the pipeline:

• Windows Server Management
• Automated App Uninstallation for macOS
• On-Premises SCEP for macOS
• Font Size Controls for Kiosk Devices

Thank you to everyone who joined us for this edition! Stay tuned to our blog for deep dives into each of these new features over the coming weeks.