Blog Post
Security Baseline for M365 Apps for enterprise v2512
Rick_Munck, this blog post is a bit confusing. There are 6 listed "updated settings" however based on the report provided in the Security Compliance Toolkit the only baseline setting with a recommendation is OLE Active Content Controls Updated recommended to be enforced to enabled. It is unclear what your recommendations are for the other 5 "updated settings". Considering there hasn't been an updated Security baseline uploaded to the Intune Endpoint Security tab since 2023, we need to know what recommendations are actually being made for these settings. Should all 5 other settings also be enforced or have they just been updated to reflect Microsoft current security standards? If so, it would be helpful in future blog posts to delineate between settings that require enforcement as opposed to settings that have been updated.
- Rick_MunckApr 21, 2026
Microsoft
mjsrc the correct settings are contained inside the GPO, not sure why the GP Reports did not render them but the GPO and blog match. We will look into the report issue. The blog reflects what should be enforced. Intune is separate, they are not part of our direct team but we partner and collaborate very closely with them. They are aware of the baseline version delta from what they have published and are working to release updated content to get current.