Forum Discussion

heinzelrumpel's avatar
heinzelrumpel
Brass Contributor
Nov 04, 2025

How to deploy Win11 Security Baseline with Intune?

Hi,

usually you can download the Security Baseline via SCT and deploy it via GPOs. How does that work with Intune? I only found this https://learn.microsoft.com/en-us/intune/intune-service/protect/security-baseline-settings-mdm-all?pivots=mdm-24h2  but it only describes the settings used by th ebaseline and which are available through Intune. To be honest I don't want do configure all those 1000 settings manually. Is there an easy and more comfortable way? 

baseline
Intune

1 Reply

  • AladinH's avatar
    AladinH
    Brass Contributor
    Nov 06, 2025

    Hi heinzelrumpel​,

    You don’t need to configure Windows 11 Security Baseline settings manually in Intune.

    In the Intune admin center, go to

    Endpoint security > Security baselines > + Create profile > Windows 11 Security Baseline,

    select the latest version (e.g., 24H2), customize if needed, and assign to device groups.

    These baselines are maintained and updated automatically by Microsoft and align with the Security Compliance Toolkit recommendations.

    https://learn.microsoft.com/en-us/intune/intune-service/protect/security-baselines 

Resources