Forum Discussion
How to deploy Win11 Security Baseline with Intune?
Hi,
usually you can download the Security Baseline via SCT and deploy it via GPOs. How does that work with Intune? I only found this https://learn.microsoft.com/en-us/intune/intune-service/protect/security-baseline-settings-mdm-all?pivots=mdm-24h2 but it only describes the settings used by th ebaseline and which are available through Intune. To be honest I don't want do configure all those 1000 settings manually. Is there an easy and more comfortable way?
Hi heinzelrumpel,
You don’t need to configure Windows 11 Security Baseline settings manually in Intune.
In the Intune admin center, go to
Endpoint security > Security baselines > + Create profile > Windows 11 Security Baseline,
select the latest version (e.g., 24H2), customize if needed, and assign to device groups.
These baselines are maintained and updated automatically by Microsoft and align with the Security Compliance Toolkit recommendations.
https://learn.microsoft.com/en-us/intune/intune-service/protect/security-baselines
2 Replies
Thanks
Hi heinzelrumpel,
You don’t need to configure Windows 11 Security Baseline settings manually in Intune.
In the Intune admin center, go to
Endpoint security > Security baselines > + Create profile > Windows 11 Security Baseline,
select the latest version (e.g., 24H2), customize if needed, and assign to device groups.
These baselines are maintained and updated automatically by Microsoft and align with the Security Compliance Toolkit recommendations.
https://learn.microsoft.com/en-us/intune/intune-service/protect/security-baselines
