How to deploy Win11 Security Baseline with Intune?

Hi heinzelrumpel​,

You don’t need to configure Windows 11 Security Baseline settings manually in Intune.

In the Intune admin center, go to

Endpoint security > Security baselines > + Create profile > Windows 11 Security Baseline,

select the latest version (e.g., 24H2), customize if needed, and assign to device groups.

These baselines are maintained and updated automatically by Microsoft and align with the Security Compliance Toolkit recommendations.

https://learn.microsoft.com/en-us/intune/intune-service/protect/security-baselines