Forum Discussion

madurangac91's avatar
madurangac91
Copper Contributor
Jan 23, 2025

How to Getting Started with Intune: SOE Deployment, CIS Compliance, and Device Upgrades

We are planning to use Intune as our endpoint management tool and need guidance to get started. Our environment consists of:

Windows 10/Windows 11 Professional devices

Some Windows 10 Home Edition devices

macOS devices

Questions:

Where should we begin? My initial plan is to upgrade the Windows 10 Home devices to Windows 11 Professional.

How can we deploy a Standard Operating Environment (SOE) using Intune?

We need to comply with CIS benchmarks. Considering the numerous configurations required, configuring everything manually via device profiles seems time-consuming. Is it possible to use a pre-configured image and deploy it through Intune?

Your guidance and suggestions will be greatly appreciated!

 

  • Jeff Gilbert's avatar
    Jeff Gilbert
    Copper Contributor

    For CIS, check to see if your company has a CIS SecureSuite account with CIS. If so, you can download Intune build kits with all the policies pre-configured for you. 

  • rahuljindal-MVP's avatar
    rahuljindal-MVP
    Bronze Contributor

    Well for start, you are looking at manually upgrading the OS SKU to Pro or similar as Intune doesn’t support Home edition. Secondly, you cannot do image management, but apply the configuration and settings that form your SOE using Intune. CIS policies are usually available in json format if you are licensed for CIS subscription which can directly be imported in Intune. 

Resources