Event banner
Event details
Is it recommended or best practice for security team to edit or update configurations in MEM or they should request the IT team to make required changes?
Matt_Call
Microsoft
MicrosoftYou can do it either way. We offer a built-in role and a tailored experience (Endpoint Security) to allow your Security Admins to manage settings, etc. Generally, this is going to come down to your organizational culture and workload assignment, and we strive to support both scenarios.
- In my experience, as the Intune guy, the security team will be tempted enable policy (e.g. a new security baseline) that clashes with existing policy configurations, due to lack of insight to the existing policies, and not being party to the testing of devices and policy during UAT. So any change to settings needs to be done in parallel with the ICT admins and the Service desk, so that potential clashes and breakages can be avoided, and impact assessed. I'd recommend a sign off process to ensure all parties are fully aware of changes.
