Policy management with Microsoft Intune

Hi Viktor! Thanks so much for your question. So in general, we recommend admins to: 1) Start with the built-in baseline templates (Endpoint Security > Security baselines) if you are looking to use security baselines since they are curated directly from the baseline owners & security experts. 2) Then endpoint security templates (Endpoint Security > Select template area) are specifically for security related scenarios and have curated settings related to each of those areas (i.e. AV, Firewall, Bitlocker) with input from the Defender team to complete the sec admin / sec ops story. 3) Then we have settings catalog which are individual settings to complement the ones in baselines & templates plus all the windows settings available through shopping cart experience. 4) Then we have ADMX templates to fill in any gaps from what is not there in ADMX. As we build up settings catalog (which just launched earlier this year), we encourage admins to use this over the ADMX templates. There may be some overlap of settings available in the different places I mentioned but we are working to make sure that the right capabilities are available in the places if that makes sense. Hope that helps!