Event banner
Event details
MS publish a new security baseline for each new OS release, but the Windows security baseline in Intune remains the same. Can you publish baselines applicable to OS releases that we can then target to different releases in Intune?
Mike-Danoski
Microsoft
MicrosoftThanks for the question Trevor. We have updates to the baselines coming soon. I believe when new recommendations are available, they are backwards compatible to previous versions and should contain the latest security considerations.
- It's great that updates are coming, but the update schedule for the Intune Windows security baseline doesn't follow the release schedule for the OS (same for other baselines). The last two baseline updates in Intune are Nov 2021 and Dec 2020. Unless the Intune baselines are updated in sync with the OS release schedule, you effectively have to deploy any delta security policies separately, so the baselines are no longer fully baselines at that point and require additional policy deployments. A big thumbs up if you can update the Intune baselines in sync with the release dates of what they are protecting.