MDE configuration with Baseline or Configuration Profiles?

[John Matrix]

Hello everyone,

what is currently best practise to deploy settings for MDE like (ASR, Tamper Protection, Smart Screen, etc.).

Since there are settings within the Endpoint Baseline and also within the Configuration Profiles, which one should be used?

Thanks.

Cheers,

John

[#2]

@John Matrix
For Best Practices, you can leverage Microsoft Defender for Endpoint Baseline from Endpoint Security blade in Microsoft Intune. Here you will find the settings configured as per best practices only.