Mar 25 2020 03:52 AM
Hello all,
I say sorry in advance for this stupid question and by having asked it in a new conversation.
I want to know why on Intune we have the possibility to configure devices with those security baselines AND/OR with the (almost?) same settings on Device configuration profiles.
I mean, why? Two places? Would it be better to just have Security baselines settings or just Device configuration settings? This is confusing and in my company we realize that both are doing the job... or one settings is set to enabled on one side, then disabled on the other side.
Please consider closing this thread only when a proper answer is given.
Thank you!
Gianluca
Mar 27 2020 07:35 AM
Security baselines are designed with MSFT best practice configuration by default. Our device configuration profiles are all not configured by default.
you can use the baselines as a starting point, and supplement them with your own individual settings based on your business needs.
All of the settings in our security baselines are also available in the device configuration profiles – we’ve just pulled together the most important and preconfigured them.
Mar 27 2020 08:54 AM
Mar 27 2020 08:59 AM - edited Mar 27 2020 09:04 AM
@GianlucaSB feedback noted. We will see what we can do in future updates. I would also suggest getting this posted over on the Intune side as they dont monitor this channel and actually have their own baseline. They just consume the settings from us.
Mar 31 2020 05:28 AM