Security baseline (FINAL) for Windows 10, version 21H1

[Rick_Munck]

We are pleased to announce the final release of the Windows 10, version 21H1 (a.k.a. May 2021 Update) security baseline package!

Please download the content from the Microsoft Security Compliance Toolkit, test the recommended configurations, and customize / implement as appropriate.

This Windows 10 feature update brings very few new policy settings. At this point, no new 21H1 policy settings meet the criteria for inclusion in the security baseline. We are, however, refreshing the package to ensure the latest content is available to you. The refresh contains an updated administrative template for SecGuide.admx/l (that we released with Microsoft 365 Apps for Enterprise baseline), new spreadsheets, .PolicyRules file, along with a script change (commented out the Windows Server options in the Baseline-LocalInstall.ps1 script)

Windows 10, version 21H1 is a client only release. Windows Server, version 20H2 is the current Windows Server Semi-Annual Channel release and per our lifecycle policy is supported until May 10, 2022.

As a reminder, our security baselines for the endpoint also include Microsoft 365 Apps for Enterprise, which we recently released, as well as Microsoft Edge and Windows Update.

Please let us know your thoughts by commenting on this post or via the Security Baseline Community.

[James van den Berg]

Thank you @Rick_Munck for Sharing with the Community 

[mohessu]

> Windows 10, version 21H1 is a client only release. 

Really?

[RAJUMATHEMATICSMSC]

Just now i downloaded security baseline. thanks for link

[xtian2210]

You may want to see a comprehensive list of how to configure the new GPO settings and Security baseline available for Windows 10 21H1

[Mark_Heitbrink]

> At this point, no new 21H1 policy settings meet the criteria for inclusion in the security baseline.

Wonder, why there is a "New Settings in Windows 10 and Windows Server v20H2.xlsx" containing 10 new policies ... 

Got it ... thats "NEW" in 21H1 not in Baseline ...

THX!

[Deleted]

@Mark_Heitbrink - what that means is that there are new Group Policy settings in Windows. However, none of them are being added to the security baseline - there's no recommendation that they need to be configured for security purposes. The "New Settings" spreadsheet lists those new policies. It's for information only, not because any action is required. 

[grantmm]

Is there any schedule on when this baseline will be available in Intune.