Recent DiscussionsMost RecentNewest TopicsMost LikesSolutionsTagged:TagRe: Security Baselines for Linux C00kieMonster no change in plans. As for a formal request, I honestly don't know, let me try to find out. Re: Windows 10/11 22h2 Security Baseline missing in Intune David Bargna unfortunately I don't the control the Intune release details. Julia_Idaewor will have to comment on Intune. Re: Windows 11 22H2, Server 2022 Baselines - CIS Level 1 gregb the MS Security Baseline and the CIS Baseline are different, they do not align fully. We do collaborate with CIS but do not agree on all settings. Re: Security Baselines for Linux KrzysztofD no Linux plans for the SCT at this time. Re: Windows 10/11 22h2 Security Baseline missing in Intune Peter Daalmans - @JuliaI is the PM for Intune who handles this area. She will be better able to assist you with this. Re: Guidance on multiple window 10 builds and baselines Martin_Wildi sadly no, I would love to give you a timeline as to when it will release but we have been consumed with other baselines / events. The guidance above still stands. Here is a snip from the blog we have in the works. Filtering the Policies We most commonly see WMI filtering for applying baselines, while there are individuals out there who would rather do direct OU linking of the GPOs or security groups, we feel that adds additional workload and complexity and as long as you are smart with your WMI queries you shouldn’t have an issue. There are some WMI classes that are not optimized for querying, Win32_Product as an example. Should you use one of those classes you will see a performance impact as documented here. We have several extremely large customers using this method and it has been solid over the years. Documentation for creating basic Windows WMI filters can be found here. To further scope down the filtering to just a particular version of Windows you can use the version information found here and expand the query. Re: Policy Analyzer Command Line or any way to automate Policy Analyzer? Richard_Lazaro sorry, nothing additional at this time. Re: Security Baselines for Linux amazingdragi we don't have anything on the roadmap currently for Linux baselines as part of the SCT. Re: Guidance on multiple window 10 builds and baselines ixniz the comments in this thread are accurate about testing and using the latest but there isn't a dedicated blog on that topic yet. We do plan to release a blog just not sure when we will be able to get it completed. Re: Microsoft Edge v100 InTune Policy's MarkRobinson157 thank you for the feedback. I have made our team aware of this question and they should be responding in the next few days. Re: Win2019 standalone baseline testing (lab) Ian-Cervantez-Volusion it depends on what version you are referring to. Starting in version 1909 we no longer include Exploit Protection settings. The baselines are point in time and evolved with each version. For 2019 I would recommend using the 20H2 baseline. Re: Baselines in SCAP/Nessus audit format FLeven we will discuss internally but cannot commit to anything at this point Re: Baselines in SCAP/Nessus audit format FLeven it's not a request we get often at all. Typically customers will use the method posted here (Quickstart - Convert Group Policy into DSC - PowerShell | Microsoft Docs) to fill this need Re: Security Baseline for EDGE 97 is not updated NConnects we are working on the v97 release and hope to have something in the next 2 weeks. Re: REG_MULTI_SZ are not imported properlyNo ETA at this time, sorry.Re: Win2019 standalone baseline testing (lab)It looks like you are failing on the Exploit Protection portion of the script which we have removed from all baselines starting in the fall of 2019.Re: How to integrate Security baselines settings in my Windows 10 laptop Anusha_Sama unfortunately I cannot reproduce your issue and I tried all the options in the script without issue. Re: How to integrate Security baselines settings in my Windows 10 laptop Anusha_Sama I don't have the cycles to go through your screenshots line by line but depending on what you are comparing to (e.g. local policy) then you might have a setting on the machine that we do not have in the baseline. You can review the master spreadsheet within the release for the settings we cover/suggest. I'd suggest looking through the log file (listed at the end of the script completion) to better determine if the script is running fully. Re: Which script (s) to run..If after testing the results on a test server you want to them push the baselines out you can run the AD import, link the newly imported GPOs to your clients or servers via OU, WMI filtering, etcRe: How to integrate Security baselines settings in my Windows 10 laptop Anusha_Sama you can run the baseline-localinstall.ps1 -X (x=the baseline type you want) to install the security baseline onto to machine.
Recent Blog ArticlesNewest TopicsMost LikesTagged:TagSecurity Review for Microsoft Edge version 141 We have reviewed the new settings in Microsoft Edge version 141 and determined that there are no additional security settings that require enforcement. The Microsoft Edge version 139 security baselin...Windows 11, version 25H2 security baseline Microsoft is pleased to announce the security baseline package for Windows 11, version 25H2! You can download the baseline package from the Microsoft Security Compliance Toolkit, test the recommended...Security Review for Microsoft Edge version 140 We have reviewed the new settings in Microsoft Edge version 140 and determined that there are no additional security settings that require enforcement. The Microsoft Edge version 139 security baselin...Security baseline for Microsoft Edge version 139 We have reviewed the settings in Microsoft Edge version 139 and updated our guidance with the addition of one setting and the removal of one setting. A new Microsoft Edge security baseline package wa...Security Review for Microsoft Edge version 138 We have reviewed the new settings in Microsoft Edge version 138 and determined that there are no additional security settings that require enforcement. The Microsoft Edge version 128 security baselin...Security baseline for Windows Server 2025, version 2506 Microsoft is pleased to announce the June 2025 revision of the security baseline package for Windows Server 2025 (v2506)! You can download the baseline package from the Microsoft Security Compliance ...Security Review for Microsoft Edge version 137 We have reviewed the new settings in Microsoft Edge version 137 and determined that there are no additional security settings that require enforcement. The Microsoft Edge version 128 security baselin...Security Review for Microsoft Edge version 136 We are pleased to announce the security review for Microsoft Edge, version 136. We have reviewed the new settings in Microsoft Edge version 136 and determined that there are no additional security ...Security Review for Microsoft Edge version 135 We are pleased to announce the security review for Microsoft Edge, version 135. We have reviewed the new settings in Microsoft Edge version 135 and determined that there are no additional security ...Security Review for Microsoft Edge version 134 We have reviewed the new settings in Microsoft Edge version 134 and determined that there are no additional security settings that require enforcement. The Microsoft Edge version 128 security baselin...
MicrosoftMicrosoftMicrosoftMicrosoft
