How to deploy Win11 Security Baseline with Intune?
Hi, usually you can download the Security Baseline via SCT and deploy it via GPOs. How does that work with Intune? I only found this https://learn.microsoft.com/en-us/intune/intune-service/protect/security-baseline-settings-mdm-all?pivots=mdm-24h2 but it only describes the settings used by th ebaseline and which are available through Intune. To be honest I don't want do configure all those 1000 settings manually. Is there an easy and more comfortable way?
Where to find CIS Benchmarks/Baselines for Windows 10
Hello I am trying to locate CIS benchmarks/compliance baselines specifically targeting Windows 10. This documentation implies that these exist somewhere within the scope of the Azure/Intune/Endpoint/Defender/Security portals: https://learn.microsoft.com/en-us/microsoft-365/security/defender-vulnerability-management/tvm-security-baselines?view=o365-worldwide "Security baselines provide support for Center for Internet Security (CIS) benchmarks for Windows 10, Windows 11, and Windows Server 2008 R2 and above, as well as Security Technical Implementation Guides (STIG) benchmarks for Windows 10 and Windows Server 2019" However, I have been unable to locate these. The documentation says: "Go to Vulnerability management > Baselines assessment in the Microsoft 365 Defender portal". However, the menu item "Baselines assessment" does not show at all in my view of that portal using a GA login. I have tried activating a trial which I thought may hold the answer, but this does not appear to have surfaced anything new: https://security.microsoft.com/tvmPremiumTrial180daySolution We're a UK-based CSP customer, if that matters. I would be grateful for any advice as to where we can find these benchmarks and make use of them for our endpoint managed devices. If these benchmarks represent a feature which is yet to be made generally available, any information as to timelines to a release would also be immensely useful. Many thanks in advance, Robert