Connect with experts and redefine what’s possible at work – join us at the Microsoft 365 Community Conference May 6-8. Learn more >
Recent DiscussionsMost RecentNewest TopicsMost LikesSolutionsTagged:TagRe: Security Baselines for Linux C00kieMonster no change in plans. As for a formal request, I honestly don't know, let me try to find out. Re: Windows 10/11 22h2 Security Baseline missing in Intune David Bargna unfortunately I don't the control the Intune release details. Julia_Idaewor will have to comment on Intune. Re: Windows 11 22H2, Server 2022 Baselines - CIS Level 1 gregb the MS Security Baseline and the CIS Baseline are different, they do not align fully. We do collaborate with CIS but do not agree on all settings. Re: Security Baselines for Linux KrzysztofD no Linux plans for the SCT at this time. Re: Windows 10/11 22h2 Security Baseline missing in Intune Peter Daalmans - @JuliaI is the PM for Intune who handles this area. She will be better able to assist you with this. Re: Guidance on multiple window 10 builds and baselines Martin_Wildi sadly no, I would love to give you a timeline as to when it will release but we have been consumed with other baselines / events. The guidance above still stands. Here is a snip from the blog we have in the works. Filtering the Policies We most commonly see WMI filtering for applying baselines, while there are individuals out there who would rather do direct OU linking of the GPOs or security groups, we feel that adds additional workload and complexity and as long as you are smart with your WMI queries you shouldn’t have an issue. There are some WMI classes that are not optimized for querying, Win32_Product as an example. Should you use one of those classes you will see a performance impact as documented here. We have several extremely large customers using this method and it has been solid over the years. Documentation for creating basic Windows WMI filters can be found here. To further scope down the filtering to just a particular version of Windows you can use the version information found here and expand the query. Re: Policy Analyzer Command Line or any way to automate Policy Analyzer? Richard_Lazaro sorry, nothing additional at this time. Re: Security Baselines for Linux amazingdragi we don't have anything on the roadmap currently for Linux baselines as part of the SCT. Re: Guidance on multiple window 10 builds and baselines ixniz the comments in this thread are accurate about testing and using the latest but there isn't a dedicated blog on that topic yet. We do plan to release a blog just not sure when we will be able to get it completed. Re: Microsoft Edge v100 InTune Policy's MarkRobinson157 thank you for the feedback. I have made our team aware of this question and they should be responding in the next few days. Re: Win2019 standalone baseline testing (lab) Ian-Cervantez-Volusion it depends on what version you are referring to. Starting in version 1909 we no longer include Exploit Protection settings. The baselines are point in time and evolved with each version. For 2019 I would recommend using the 20H2 baseline. Re: Baselines in SCAP/Nessus audit format FLeven we will discuss internally but cannot commit to anything at this point Re: Baselines in SCAP/Nessus audit format FLeven it's not a request we get often at all. Typically customers will use the method posted here (Quickstart - Convert Group Policy into DSC - PowerShell | Microsoft Docs) to fill this need Re: Security Baseline for EDGE 97 is not updated NConnects we are working on the v97 release and hope to have something in the next 2 weeks. Re: REG_MULTI_SZ are not imported properlyNo ETA at this time, sorry.Re: Win2019 standalone baseline testing (lab)It looks like you are failing on the Exploit Protection portion of the script which we have removed from all baselines starting in the fall of 2019.Re: How to integrate Security baselines settings in my Windows 10 laptop Anusha_Sama unfortunately I cannot reproduce your issue and I tried all the options in the script without issue. Re: How to integrate Security baselines settings in my Windows 10 laptop Anusha_Sama I don't have the cycles to go through your screenshots line by line but depending on what you are comparing to (e.g. local policy) then you might have a setting on the machine that we do not have in the baseline. You can review the master spreadsheet within the release for the settings we cover/suggest. I'd suggest looking through the log file (listed at the end of the script completion) to better determine if the script is running fully. Re: Which script (s) to run..If after testing the results on a test server you want to them push the baselines out you can run the AD import, link the newly imported GPOs to your clients or servers via OU, WMI filtering, etcRe: How to integrate Security baselines settings in my Windows 10 laptop Anusha_Sama you can run the baseline-localinstall.ps1 -X (x=the baseline type you want) to install the security baseline onto to machine.
Recent Blog ArticlesMost RecentMost LikesRe: Windows 11, version 24H2 security baseline Hi cRESteRE I will pass this on to the Intune team. I know they are working updates to the baseline. Re: Windows 11, version 24H2 security baseline schrewst I have not seen or heard that before and it would require troubleshooting. Security review for Microsoft Edge version 133 We are pleased to announce the security review for Microsoft Edge, version 133. We have reviewed the new settings in Microsoft Edge version 133 and determined that there are no additional security ...Re: Windows 11, version 24H2 security baseline mktl73 Not a typo, let's call it something you found that we will inquire about. Once you enable the parent setting it's automatically setting the value to 3. So looks like Disabled and Not Configure...Windows Server 2025, security baseline Microsoft is pleased to announce the release of the security baseline package for Windows Sever 2025! Please download the content from the Microsoft Security Compliance Toolkit, test the recommended ...Security review for Microsoft Edge version 132 We have reviewed the new settings in Microsoft Edge version 132 and determined that there are no additional security settings that require enforcement. The Microsoft Edge version 128 security baselin...Re: Windows 11, version 24H2 security baseline RBITConsults those both were intentional. The first one for auditing CFA we did not feel putting an audit only setting in the baseline was the right call. If an org wanted to move to enabling CFA ...Re: Windows 11, version 24H2 security baseline RippieUK I don't know the answer to that. I typically refer to What's new in Microsoft Intune | Microsoft Learn when I have Intune baseline questions. I am also tagging @JuliaI who should be able to...Re: Security Baseline for M365 Apps for enterprise v2412 MZONDERLAND The Intune team is currently developing the new baseline version, which is on track for release within the next couple of months. The team is dedicated to maintaining the highest standard...Security Baseline for M365 Apps for enterprise v2412 Microsoft is pleased to announce the release of the recommended security configuration baseline settings for Microsoft 365 Apps for enterprise, version 2412. Please download the content from the Micr...
MicrosoftMicrosoftMicrosoftMicrosoft
