If you are unfamiliar with a security baseline, it is a collection of configuration settings that Microsoft recommends. Industry-standard configurations can help organizations roll out tested security infrastructure at reduced cost. In terms of Microsoft’s security baselines, the company keeps them updated and uses customer feedback to improve configurations. In terms of baselines for Intune, Microsoft says they allow greater manageability of Windows 10 through Mobile Device Management (MDM). All baseline configurations will be updated and managed on the cloud via Microsoft 365. For beginners, the security baseline is a good way to ensure protection across devices without having to get too nuanced.
Baseline
As mentioned, Intune MDM security baselines leverage Microsoft’s intelligent cloud solutions to provide a compliance-ready configuration:
In-depth reporting on the state of each setting in the baseline on every device in your organization A first-class policy interface using familiar Intune policies to easily customize and deploy a baseline with MDM A versioning experience to stay up-to-date when Microsoft updates security baseline recommendations
Intune users can generate security policies from baselines and move them across devices. Alternatively, policies can be customized to fit the demands of a specific organizations: “Administrators are faced with deploying the right security configuration from hundreds of available granular device management controls, without impacting operations or productivity. Microsoft Intune helps administrators navigate and select the right Windows 10 security features for their business by offering security baselines within the service.”
