Chapter materials

Before we start configuring our policies, we should look at best practices to ensure our Windows devices are as secure as possible. For this, there are resources available that can offer guidance.

An example of this is the NCSC Windows guidance, available at https://www.ncsc.gov.uk/collection/device-security-guidance/platform-guides/windows.

You can also download a CSV file including all recommended settings or pre-configure Group Policy Objects (GPOs) that you can import directly into Intune (as covered in Chapter 2). These files are available here: https://github.com/ukncsc/Device-Security-Guidance-Configuration-Packs/tree/main/Microsoft/Windows.

You can find best practice recommendations from CIS regarding their Intune baselines at https://www.cisecurity.org/benchmark/intune.

The CIS downloads also include GPOs that you can import into Intune directly.

Tip

While simply enabling every setting would provide you with a quick, secure environment,...