Policy management

Using Microsoft Intune, a part of Microsoft Endpoint Manager, to manage your Windows 10 or 11 Enterprise desktops is all about standardizing and simplifying the management layer of your environment. In Chapter 9, Understanding Policy Management, we covered the basics of how MDM policies work on the client side. We also learned how to get started with MDM policy management either from scratch or with Group Policy analytics.

In this chapter, we will look at different ways to configure settings within Microsoft Intune. We will start with security baselines as those are best practices for securing your desktops.

Configuring a policy from the Endpoint Manager Security blade

You should start with a security baseline if your organization is ready for it. Let's say that your organization is already leveraging a Microsoft security baseline such as Center for Internet Security (CIS) Benchmarks. With GPOs today, you already know the impact that a security baseline...