Intune Securoty Baseline for Windwos 10 and later Version 24H2 is finally here. This is a quick look at the policy and useful details on migration to the new policy.
- What you will see in the Security Baselines now
- What’s Available in Version 24H2
- Migrating from 23H2 Baseline
- Test Before Applying!
- Useful Links
What you will see in the Security Baselines now
When you go into the Baseline, you will see the previously created Baselines for your Organization. However, you can create the new Baseline, which will be created in the new version below.
What’s Available in Version 24H2
Since there are plenty of settings, please refer this URL to see all the settings and their default behavior.
https://learn.microsoft.com/en-us/mem/intune/protect/security-baseline-settings-mdm-all?pivots=mdm-24h2
Migrating from 23H2 Baseline
If you are planning a greenfield rollout of the 24H2 Baseline, you are all safe to start the testing and the other steps. However, if your fleet is already on 23H2 baseline, then it will be a migration from that to the latest.
Moving from this to the new 24H2 must be planned, tested, and rolled out to the fleet.
- Export the CSV of the current policy settings
When you select the current 23H2 Baseline policy, the Change Version option will be activated. With this, you can proceed with the next steps.
- Change Version feature will give you the option to auto-create a duplicate policy and apply the update to it without any assignments – This will provide the freedom of selecting your test ring before applying it to the wider device set.
Test Before Applying!
This is important as the policy settings may have changed and you need to understand the device behavior before rolling it out to a wider range of devices.
Useful Links
What certifications do Microsoft’s security baselines have?Manage security baseline profiles in Microsoft Intune
Discover more from EMS Route
Subscribe to get the latest posts sent to your email.
