Security Baseline (User)

Overview

Purpose / Short Summary:

The Devicie Security Baseline (User) provides a starting point for organisations to begin their Endpoint security improvement journey, while remaining productive. It covers a wide range of items that encourage standardisation, improve administrators overview and improve device security with minimal impact to typical user activity.

Intune Description:

Inspired by CIS 3.0, while allowing for a secure, but productive experience. Configuration impacting Device Lock and Device Guard.

Scope:

This baseline should be applied to users, in conjunction with the “DEVICIE-PROD-Security Baseline (Device)” baseline.

Policy Impact Areas

When deployed, this policy will impact:

• Enforcing Device Lock, with minimum requirements

• Configuring Device Guard

Deployment Notes

1. Pre-Deployment Considerations:

   • Windows Hello for Business suitability

2. Post-Deployment Validation:

   • Verify Windows Defender configuration

   • Verify Windows Hello for Business being enabled, with 6+ number length required

Configuration Settings: