Security Baseline Creation

This guide will provide background information on creating a security baseline profile that will push specified security settings to the specific onboarded device group.

Role Requirements

Procedure Scope: Administrators

Required Group Membership: Admin.Security

Handbook Reference

Package: TBD

Domain: TBD

Modifies: TBD

Modifying a Device Configuration Profile

1. Navigate to the Security Baselines – Intune portal, locate and select the Security Baseline for Windows option.
   
2. A redirect will occur, locate, and select the + Create action. A pop-up will be generated with preconfigured platform and profile specifications, select Create to begin.
   
3. You will supply basic identification information such as the Name and Description for the profile. Select Next to proceed.
   
4. You will be directed to the settings catalog which has every conceivable setting for the baseline you are configuring. Selecting a dropdown will display the settings related to the category selected, you can configure the setting using the Radio Button or Value Field provided with the section. Select Next to proceed.
   
5. Scope tag selection can be utilized if desired, it is mainly leveraged with RBAC. Select Next to continue.
   
6. You will be able to configure Group Assignments or Exclusion for the policy. Locate and select the Add groups action. A pop-up will be displayed where you will supply the name of the group in the provided search bar, make sure to select the Group from the list. If done correctly they will be generated in the Selected Items section, finalize the addition by clicking Select. Select Next to proceed to revisions.
   
7. The review page will allow you to see all configured settings for the profile type creation process, if you detect a discrepancy at this stage make note of the section and select Previous to go back to make the necessary alterations before finalization. If everything checks out, select Create to publish the rule.
   
8. Upon successful creation the profile will show up in the list of all windows security baselines managed through Intune.
   

Need Assistance?