In this repo, you will find Intune profiles in JSON format, which can be used in setting up your Modern Workplace. All policies were created in Microsoft Intune and exported to share with the community. The baselines are a mix of best practice policies from the documentation, Zero Trust and our own experiences within Microsoft Intune and the Modern Workplace.
- CIS Microsoft Edge version 3.0.0 Level 1 Benchmarks
- CIS Microsoft Edge version 3.0.0 Level 2 Benchmarks
- CIS Intune for Windows Verson 4.0.0 Level 1
- CIS Intune for Windows Verson 4.0.0 Level 2
- CIS Visual Studio Code Version 1.0
- Android Enterprise
- Apple iOS / IpadOS baslines
- Apple MacOS baselines
- Windows compliance baseline
- Android compliance baseline
- iOS / IpadOS compliance baseline
- MacOS compliance baseline
- Linux compliance baseline
- Google Chrome Enterprise
- Windows Defender for Endpoint baseline
- Linux defender for endpoint baseline
- Windows Endpoint security baseline
- Windows 11 Modern Workplace baseline
- Windows 11 AI baseline
- Windows 365 Enterprise baseline
- Windows Azure Virtual Desktop baseline
These baseline profiles are regularly reviewed and modified based on new developments. Always test the baseline profiles in your own environment before deploying them to production! The baseline policies are a mix of best practices and my own experience regarding configurations. The CIS benchmarks are a mapping to Intune policies from the official CIS benchmark documentation. Currently, the baseline has 739 profiles which can be imported into Microsoft Intune!
The baseline files are exported with the great tool of Micke-K's called IntuneManagement See his repo here: https://github.com/Micke-K/IntuneManagement With this tool the JSON files can be imported into your Intune environment!
These baseline profiles are regularly reviewed and modified based on new developments. Always test the baseline profiles in your own environment before deploying them to production!
- Add CIS for Office Level 1 & 2 benchmarks
- Add more Windows 11 Management profiles
- Add more iOS Baseline profiles
- Add some Android baseline profiles
- Add more MacOS baseline profiles
- Add more Google Chrome Enterprise profiles
- Add FireFox profiles
"Would you like to get in touch with me or help with the baseline? Then send an email to baselines@wolkenman.nl."
