How to secure devices in Intune | Top Configuration Tips

In this episode, I show you some of my recommended security controls for Microsoft Intune. Keep in mind these are recommendations and will not be able to be used in all environments due to unique constraints. Each control should be evaluated and tested appropriately.
I am currently writing these security baselines across the Microsoft Suite offerings (Azure AD, Teams, Exchange, SharePoint, OneDrive, Intune) and mapping them to CIS Controls and CMMC. If you would be interested in seeing more of this content, sign up for early access here: forms.office.com/Pages/Respon...
Blog And Matrix: tminus365.com/how-to-secure-d...
____________________
Give this video a thumbs up if you enjoyed watching 👍
#microsoft #security #intune #ciscontrols #cis #cybersecurity
Thanks for watching the video How to secure devices in Intune | Top Configuration Tips

[@MajesticBlueFalcon]

This is the type of detailed information I wish a lot of content creators could provide. You earned my subscription immediately after watching this.

[@t-minus365]

Thanks Jason!

[@wesleyjones6535]

Nick doesn't disappoint.

[@howardderham]

Thanks Nick, very informative again.

[@t-minus365]

thanks Howard!

[@SeiferAlmasy21]

Nice High-Level overview. Good content.

[@t-minus365]

Glad you liked it!

[@shaunjamesmoore]

Great work nick ! Only comment I have is we moved away from a bulk approach with security baselines .. we found breaking out security settings into individual policies easier to troubleshoot :)

[@t-minus365]

Thats fair! I can see that causing issues. Are you just breaking them out into configuration profiles then?

[@shaunjamesmoore]

@@t-minus365 Correct , this also made it easier to cross referernce when working to increase the MS Secure score and reporting

[@Eaglevision69]

Quick question:
Since registered devices are most likely known as personal devices that use applications to access corporate data and they are not fully enrolled. If you block personal devices from enrolling in the MDM solution, would it take effect on registered devices as well?

[@steff_ff3]

Hi, great video thank you! Currently learning all that Azure/Intune/Defender stuff to migrate all my clients to Business Premium. One quick(prolly dumb) question, about your first point, how can Intune tell if a new device is corporate or personal? If I want to enroll a device into Intune, it's not already in there so how can Intune know it's a corporate device and not a personal one?

[@t-minus365]

thats actually not a trivial concept. I wrote about that here: tminus365.com/corporate-vs-personal-devices-intune/

[@SmartnSuper]

Thanks

[@t-minus365]

Welcome!

[@IrlymMylros]

Hi Nick, Great video and excellent blog.
Considering buying your course on Udemy. You described your course coverage as basic configurations of intune (Begginers).
Any chance of producing a course that covers Intermediate and Advanced level for technical engineers covering configurations, support and day to day user trouble shooting methods. Many thanks

[@t-minus365]

I plan to do something like that in Q2 of this year. More advanced concepts + hybrid considerations

[@sanjeev.bhardwaj]

Please share this excel file