intune - laptop policies for staff

[mdrabble]

To try and save me re-inventing the wheel and spending ages looking at the multitude of options etc, would anyone be willing to share how they have configured/locked down their laptops for staff?

 

Cheers 🙂

[highsky]

Entra joined?

You can explore these:

 

 

https://github.com/SkipToTheEndpoint/OpenIntuneBaseline

 

Hybrid?

You can export you gpos as xml, import them to intune, and then select what you want to migrate to intune and what to keep if still using DC..

[mjhardisty]

These are a series of pre-built configuration policies designed for Education:

 

https://github.com/rbalsleyMSFT/IntuneScripts/tree/main/ConfigurationProfileSettings

 

I would recommend joining the Microsoft EDU Endpoint Office hours group too.

[mjhardisty]

I wouldn't recommend exporting existing GPOs ... don't bring the clutter with you.

[FN-GM]

On 20/03/2025 at 07:53, mdrabble said:

To try and save me re-inventing the wheel and spending ages looking at the multitude of options etc, would anyone be willing to share how they have configured/locked down their laptops for staff?

 

Cheers 🙂

 

Look at all the CIS policies. They are free and proven to significantly increase security. Also Microsoft have security baseline policies out of the box.