![]() Next, open the GP Reports folder where you will find two GPO Reports for the Internet Explorer 11 Settings in the Baseline. Once the archive is downloaded, open the archive and navigate to the root of the Windows-10-Windows Server-v20H2-Security-Baseline-FINAL folder. Download options for IE 11 security baseline. For this demonstration, I’m only interested in downloading the Windows 10 Version 20H2 and Windows Server Version 20H2 Security Baseline.zip (1), so I’ll select that and click the Next button (2) to download it.įigure 2. Once the page loads, you’ll be presented with several options to download (see Figure 2). So, my hope was that the Settings Catalog truly made this process less painful and more manageable.īefore we can start, we need the documented IE11 baseline from Microsoft, which is available from the Microsoft Security Compliance Toolkit downloads: Download Microsoft Security Compliance Toolkit 1.0 from Official Microsoft Download Center Even if you have countless hours to construct an MDM policy by hand as a custom policy or JSON payload, it isn’t an easy win.Īnd you’re not done there, custom, hand-coded policies are cumbersome to maintain for the average administrator. The reason I felt this was important is that the current workflow for configuring Intune is horrid. I wanted to put the Settings Catalog through its paces on a real-world example and create an Internet Explorer 11 security baseline and see what I could (and could not) configure via the Settings Catalog. With some background out of the way, it’s time for the rubber to hit the road. ![]() But at the end of the day, these settings in the Intune console are still programming the same MDM settings on the client device but the experience is much more digestible for the administrator. ![]() As it turned out, rather than improve the situation, these technologies created a cumbersome mess to manage.Īfter working through the IE11 baseline use case, I can say that the Settings Catalog appears to have achieved what its predecessors couldn’t.Įverything from the underlying Graph APIs in the Intune backend to the administrator user interface is separate and built new from scratch. Then Microsoft introduced ADMX backed settings – a new hope for a better experience and more settings coverage. First, there were configuration templates and custom settings (see figure 1). Under the hood, the Intune Settings Catalog makes use of MDM settings, but the ride is much more comfortable.įor those of you who haven’t had an opportunity to configure Windows on Intune with the pre-existing tools, let me just say, it is time-consuming, and depending on the requirements it can be a very unfamiliar process that’s difficult to optimize.īefore the release of the Settings Catalog, configuring Intune’s settings was managed with a set of different technologies that Microsoft had built over the years to configure Windows devices. The framework was built from the ground up with the goal of simplifying the process of configuring Windows on Intune along with the hope of bringing the experience more in line with other configuration workflows that already existed on Intune. In early 2021, Microsoft launched a new framework for configuring Windows, called the Intune Settings Catalog. For those of you who manage legacy web apps that require IE 11 on a modern desktop, the Settings Catalog experience is a real improvement over the old workflow to configure the browser using Intune. In this post, I’m going to demonstrate how to use the preview version of the Intune Settings Catalog to create an Internet Explorer 11 baseline.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |