← All videos

Microsoft Intune Security Baseline | 7 Essential Security Policies

Watch on YouTubeGet the policy filesSubscribe

In this video

In this video, I walk through 7 essential Microsoft Intune security policies I recommend deploying as part of a strong Windows security baseline.

This is not a deep dive into every setting — instead, this video provides a practical overview of the core policies I typically deploy first to help secure Windows devices in Microsoft Intune.

Policies covered include: ✔ Windows Hello for Business ✔ BitLocker ✔ Personal Data Encryption (PDE) ✔ Windows LAPS ✔ Windows Firewall Baseline ✔ Chrome Enterprise SSO ✔ Microsoft Edge Enterprise SSO

These configurations are designed to improve endpoint security, strengthen identity protection, and create a solid foundation for Zero Trust device management.

All policy configurations shown in this video will be available on my GitHub repository below.

Chapters

  1. 00:00Introduction
  2. 01:17Understanding Security Baselines
  3. 03:52Windows Hello for Business Baseline
  4. 05:42BitLocker Baseline
  5. 07:00Personal Data Encryption (PDE)
  6. 08:20Windows LAPS Configuration
  7. 09:50Windows Firewall Baseline
  8. 11:09Chrome Enterprise SSO
  9. 12:25Microsoft Edge Enterprise SSO
  10. 14:31Final Thoughts