IntuneHydrationKit
1.1.1
Hydrates Microsoft Intune tenants with best-practice baseline configurations including policies, compliance packs, enrollment profiles, dynamic groups, security baselines, and conditional access starter packs.
Minimum PowerShell version
7.0
Installation Options
Owners
Copyright
(c) 2026 Jorgeasaurus. All rights reserved.
Package Details
Author(s)
- Jorgeasaurus
Tags
Intune Microsoft365 Graph Baseline Compliance Security Autopilot MDM Endpoint MEM Azure EntraID ConditionalAccess DeviceManagement
Functions
Connect-IntuneHydration Get-GraphErrorMessage Get-ObfuscatedTenantId Get-OpenIntuneBaseline Get-ResultSummary Import-CISBaseline Import-HydrationSettings Import-IntuneAppProtectionPolicy Import-IntuneBaseline Import-IntuneCompliancePolicy Import-IntuneConditionalAccessPolicy Import-IntuneDeviceFilter Import-IntuneEnrollmentProfile Import-IntuneMobileApp Import-IntuneNotificationTemplate Import-IntuneWinGetApp Initialize-HydrationLogging Invoke-IntuneHydration New-HydrationResult New-IntuneDynamicGroup New-IntuneStaticGroup Test-HydrationKitObject Test-IntunePrerequisites Write-HydrationLog
PSEditions
Dependencies
-
- Microsoft.Graph.Authentication (>= 2.0.0)
Release Notes
## v1.1.1
- **Delete mode:** Tightened template-scoped deletes across hydration workloads so platform-scoped deletes fail closed and only known kit templates are removed.
- **Enrollment profiles:** Fixed Autopilot and Enrollment Status Page idempotency to skip same-name existing profiles, including untagged profiles created before hydration tagging.
- **Compliance and CIS baselines:** Fixed platform routing safeguards so mismatched template metadata warns instead of sending policies to the wrong Graph endpoint.
- **Graph batching:** Improved batch response correlation, retry handling, and indeterminate create reporting for missing or transient Graph responses.
- **WinGet apps:** Blocked detection and requirement script paths from escaping the template root.
- **Groups:** Avoided generated mail nickname collisions with deterministic suffixes.
- **OpenIntuneBaseline parity:** Switched the weekly parity workflow to direct `git diff` artifacts.
FileList
- IntuneHydrationKit.nuspec
- IntuneHydrationKit.psd1
- IntuneHydrationKit.psm1
- Private\Auth\Connect-HydrationGraphViaBrowser.ps1
- Private\Auth\ConvertTo-HydrationOAuthScope.ps1
- Private\Auth\Get-HydrationAuthParameters.ps1
- Private\Auth\Get-HydrationBrowserAuthLogoDataUri.ps1
- Private\Auth\Get-HydrationFreeTcpPort.ps1
- Private\Auth\Get-HydrationGraphAccessIssue.ps1
- Private\Auth\Get-HydrationGraphEnvironmentInfo.ps1
- Private\Auth\Get-HydrationGraphScopes.ps1
- Private\Auth\Get-HydrationGraphWorkloadAccessProbe.ps1
- Private\Auth\Get-HydrationOAuthCallbackResult.ps1
- Private\Auth\Get-HydrationTenantIdFromAccessToken.ps1
- Private\Auth\Get-HydrationTokenViaBrowser.ps1
- Private\Auth\Get-PremiumP2ServicePlans.ps1
- Private\Auth\Invoke-HydrationOAuthTokenRequest.ps1
- Private\Auth\New-HydrationBrowserAuthResponseHtml.ps1
- Private\Auth\New-HydrationCodeChallenge.ps1
- Private\Auth\New-HydrationCodeVerifier.ps1
- Private\Auth\New-HydrationOAuthAuthorizeUri.ps1
- Private\Auth\Set-HydrationConnectionState.ps1
- Private\Auth\Templates\BrowserAuthResponse.html
- Private\Auth\Test-ConditionalAccessPolicyRequiresP2.ps1
- Private\Auth\Test-ConditionalAccessPolicyRequiresPreview.ps1
- Private\Auth\Test-HydrationGraphWorkloadAccess.ps1
- Private\Auth\Test-HydrationMobileAppsIncludeWinGet.ps1
- Private\Auth\Test-WindowsDriverUpdateLicense.ps1
- Private\Baselines\Get-BaselineImportMetadata.ps1
- Private\Baselines\Get-CISBaselineTemplateNameSet.ps1
- Private\Baselines\Resolve-CISBaselineTemplatePlatform.ps1
- Private\Configuration\Get-HydrationSettingsSchema.ps1
- Private\Configuration\Get-HydrationWorkloadCatalog.ps1
- Private\Configuration\New-HydrationExecutionSetting.ps1
- Private\Configuration\Resolve-HydrationExecutionSettings.ps1
- Private\Configuration\Resolve-HydrationSettingsSchema.ps1
- Private\Configuration\Resolve-HydrationWorkloadPlan.ps1
- Private\Configuration\Test-HydrationOperationSettings.ps1
- Private\Configuration\Write-HydrationExecutionSettingsSummary.ps1
- Private\Graph\Get-GraphErrorMessage.ps1
- Private\Graph\Get-GraphPagedResults.ps1
- Private\Graph\Get-GraphStatusCode.ps1
- Private\Graph\Get-HydrationBatchRetryAfterSeconds.ps1
- Private\Graph\Invoke-GraphBatchOperation.ps1
- Private\Graph\Invoke-HydrationGraphRequest.ps1
- Private\Graph\Resolve-HydrationBatchResponse.ps1
- Private\Graph\Test-GraphResourceExists.ps1
- Private\Graph\Test-HydrationBatchStatusRetryable.ps1
- Private\Groups\ConvertTo-HydrationGroupBody.ps1
- Private\Groups\Get-HydrationGroupBatchResponses.ps1
- Private\Groups\Get-HydrationGroupDefinitionsFromTemplates.ps1
- Private\Groups\Get-HydrationGroupLookupUri.ps1
- Private\Groups\Invoke-GroupBatchImport.ps1
- Private\Groups\Invoke-HydrationGroupStep.ps1
- Private\Groups\New-HydrationBatchCorrelationFailure.ps1
- Private\Groups\New-HydrationGroupMailNickname.ps1
- Private\Groups\Resolve-HydrationIndeterminateGroupCreate.ps1
- Private\Groups\Resolve-HydrationMissingGroupExistence.ps1
- Private\Groups\Select-HydrationGroupLookupMatch.ps1
- Private\Hydration\Add-HydrationDryRunResult.ps1
- Private\Hydration\Add-HydrationStepResults.ps1
- Private\Hydration\Deduplicate-HydrationDeleteCandidates.ps1
- Private\Hydration\Format-HydrationDisplayMessage.ps1
- Private\Hydration\Get-HydrationDeleteCandidates.ps1
- Private\Hydration\Get-HydrationMarkerSet.ps1
- Private\Hydration\Get-HydrationTenantDisplay.ps1
- Private\Hydration\Get-ObfuscatedTenantId.ps1
- Private\Hydration\Get-ResultSummary.ps1
- Private\Hydration\Invoke-HydrationDeleteCandidates.ps1
- Private\Hydration\New-HydrationDescription.ps1
- Private\Hydration\New-HydrationResult.ps1
- Private\Hydration\Resolve-HydrationDeleteDecision.ps1
- Private\Hydration\Resolve-HydrationMarkedDeleteCandidate.ps1
- Private\Hydration\Save-HydrationGeneratedScript.ps1
- Private\Hydration\Select-HydrationExistingMatch.ps1
- Private\Hydration\Test-HydrationKitObject.ps1
- Private\Hydration\Test-HydrationTemplateNameMatch.ps1
- Private\Hydration\Write-HydrationExecutionSummary.ps1
- Private\Imports\Get-AppProtectionEndpointInfo.ps1
- Private\Imports\Import-HydrationAutopilotProfile.ps1
- Private\Imports\Import-HydrationDepEnrollmentProfile.ps1
- Private\Imports\Import-HydrationDevicePreparationPolicy.ps1
- Private\Imports\Import-HydrationEnrollmentStatusPage.ps1
- Private\MobileApps\Get-HydrationMobileAppBaseName.ps1
- Private\MobileApps\Get-HydrationMobileAppDisplayName.ps1
- Private\MobileApps\Get-HydrationMobileAppExistingMatch.ps1
- Private\MobileApps\Get-HydrationMobileAppNameVariant.ps1
- Private\MobileApps\Get-MobileAppImportConfiguration.ps1
- Private\MobileApps\Get-MobileAppTemplateNameSet.ps1
- Private\MobileApps\Get-WindowsLegacyMobileAppTemplateId.ps1
- Private\MobileApps\Test-HydrationMobileAppNameInSet.ps1
- Private\MobileApps\Test-IsWinGetTemplateFile.ps1
- Private\Templates\Get-FilteredTemplates.ps1
- Private\Templates\Get-HydrationTemplates.ps1
- Private\Templates\Get-TemplateDisplayNames.ps1
- Private\Tui\Clear-HydrationTuiScreen.ps1
- Private\Tui\Confirm-HydrationTuiChoice.ps1
- Private\Tui\ConvertTo-HydrationTuiImportMap.ps1
- Private\Tui\ConvertTo-HydrationTuiOperationOption.ps1
- Private\Tui\ConvertTo-HydrationTuiPlatformList.ps1
- Private\Tui\Get-HydrationTuiAsciiArt.ps1
- Private\Tui\Get-HydrationTuiConsoleInnerWidth.ps1
- Private\Tui\Get-HydrationTuiEnvironmentOption.ps1
- Private\Tui\Get-HydrationTuiGradientLine.ps1
- Private\Tui\Get-HydrationTuiGradientString.ps1
- Private\Tui\Get-HydrationTuiImportOption.ps1
- Private\Tui\Get-HydrationTuiKeyAction.ps1
- Private\Tui\Get-HydrationTuiOperationOption.ps1
- Private\Tui\Get-HydrationTuiPalette.ps1
- Private\Tui\Get-HydrationTuiPlatformOption.ps1
- Private\Tui\Invoke-HydrationTui.ps1
- Private\Tui\Read-HydrationTuiEnvironment.ps1
- Private\Tui\Read-HydrationTuiImport.ps1
- Private\Tui\Read-HydrationTuiInput.ps1
- Private\Tui\Read-HydrationTuiMultiOption.ps1
- Private\Tui\Read-HydrationTuiOperation.ps1
- Private\Tui\Read-HydrationTuiPlatform.ps1
- Private\Tui\Read-HydrationTuiSingleOption.ps1
- Private\Tui\Resolve-HydrationTuiOptionSelection.ps1
- Private\Tui\Show-HydrationTuiHeader.ps1
- Private\Tui\Show-HydrationTuiOptionPanel.ps1
- Private\Tui\Show-HydrationTuiPanel.ps1
- Private\Tui\Show-HydrationTuiReview.ps1
- Private\Tui\Show-HydrationTuiSelect.ps1
- Private\Tui\Test-HydrationTuiArrowKeySupport.ps1
- Private\Tui\Test-HydrationTuiCancelValue.ps1
- Private\Tui\Test-HydrationTuiHost.ps1
- Private\Tui\Update-HydrationTuiMultiSelectState.ps1
- Private\Utilities\ConvertTo-HydrationBoolValue.ps1
- Private\Utilities\Copy-DeepObject.ps1
- Private\Utilities\Get-ConfigurationSection.ps1
- Private\Utilities\Get-NormalizedArchitectures.ps1
- Private\Utilities\Get-RequirementArchitecture.ps1
- Private\Utilities\Remove-ReadOnlyGraphProperties.ps1
- Private\Utilities\Resolve-ApplicableArchitecture.ps1
- Private\Utilities\Resolve-HydrationTemplateChildPath.ps1
- Private\Utilities\Resolve-MinimumSupportedOperatingSystem.ps1
- Private\WinGet\ConvertTo-IntuneWinDetectionRule.ps1
- Private\WinGet\ConvertTo-IntuneWinRequirementRule.ps1
- Private\WinGet\Expand-IntuneWinPackageEncryptedContent.ps1
- Private\WinGet\Format-WinGetInstallerSummary.ps1
- Private\WinGet\Get-ExistingWinGetApps.ps1
- Private\WinGet\Get-HydrationWinGetAppTemplates.ps1
- Private\WinGet\Get-IntuneProactiveRemediationAvailability.ps1
- Private\WinGet\Get-IntuneWin32RenewedUploadUri.ps1
- Private\WinGet\Get-IntuneWinPackageMetadata.ps1
- Private\WinGet\Get-IntuneWinPackagingCapability.ps1
- Private\WinGet\Get-IntuneWinUploadChunkLength.ps1
- Private\WinGet\Get-UploadUriForLogging.ps1
- Private\WinGet\Get-WinGetBootstrapScriptFragment.ps1
- Private\WinGet\Get-WinGetDetectionRules.ps1
- Private\WinGet\Get-WinGetDetectionScriptContent.ps1
- Private\WinGet\Get-WinGetRemediationDefinition.ps1
- Private\WinGet\Get-WinGetRemediationFingerprint.ps1
- Private\WinGet\Get-WinGetWrapperScriptContent.ps1
- Private\WinGet\Invoke-IntuneWinAzureStorageBlockUpload.ps1
- Private\WinGet\Invoke-IntuneWinGetAppTemplate.ps1
- Private\WinGet\New-IntuneWin32AppPayload.ps1
- Private\WinGet\New-IntuneWinPackage.ps1
- Private\WinGet\New-IntuneWinPackagingContext.ps1
- Private\WinGet\New-WinGetOwnershipNotes.ps1
- Private\WinGet\New-WinGetPackageMetadataFromTemplate.ps1
- Private\WinGet\New-WinGetRemediationBody.ps1
- Private\WinGet\New-WinGetRemediationDescription.ps1
- Private\WinGet\New-WinGetRemediationScriptContent.ps1
- Private\WinGet\New-WinGetWrapperFiles.ps1
- Private\WinGet\Publish-IntuneWin32AppContent.ps1
- Private\WinGet\Remove-IntuneWinGetApps.ps1
- Private\WinGet\Resolve-WinGetAppIcon.ps1
- Private\WinGet\Select-WinGetPackageInstaller.ps1
- Private\WinGet\Send-IntuneWinAzureStorageChunkedUpload.ps1
- Private\WinGet\Sync-IntuneWinGetProactiveRemediation.ps1
- Private\WinGet\Test-IntuneWinGetAppOwnership.ps1
- Private\WinGet\Wait-IntuneWin32ContentState.ps1
- Public\Authentication\Connect-IntuneHydration.ps1
- Public\Authentication\Test-IntunePrerequisites.ps1
- Public\Baselines\Get-OpenIntuneBaseline.ps1
- Public\Baselines\Import-CISBaseline.ps1
- Public\Baselines\Import-IntuneBaseline.ps1
- Public\Configuration\Import-HydrationSettings.ps1
- Public\Groups\New-IntuneDynamicGroup.ps1
- Public\Groups\New-IntuneStaticGroup.ps1
- Public\Imports\Import-IntuneAppProtectionPolicy.ps1
- Public\Imports\Import-IntuneCompliancePolicy.ps1
- Public\Imports\Import-IntuneConditionalAccessPolicy.ps1
- Public\Imports\Import-IntuneDeviceFilter.ps1
- Public\Imports\Import-IntuneEnrollmentProfile.ps1
- Public\Imports\Import-IntuneMobileApp.ps1
- Public\Imports\Import-IntuneNotificationTemplate.ps1
- Public\Imports\Import-IntuneWinGetApp.ps1
- Public\Logging\Initialize-HydrationLogging.ps1
- Public\Logging\Write-HydrationLog.ps1
- Public\Orchestration\Invoke-IntuneHydration.ps1
- Templates\AppProtection\Android-App-Protection.json
- Templates\AppProtection\iOS-App-Protection.json
- Templates\AppProtection\level-1-enterprise-basic-data-protection-Android.json
- Templates\AppProtection\level-1-enterprise-basic-data-protection-iOS.json
- Templates\AppProtection\level-2-enterprise-enhanced-data-protection-Android.json
- Templates\AppProtection\level-2-enterprise-enhanced-data-protection-iOS.json
- Templates\AppProtection\level-3-enterprise-high-data-protection-Android.json
- Templates\AppProtection\level-3-enterprise-high-data-protection-iOS.json
- Templates\CISBaselines\1.0 - Android Benchmarks\Android Compliance\Baseline - Android Enterprise - Device Health.json
- Templates\CISBaselines\1.0 - Android Benchmarks\Android Compliance\Baseline - Android Enterprise - Device Properties.json
- Templates\CISBaselines\1.0 - Android Benchmarks\Android Compliance\Baseline - Android Enterprise - Microsoft Defender for Endpoint.json
- Templates\CISBaselines\1.0 - Android Benchmarks\Android Compliance\Baseline - Android Enterprise - System Security.json
- Templates\CISBaselines\1.0 - Android Benchmarks\Android Compliance\Baseline - Personally-owned work profile - Device Health.json
- Templates\CISBaselines\1.0 - Android Benchmarks\Android Compliance\Baseline - Personally-owned work profile - Device Properties.json
- Templates\CISBaselines\1.0 - Android Benchmarks\Android Compliance\Baseline - Personally-owned work profile - Microsoft Defender for Endpoint.json
- Templates\CISBaselines\1.0 - Android Benchmarks\Android Compliance\Baseline - Personally-owned work profile - System Security.json
- Templates\CISBaselines\1.0 - Android Benchmarks\Android Enterprise for Intune\Baseline - Android ENT - Allow access to developer settings.json
- Templates\CISBaselines\1.0 - Android Benchmarks\Android Enterprise for Intune\Baseline - Android ENT - Block Bluetooth configuration.json
- Templates\CISBaselines\1.0 - Android Benchmarks\Android Enterprise for Intune\Baseline - Android ENT - Block access to camera.json
- Templates\CISBaselines\1.0 - Android Benchmarks\Android Enterprise for Intune\Baseline - Android ENT - Block account changes.json
- Templates\CISBaselines\1.0 - Android Benchmarks\Android Enterprise for Intune\Baseline - Android ENT - Block beaming data from apps using NFC.json
- Templates\CISBaselines\1.0 - Android Benchmarks\Android Enterprise for Intune\Baseline - Android ENT - Block factory reset.json
- Templates\CISBaselines\1.0 - Android Benchmarks\Android Enterprise for Intune\Baseline - Android ENT - Block roaming data services.json
- Templates\CISBaselines\1.0 - Android Benchmarks\Android Enterprise for Intune\Baseline - Android ENT - Block tethering and access to hotspots.json
- Templates\CISBaselines\1.0 - Android Benchmarks\Android Enterprise for Intune\Baseline - Android ENT - Block volume changes.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple MacOS Compliance\Baseline - macOS - Device Health.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple MacOS Compliance\Baseline - macOS - System Security.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple MacOS for Intune\Baseline - macOS - Allow History Clearing.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple MacOS for Intune\Baseline - macOS - Allow Platform SSO Auth Fallback.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple MacOS for Intune\Baseline - macOS - Allow Private Browsing.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple MacOS for Intune\Baseline - macOS - Allow Summary.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple MacOS for Intune\Baseline - macOS - Safari Extension Identifier.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple MacOS for Intune\Baseline - macOS - Safari History Clearing.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple MacOS for Intune\Baseline - macOS - Safari Homepage URL.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple MacOS for Intune\Baseline - macOS - Safari Page Type.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple MacOS for Intune\Baseline - macOS - Safari Private Browsing.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - Disable Apple Intelligence .json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - Disable Web Distribution App Installation EU.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Default Applications - Calling.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Default Applications - Messaging.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Safari History Retention Enabled.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Allow Safari History Clearing.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Allow Safari Private Browsing.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Allowed Camera Restriction Bundle IDs.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Audio Accessory Settings.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Denied ICCIDs For RCS.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Denied ICCIDs For iMessage And FaceTime.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Enforce Latest Software Update Version.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Idle Reboot Allowed.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Lock Screen Message.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Rapid Security Response.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Recommendation Cadence .json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Safari Accept Cookies.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Safari Allow Disabling Fraud Warning.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Safari Allow History Clearing.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Safari Allow JavaScript.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Safari Allow Popups.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Safari Allow Summary.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Safari Extension Identifier.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Safari Homepage URL.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Safari Page Type.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Benchmarks\Baseline - iOS - Safari Private Browsing.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Compliance\Baseline - iOSiPadOS - Device Health.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Compliance\Baseline - iOSiPadOS - Device Properties.json
- Templates\CISBaselines\2.0 - Apple Benchmarks\Apple iOS Compliance\Baseline - iOSiPadOS - Microsoft Defender for Endpoint.json
- Templates\CISBaselines\3.0 - Browser Benchmarks\Google Chrome\Baseline - Chrome - Block external extensions from being installed.json
- Templates\CISBaselines\3.0 - Browser Benchmarks\Google Chrome\Baseline - Chrome - Configure extension installation allow list.json
- Templates\CISBaselines\3.0 - Browser Benchmarks\Google Chrome\Baseline - Chrome - Enable Bookmark Bar.json
- Templates\CISBaselines\3.0 - Browser Benchmarks\Google Chrome\Baseline - Chrome - Enable Site Isolation for specified origins.json
- Templates\CISBaselines\3.0 - Browser Benchmarks\Google Chrome\Baseline - Chrome - Enable home button.json
- Templates\CISBaselines\3.0 - Browser Benchmarks\Google Chrome\Baseline - Chrome - Legacy Browser Support.json
- Templates\CISBaselines\3.0 - Browser Benchmarks\Google Chrome\Baseline - Chrome - Show Home button on toolbar.json
- Templates\CISBaselines\3.0 - Browser Benchmarks\Microsoft Edge\Baseline - Edge - Allow SpeculationRules prefetch for ServiceWorker-controlled URLs_2025-09-01T08_16_40.399Z.json
- Templates\CISBaselines\3.0 - Browser Benchmarks\Microsoft Edge\Baseline - Edge - Allow pages to use the built-in AI APIs_2025-09-01T08_16_13.628Z.json
- Templates\CISBaselines\3.0 - Browser Benchmarks\Microsoft Edge\Baseline - Edge - Allow software WebGL fallback using SwiftShader_2025-09-01T08_16_19.767Z.json
- Templates\CISBaselines\3.0 - Browser Benchmarks\Microsoft Edge\Baseline - Edge - Configuration policy for Microsoft Edge for Business Reporting Connectors_2025-09-01T08_16_22.439Z.json
- Templates\CISBaselines\3.0 - Browser Benchmarks\Microsoft Edge\Baseline - Edge - Control access to AI-enhanced search in History_2025-09-01T08_16_52.308Z.json
- Templates\CISBaselines\3.0 - Browser Benchmarks\Microsoft Edge\Baseline - Edge - Control whether TLS 1.3 Early Data is enabled in Microsoft Edge_2025-09-01T08_16_43.911Z.json
- Templates\CISBaselines\3.0 - Browser Benchmarks\Microsoft Edge\Baseline - Edge - Extensions required for InPrivate mode navigation_2025-09-01T08_16_28.644Z.json
- Templates\CISBaselines\3.0 - Browser Benchmarks\Microsoft Edge\Baseline - Edge - M365 Copilot Chat in Edge for Business toolbar_2025-09-01T08_16_24.895Z.json
- Templates\CISBaselines\3.0 - Browser Benchmarks\Microsoft Edge\Baseline - Edge - Prioritize app-specified profile to open external links_2025-09-01T08_16_32.548Z.json
- Templates\CISBaselines\3.0 - Browser Benchmarks\Microsoft Edge\Baseline - Edge - Use Primary Work Profile as default to open external links_2025-09-01T08_16_48.549Z.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\CIS - Visual Studio Code\CISv1 - VS Code - L1 - Ensure ChatToolsAutoApprove' is set to Disabled.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\CIS - Visual Studio Code\CISv1 - VS Code - L1 - Ensure TelemetryLevel is set to Enabled.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\CIS - Visual Studio Code\CISv1 - VS Code - L1 - Ensure UpdateMode is set to Enabled.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\CIS - Visual Studio Code\CISv1 - VS Code - L2 - Ensure AllowedExtensions is configured.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\CIS - Visual Studio Code\CISv1 - VS Code - L2 - Ensure ChatMCP is set to Disabled.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\CIS - Visual Studio Code\CISv1 - VS Code - L2 - Ensure EnableFeedback is set to Disabled.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\CIS - Visual Studio Code\ReadMe.txt
- Templates\CISBaselines\4.0 - CIS Benchmarks\CIS - Visual Studio Code\VSCode.adml
- Templates\CISBaselines\4.0 - CIS Benchmarks\CIS - Visual Studio Code\VSCode.admx
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - Choose how BitLocker-protected operating system drives can be recovered Require 48-digit recovery password.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Service Enabled.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - 'Configure RPC connection settings Use authentication for outgoing RPC connections.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - 'Configure RPC listener settings Protocols to allow for incoming RPC connections.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - 'Enable Domain Network Firewall Default Inbound Action for Domain Profile.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - 'MSS (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing).json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - 'Microsoft network client Digitally sign communications (if server agrees).json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - 'Network Security Minimum Session Security For NTLMSSP Based Servers.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - 'PUA Protection.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - 'Remote host allows delegation of non exportable credentials.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - 'User Account Control Behavior of the elevation prompt for standard users.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - 'User Account Control Only elevate UIAccess applications that are installed in secure locations.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - ASR Block Adobe Reader from creating child processes.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - ASR Block JavaScript or VBScript from launching downloaded executable content.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - ASR Block Office applications from injecting code into other processes.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - ASR Block Office communication application from creating child processes.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - ASR Block Win32 API calls from Office macros.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - ASR Block abuse of exploited vulnerable signed drivers.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - ASR Block all Office applications from creating child processes.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - ASR Block credential stealing from the Windows local security authority subsystem.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - ASR Block executable content from email client and webmail.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - ASR Block executable files from running unless they meet a prevalence, age, or trusted list criterion'.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - ASR Block execution of potentially obfuscated scripts.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - ASR Block persistence through WMI event subscription.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - ASR Block process creations originating from PSExec and WMI commands.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - ASR Block untrusted and unsigned processes that run from USB.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - ASR Use advanced protection against ransomware.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Access Credential Manager As Trusted Caller.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Access From Network.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Account Logon Audit Credential Validation.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Account Logon Logoff Audit Account Lockout.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Account Logon Logoff Audit Group Membership.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Account Logon Logoff Audit Logoff.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Account Logon Logoff Audit Logon.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Account Management Audit Application Group Management'.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Accounts Enable Guest account status.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Accounts Limit local account use of blank passwords to console logon only'.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Accounts Rename administrator account.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Accounts Rename guest account.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Act As Part Of The Operating System.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Auto Connect To Wi Fi Sense Hotspots.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Auto Update.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Basic authentication WinRM Client.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Basic authentication WinRM Service.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Behavior Monitoring.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Clipboard Redirection.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Cortana Above Lock.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Cortana.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Email Scanning.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Full Scan Removable Drive Scanning.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Game DVR.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Indexing Encrypted Stores Or Items.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Input Personalization.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Local Log On.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Microsoft accounts to be optional.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Networking.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Print Spooler to accept client connections.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Realtime Monitoring.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Script Scanning.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Search To Use Location.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Spotlight Collection (User).json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Telemetry.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow Windows Ink Workspace.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow apps from the Microsoft app store to auto update.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow scanning of all downloaded files and attachments.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow unencrypted traffic WinRM Client.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow unencrypted traffic WinRM Service.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Allow widgets.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Always prompt for password upon connection.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Apply UAC restrictions to local accounts on network logons.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Audit Authentication Policy Change.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Audit Authorization Policy Change.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Audit Changes to Audit Policy.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Audit File Share Access.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Audit Other Logon Logoff Events.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Audit Security Group Management.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Audit Security System Extension.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Audit Special Logon.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Audit User Account Management.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Backup Directory.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Backup Files And Directories.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Block Non Admin User Install.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Block Office applications from creating executable content.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Block all consumer Microsoft account user authentication.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Block launching Universal Windows apps with Windows Runtime API access from hosted content.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Block user from showing account details on sign-in.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Boot-Start Driver Initialization Policy.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Change System Time.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Config refresh.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Configure Lsa Protected Process is set to 'Enabled with UEFI Lock.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Configure Offer Remote Assistance.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Configure RPC connection settings Protocol to use for outgoing RPC connections.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Configure RPC listener settings Authentication protocol to use for incoming RPC connections.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Configure RPC over TCP port RPC over TCP port.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Configure Redirection Guard Redirection Guard Options.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Configure SMB v1 client driver.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Configure SMB v1 server.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Configure Solicited Remote Assistance.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Configure System Guard Launch.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Configure Windows Defender SmartScreen.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Configure local setting override for reporting to Microsoft MAPS.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Continue experiences on this device.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Control Event Log behavior when the log file reaches its maximum size Security.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Control Event Log behavior when the log file reaches its maximum size Setup.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Control Event Log behavior when the log file reaches its maximum size System.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Control Event Log behavior when the log file reaches its maximum size.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Create Global Objects.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Create Page File.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Create Permanent Shared Objects.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Create Symbolic Links.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Create Token.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Credential Guard.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - DO Download Mode.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Days Until Aggressive Catchup Quick Scan.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Debug Programs.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Defer Feature Updates Period in Days.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Defer Quality Updates Period (Days).json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Deny Access From Network.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Deny Local Log On.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Deny Log On As Batch Job.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Deny Log On As Service Job.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Deny Remote Desktop Services Log On.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Detailed Tracking Audit PNP Activity.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Detailed Tracking Audit Process Creation.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Device Password Enabled Alphanumeric Device Password Required.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Device Password Enabled Device Password Expiration.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Device Password Enabled Device Password History.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Device Password Enabled Max Device Password Failed Attempts.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Device Password Enabled Max Inactivity Time Device Lock.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Device Password Enabled Min Device Password Complex Characters.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Device Password Enabled Min Device Password Length.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Device Password Enabled.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Disable Consumer Account State Content.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Disallow Autoplay for non-volume devices.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Disallow Digest authentication WinRM Client.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Disallow Exploit Protection Override.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Disallow WinRM from storing RunAs credentials WinRM Service.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Do not allow drive redirection.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Do not allow passwords to be saved.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Do not delete temp folders upon exit.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Do not display network selection UI.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Do not display the password reveal button.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Do not enumerate connected users on domain-joined computers.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Do not preserve zone information in file attachments (User).json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable App Installer Experimental Features.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable App Installer Hash Override.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable App Installer ms-appinstaller protocol.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Delegation.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Domain Network Firewall Disable Inbound Notifications.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Domain Network Firewall Enable Log Dropped Packets.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Domain Network Firewall Enable Log Success Connections.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Domain Network Firewall Log File Path.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Domain Network Firewall Log Max File Size.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Domain Network Firewall.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable ESS with Supported Peripherals.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable MPR notifications for the system.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Network Protection.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable OneSettings Auditing.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Private Network Firewall Default Inbound Action for Private Profile.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Private Network Firewall Disable Inbound Notifications.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Private Network Firewall Enable Log Dropped Packets.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Private Network Firewall Enable Log Success Connections.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Private Network Firewall Log File Path.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Private Network Firewall Log Max File Size.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Private Network Firewall.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Public Network Firewall Allow Local Ipsec Policy Merge.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Public Network Firewall Allow Local Policy Merge.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Public Network Firewall Default Inbound Action for Public Profile.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Public Network Firewall Disable Inbound Notifications.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Public Network Firewall Enable Log Dropped Packets.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Public Network Firewall Enable Log Success Connections.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Public Network Firewall Log File Path.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Public Network Firewall Log Max File Size.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Public Network Firewall.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable RPC Endpoint Mapper Client Authentication.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Structured Exception Handling Overwrite Protection (SEHOP).json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Sudo.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Virtualization Based Security.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Windows NTP Client.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable Windows NTP Server.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enable insecure guest logons.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Encryption Oracle Remediation.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enumerate administrator accounts on elevation.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Enumerate local users on domain-joined computers.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Facial Features Use Enhanced Anti Spoofing.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Generate Security Audits.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Hardened UNC Paths.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Hide Exclusions From Local Users.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Hypervisor Enforced Code Integrity.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Impersonate Client.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Include command line in process creation events.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Increase Scheduling Priority.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Interactive logon Do not display last signed-in.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Interactive logon Do not require CTRL+ALT+DEL.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Interactive logon Machine inactivity limit.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Interactive logon Message text for users attempting to log on.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Interactive logon Message title for users attempting to log on.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Interactive logon Smart card removal behavior.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Let Apps Activate With Voice Above Lock.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Limit Diagnostic Log Collection.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Limit Dump Collection.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Limits print driver installation to Administrators.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Load Unload Device Drivers.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Lock Memory.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - MSI Allow user control over installs.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - MSI Always install with elevated privileges (User).json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - MSI Always install with elevated privileges.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - MSS (AutoAdminLogon) Enable Automatic Logon (not recommended).json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - MSS (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing).json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - MSS (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - MSS (NoNameReleaseOnDemand) Ignore NetBIOS name release requests except from WINS.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - MSS (SafeDllSearchMode) Enable Safe DLL search mode (recommended).json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - MSS (ScreenSaverGracePeriod) Screen saver grace period in seconds.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - MSS (WarningLevel) Security event log warning threshold.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Manage Volume.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Manage auditing and security log.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Manage preview builds.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Manage processing of Queue-specific files Manage processing of Queue-Specific files.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Microsoft network client Digitally sign communications (always).json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Microsoft network client Send unencrypted password to third-party SMB servers.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Microsoft network server Digitally sign communications (always).json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Microsoft network server Digitally sign communications (if client agrees).json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Minimize the number of simultaneous connections to the Internet or a Windows Domain.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Minimum PIN Length.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Minimum Password Age.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Modify Firmware Environment.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Modify Object Label.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Network Security Allow PKU2U authentication requests.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Network Security Minimum Session Security For NTLMSSP Based Clients.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Network access Do not allow anonymous enumeration of SAM accounts and shares.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Network access Do not allow anonymous enumeration of SAM accounts.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Network access Restrict anonymous access to Named Pipes and Shares.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Network access Restrict clients allowed to make remote calls to SAM.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Network security Allow Local System to use computer identity for NTLM.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Network security Do not store LAN Manager hash value on next password change.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Network security LAN Manager authentication level.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Network security Restrict NTLM Audit Incoming NTLM Traffic.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Notify Malicious.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Notify Password Reuse.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Notify Unsafe App.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Notify antivirus programs when opening attachments (User).json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Object Access Audit Detailed File Share.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Object Access Audit Other Object Access Events.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Object Access Audit Removable Storage.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Oobe Enable Rtp And Sig Update.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Password Age Days.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Password Complexity.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Password Length.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Pause Updates.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Point and Print Restrictions When installing drivers for a new connection.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Point and Print Restrictions When updating drivers for an existing connection.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Policy Change Audit MPSSVC Rule Level Policy Change.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Policy Change Audit Other Policy Change Events.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Post Authentication Reset Delay.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Post-authentication actions.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Prevent device metadata retrieval from the Internet.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Prevent downloading of enclosures.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Prevent enabling lock screen camera.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Prevent enabling lock screen slide show.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Prevent the use of security questions for local accounts.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Prevent users from sharing files within their profile. (User).json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Privilege Use Audit Sensitive Privilege Use.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Profile Single Process.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Profile System Performance.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Prohibit connection to non-domain networks when connected to domain authenticated network.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Prohibit installation and configuration of Network Bridge on your DNS domain network.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Prohibit use of Internet Connection Sharing on your DNS domain network.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Quick Scan Include Exclusions.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Refresh cadence.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Remote Encryption Protection Configured State.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Remote Shutdown.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Replace Process Level Token.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Require PIN For Pairing.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Require Platform Security Features.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Require Security Device.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Require UEFI Memory Attributes Table.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Require a password when a computer wakes (on battery).json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Require a password when a computer wakes (plugged in).json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Require domain users to elevate when setting a network's location.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Require secure RPC communication.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Require use of specific security layer for remote (RDP) connections.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Require user authentication for remote connections by using Network Level Authentication.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Restore Files And Directories.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Restrict Unauthenticated RPC clients.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Scheduled Install Day.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Set client connection encryption level.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Set the default behavior for AutoRun.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Shut Down The System.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Sign-in and lock last interactive user automatically after a restart.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Specify the maximum log file size (KB) Application.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Specify the maximum log file size (KB) Security.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Specify the maximum log file size (KB) Setup.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Specify the maximum log file size (KB) System.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - System Audit I Psec Driver.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - System Audit Other System Events.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - System Audit Security State Change.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - System Audit System Integrity.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Take Ownership.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Turn off Autoplay.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Turn off Data Execution Prevention for Explorer.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Turn off Internet download for Web publishing and online ordering wizards.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Turn off app notifications on the lock screen.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Turn off background refresh of Group Policy.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Turn off downloading of print drivers over HTTP.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Turn off heap termination on corruption.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Turn off multicast name resolution.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Turn off picture password sign-in.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Turn off shell protocol protected mode.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Turn off the offer to update to the latest version of Windows.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Turn off toast notifications on the lock screen (User).json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - Turn on convenience PIN sign-in.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - User Account Control Behavior of the elevation prompt for administrators.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - User Account Control Detect application installations and prompt for elevation.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - User Account Control Run all administrators in Admin Approval Mode.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - User Account Control Switch to the secure desktop when prompting for elevation.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - User Account Control Use Admin Approval Mode.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L1 - WDigest Authentication.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Allow Camera.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Allow Cloud Search.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Allow Cross Device Clipboard.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Allow Font Providers.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Allow Location.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Allow Message Sync.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Allow Online Tips.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Allow Remote Shell Access.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Allow Shared User App Data.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Allow Windows Spotlight (User).json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Allow remote server management through WinRM Service.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Allow search highlights.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Allow suggested apps in Windows Ink Workspace.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Allow users to connect remotely by using Remote Desktop Services.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Configuration of wireless settings using Windows Connect Now.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Configure Watson events.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Devices Prevent users from installing printer drivers when connecting to shared printers.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Disable Advertising ID.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Disable Enterprise Auth Proxy.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Disable One Drive File Sync.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Disable Store Originated Apps.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Disallow Cloud Notification.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Disallow KMS Client Online AVS Validation.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Disallow copying of user input methods to the system account for sign-in.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Do not allow COM port redirection.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Do not allow LPT port redirection.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Do not allow supported Plug and Play device redirection.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Enable Convert Warn To Block.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Enable File Hash Computation.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Join Microsoft MAPS.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Log On As Batch Job.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - MSS (DisableSavePassword) Prevent the dial up password from being saved (recommended).json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - MSS (KeepAliveTime) How often keep-alive packets are sent in milliseconds.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - MSS (PerformRouterDiscovery) Allow IRDP Default Gateway detection.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - MSS (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - MSS (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Microsoft Support Diagnostic Tool Turn on MSDT interactive communication with support provider.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Prevent Codec Download (User).json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Prevent Internet Explorer security prompt for Windows Installer scripts.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Prohibit access of the Windows Connect Now wizards.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Remote Encryption Protection Aggressiveness.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Restrict clipboard transfer from server to client.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Set time limit for active but idle Remote Desktop Services sessions.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Set time limit for disconnected sessions.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Support device authentication using certificate.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Turn off Help Experience Improvement Program (User).json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Turn off Push To Install service.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Turn off Registration if URL connection is referring to Microsoft.com'.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Turn off Search Companion content file updates.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Turn off Windows Customer Experience Improvement Program.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Turn off Windows Error Reporting.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Turn off access to the Store.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Turn off printing over HTTP.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Turn off the Order Prints picture task.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Turn off the Publish to Web.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Turn off the Store application.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Turn off the Windows Messenger Customer Experience Improvement Program.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Turn on Mapper IO (LLTDIO) driver.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Turn on PowerShell Script Block Logging.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Turn on PowerShell Transcription.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Turn on Responder (RSPNDR) driver.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Intune Win11\CISv4 - WIN - L2 - Upload User Activities.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Ads setting for sites with intrusive ads.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Allow Basic authentication for HTTP.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Allow Google Cast to connect to Cast devices on all IP addresses.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Allow cross-origin HTTP Authentication prompts.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Allow download restrictions.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Allow import of data from other browsers on each Microsoft Edge launch.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Allow importing of autofill form data.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Allow importing of browser settings.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Allow importing of home page settings.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Allow importing of payment info.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Allow importing of saved passwords.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Allow importing of search engine settings.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Allow managed extensions to use the Enterprise Hardware Platform API.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Allow queries to a Browser Network Time service.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Allow remote debugging.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Allow the audio sandbox to run.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Allow user feedback.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Allow websites to query for available payment methods.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Blocks external extensions from being installed.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Clear browsing data when Microsoft Edge closes.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Clear cached images and files when Microsoft Edge closes.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Clear history for IE and IE mode every time you exit.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Compose is enabled for writing on the web.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Configure Edge Website Typo Protection.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Configure InPrivate mode availability.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Configure Microsoft Defender SmartScreen.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Configure Related Matches in Find on Page.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Configure the Share experience.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Configure the list of names that will bypass the HSTS policy check.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Configure the list of types that are excluded from synchronization.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Configure users ability to override feature flags.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Continue running background apps after Microsoft Edge closes.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Control communication with the Experimentation and Configuration Service.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Control use of insecure content exceptions.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - DNS interception checks enabled.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Delete old browser data on migration.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Disable Bing chat entry-points on Microsoft Edge Enterprise new tab page.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Disable saving browser history.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Disable synchronization of data using Microsoft sync services.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Edge 3P SERP Telemetry Enabled.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Edge Wallet E-Tree Enabled.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable AutoFill for addresses.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable AutoFill for payment instructions.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable CryptoWallet feature.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable Discover access to page contents for AAD profiles.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable Follow service in Microsoft Edge.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable Google Cast.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable Microsoft Defender SmartScreen DNS requests.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable browser legacy extension point blocking.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable component updates in Microsoft Edge.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable deleting browser and download history.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable globally scoped HTTP auth cache.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable profile creation from the Identity flyout menu or the Settings page.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable resolution of navigation errors using a web service.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable saving passwords to the password manager.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable security warnings for command-line flags.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable site isolation for every site.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable startup boost.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable tab organization suggestions.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable the Search bar.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable the linked account feature.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable upload files from mobile in Microsoft Edge desktop.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable use of ephemeral profiles.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enable warnings for insecure forms.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Enables DALL-E themes generation.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Guided Switch Enabled.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Hide the First-run experience and splash screen.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - In-app support Enabled.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Manage exposure of local IP addresses by WebRTC.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Prevent bypassing Microsoft Defender SmartScreen prompts for sites.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Set disk cache size, in bytes.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Set the time period for update notifications.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Shopping in Microsoft Edge Enabled.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Show Microsoft Rewards experiences.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Show the Reload in Internet Explorer mode button in the toolbar.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Standalone Sidebar Enabled.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Suggest similar pages when a webpage can’t be found.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Suppress the unsupported OS warning.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Update policy override default.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level1\CISv3 - EDGE - L1 - Wallet Donation Enabled.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Allow features to download assets from the Asset Delivery Service.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Allow file selection dialogs.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Allow or block audio capture.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Allow or deny screen capture.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Allow read access via the File System API on these sites.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Allow unconfigured sites to be reloaded in Internet Explorer mode.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Allow users to open files using the ClickOnce protocol.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Allow users to open files using the DirectInvoke protocol.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Allow users to proceed from the HTTPS warning page.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - AutoLaunch Protocols Component Enabled.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Block third party cookies.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Browser sign-in settings.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Configure Online Text To Speech.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Configure Speech Recognition.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Configure extension management settings.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Configure the list of types that are excluded from synchronization.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Control use of JavaScript JIT.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Control use of the File System API for reading.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Control use of the Headless Mode.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Control use of the Serial API.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Control use of the Web Bluetooth API.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Control use of the WebHID API.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Control where security restrictions on insecure origins apply.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Default sensors setting.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Default setting for third-party storage partitioning.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Enable Drop feature in Microsoft Edge.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Enable QR Code Generator.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Enable Translate.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Enable guest mode.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Enable search suggestions.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Enforce Bing SafeSearch.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Enforce Google SafeSearch.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Enhanced Security Mode configuration for Intranet zone sites.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Let users snip a Math problem and get the solution with a step-by-step explanation.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Live captions allowed.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Show an Always open checkbox in external protocol dialog.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Specify if online OCSPCRL checks are required for local trust anchors.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Spell checking provided by Microsoft Editor.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Supported authentication schemes.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Tab Services enabled.json
- Templates\CISBaselines\4.0 - CIS Benchmarks\Microsoft Edge\Level2\CISv3 - EDGE - L2 - Text prediction enabled by default.json
- Templates\CISBaselines\5.0 - Linux Benchmarks\Linux Compliance\Baseline - Linux - Device Encryption.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Audit Policies\ASR - AUDIT - Block Adobe Reader from creating child processes.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Audit Policies\ASR - AUDIT - Block JavaScript or VBScript from launching executables.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Audit Policies\ASR - AUDIT - Block Office applications from creating executable content.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Audit Policies\ASR - AUDIT - Block Office comm app from creating child processes.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Audit Policies\ASR - AUDIT - Block Win32 API calls from Office macros.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Audit Policies\ASR - AUDIT - Block abuse of vulnerable signed drivers.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Audit Policies\ASR - AUDIT - Block all Office apps from creating child processes.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Audit Policies\ASR - AUDIT - Block credential stealing from LSASS.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Audit Policies\ASR - AUDIT - Block executable content from email client and webmail.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Audit Policies\ASR - AUDIT - Block executables not meeting prevalence criteria.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Audit Policies\ASR - AUDIT - Block execution of potentially obfuscated scripts.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Audit Policies\ASR - AUDIT - Block persistence through WMI event subscription.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Audit Policies\ASR - AUDIT - Block rebooting machine in Safe Mode.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Audit Policies\ASR - AUDIT - Block untrusted and unsigned processes that run from USB.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Audit Policies\ASR - AUDIT - Enable Controlled Folder Access.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Audit Policies\ASR - AUDIT - Use advanced protection against ransomware.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Block Policies\ASR - BLOCK - Block Adobe Reader from creating child processes.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Block Policies\ASR - BLOCK - Block JavaScript or VBScript from launching executables.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Block Policies\ASR - BLOCK - Block Office applications from creating executable content.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Block Policies\ASR - BLOCK - Block Office comm app from creating child processes.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Block Policies\ASR - BLOCK - Block Win32 API calls from Office macros.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Block Policies\ASR - BLOCK - Block abuse of vulnerable signed drivers.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Block Policies\ASR - BLOCK - Block all Office apps from creating child processes.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Block Policies\ASR - BLOCK - Block credential stealing from LSASS.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Block Policies\ASR - BLOCK - Block executable content from email client and webmail.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Block Policies\ASR - BLOCK - Block executables not meeting prevalence criteria.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Block Policies\ASR - BLOCK - Block execution of potentially obfuscated scripts.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Block Policies\ASR - BLOCK - Block persistence through WMI event subscription.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Block Policies\ASR - BLOCK - Block rebooting machine in Safe Mode.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Block Policies\ASR - BLOCK - Block untrusted and unsigned processes that run from USB.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Block Policies\ASR - BLOCK - Enable Controlled Folder Access.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Attack Surface Reduction\Block Policies\ASR - BLOCK - Use advanced protection against ransomware.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Bitlocker en Personal Data Encryption\Baseline - Bitlocker Policy.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Bitlocker en Personal Data Encryption\Baseline - Personal Data Encryption.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Browser Protection\Baseline - Chrome Microsoft Defender Browser Protection.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Browser Protection\Baseline - Scareware Blocker in Microsoft Edge.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Browser Protection\Baseline - Smartscreen Enhanced Phishing Protection.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Endpoint Protection\Baseline - Account Protection.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Endpoint Protection\Baseline - App and Browser Isolation.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Endpoint Protection\Baseline - Device Control.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\FIDO\Baseline - Enables FIDO Security Keys to be used during Windows Sign In -1.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Firewall\Baseline - MacOS - Firewall.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Firewall\Baseline - Windows - Firewall.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Intune Default Security Baselines\Baseline - Intune Security Baseline - Microsoft Edge.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Intune Default Security Baselines\Baseline - Intune Security Baseline - Windows 365.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Intune Default Security Baselines\Baseline - Intune Security Baseline - Windows Defender Security Experience.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Intune Default Security Baselines\Baseline - Intune Security Baseline -Windows 11.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Microsoft Defender for Endpoint\Baseline - Defender for Endpoint Linux .json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Microsoft Defender for Endpoint\Baseline - MDE Device Tag.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Microsoft Defender for Endpoint\Baseline - MDE Enable file hash computation feature.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Microsoft Defender for Endpoint\Baseline - Microsoft Defender Antivirus.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Microsoft Defender for Endpoint\Baseline - Microsoft Defender Update controls.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Microsoft Defender for Endpoint\Baseline - Smartscreen Enhanced Phishing Protection Audit Mode.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Microsoft Defender for Endpoint\Baseline - Smartscreen Enhanced Phishing Protection Block Mode.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Microsoft Defender for Endpoint\Baseline - Windows Defender Security Experience.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Windows Hello for Business\Baseline - WHFB Exclude Security Devices TPM 1.2 .json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Windows Hello for Business\Baseline - WHFB Disable Post Logon Provisioning.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Windows Hello for Business\Baseline - WHFB Muti-Factor unlock Template config.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Windows Hello for Business\Baseline - WHFB Require Security Device.json
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Windows Hello for Business\WHFB - Bluetooth - Network Access Point.xml
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Windows Hello for Business\WHFB - Bluetooth - Phone.xml
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Windows Hello for Business\WHFB - Bluetooth - Wearable.xml
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Windows Hello for Business\WHFB - IPConfig - IP - DNS - Bluetooth - Phone.xml
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Windows Hello for Business\WHFB - IPConfig Advanced.xml
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Windows Hello for Business\WHFB - IPConfig Corporate Network - With - IP - DHCP - DNS.xml
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Windows Hello for Business\WHFB - IPConfig Corporate Network WiFI - With - SSID - Security - SignalQuality.xml
- Templates\CISBaselines\6.0 - Microsoft Endpoint Security Benchmarks\Windows Hyper-v\Baseline - Windows with Hyper-v - Firewall.json
- Templates\CISBaselines\7.0 - Visual Studio Benchmarks\Baseline - Visual Studio - Allow only company domain accounts.json
- Templates\CISBaselines\7.0 - Visual Studio Benchmarks\Baseline - Visual Studio - Disable Agent Mode.json
- Templates\CISBaselines\7.0 - Visual Studio Benchmarks\Baseline - Visual Studio - Disable Copilot.json
- Templates\CISBaselines\7.0 - Visual Studio Benchmarks\Baseline - Visual Studio - Disable IntelliCode custom model training.json
- Templates\CISBaselines\7.0 - Visual Studio Benchmarks\Baseline - Visual Studio - Disable dev tunnels in Visual Studio.json
- Templates\CISBaselines\7.0 - Visual Studio Benchmarks\Baseline - Visual Studio - Disable the send-a-smile feature.json
- Templates\CISBaselines\7.0 - Visual Studio Benchmarks\Baseline - Visual Studio - Disable update notifications in Visual Studio.json
- Templates\CISBaselines\7.0 - Visual Studio Benchmarks\Baseline - Visual Studio - Remove out-of-support components during updates.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Block add MSA accounts and non-MSA accounts.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Chrome Password manager and protection configuration.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Cloud Remediation quick machine recovery.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Configure Outlook profile .json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Configure Searchbar on taskbar.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Configure Teams Chat icon.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Configure Windows protected print.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Delivery Optimization.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Disable Web Distribution App Installation EU.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Disable Xbox services.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Edge Password manager and protection configuration.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Enable Guest account for secure assessment .json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Enable Local Administrator Account.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Enable Shared PC mode with OneDrive sync.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Enable Windows Backup_2025-09-01T08_19_23.564Z.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Enable Xbox Game Save Task.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Google Chrome Management.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - One Drive management settings.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Prevent Microsoft Teams from starting automatically after installation.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Require Network In OOBE.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Restrict sign in to Teams to accounts in specific tenants.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - SSL Cipher Suite Order.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Shared Multi-user device.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - SkipUserStatusPage ESP.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Smartscreen Enhanced Phishing Protection.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Storage Sense.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Turn Off Copilot in Windows (User).json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Universal Print Provisioning.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Windows 11 Taskbar .json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Windows OneDrive automatically.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Windows Power Settings.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Windows Sandbox.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Windows Subsystem For Linux.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Intune Modern Workplace Windows 11\Baseline - Windows health monitoring.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Microsoft Teams\Baseline - AVD - FSLogic Include Teams data.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Microsoft Teams\Baseline - Teams - Don’t install Microsoft Teams with new installations or updates of Office.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Microsoft Teams\Baseline - Teams - File links open preference default selection as Desktop App.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Microsoft Teams\Baseline - Teams - Prevent Microsoft Teams from starting automatically after installation.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Microsoft Teams\Baseline - Teams - Restrict sign in to Teams to accounts in specific tenants.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Windows 11 Compliance\Baseline - Windows - Compliancs Device Health.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Windows 11 Compliance\Baseline - Windows - Device Properties.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Windows 11 Compliance\Baseline - Windows - Microsoft Defender for Endpoint Risk score.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Windows 11 Compliance\Baseline - Windows - System Security with Defender.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Windows 11 Compliance\Baseline - Windows - System Security without Defender.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Windows AI\Baseline - Windows AI - Paint Generative Fill.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Windows AI\Baseline - Windows AI - Block Microsoft Recall.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Windows AI\Baseline - Windows AI - Manage Microsoft Recall.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Windows AI\Baseline - Windows AI - Turn Off Copilot in Windows (User).json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Windows AI\Baseline - Windows AI - Block Microsoft Recall.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Windows AI\Baseline - Windows AI - Copilot access to Microsoft Edge page content for Entra account.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Windows AI\Baseline - Windows AI - Default App for Copilot key on keyboard.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Windows AI\Baseline - Windows AI - Disable Click To Do.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Windows AI\Baseline - Windows AI - Disable GitHub Copilot for Individual.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Windows AI\Baseline - Windows AI - Disable GitHub Copilot.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Windows AI\Baseline - Windows AI - Enable Edge GenAI local foundational model .json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Windows AI\Baseline - Windows AI - Enable Paint Cocreator.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Windows AI\Baseline - Windows AI - Paint Image Creator.json
- Templates\CISBaselines\8.0 - Windows 11 Benchmarks\Windows AI\Baseline - Windows AI - Settings Agent.json
- Templates\CISBaselines\9.0 - Windows Cloud PC and AVD\Azure Virtual Desktop\Baseline - AVD - Configure H.265HEVC hardware encoding for RDP.json
- Templates\CISBaselines\9.0 - Windows Cloud PC and AVD\Azure Virtual Desktop\Baseline - AVD - Enable RDP Shortpath for managed network using NAT traversal.json
- Templates\CISBaselines\9.0 - Windows Cloud PC and AVD\Azure Virtual Desktop\Baseline - AVD - Enable RDP Shortpath for managed networks.json
- Templates\CISBaselines\9.0 - Windows Cloud PC and AVD\Azure Virtual Desktop\Baseline - AVD - Enable RDP Shortpath for public network using NAT traversal.json
- Templates\CISBaselines\9.0 - Windows Cloud PC and AVD\Azure Virtual Desktop\Baseline - AVD - Enable RDP Shortpath for public network using Relay (TURN).json
- Templates\CISBaselines\9.0 - Windows Cloud PC and AVD\Azure Virtual Desktop\Baseline - AVD - Enable screen capture protection.json
- Templates\CISBaselines\9.0 - Windows Cloud PC and AVD\Azure Virtual Desktop\Baseline - AVD - Enable watermarking.json
- Templates\CISBaselines\9.0 - Windows Cloud PC and AVD\Azure Virtual Desktop\Baseline - AVD - FSLogic Include Teams data.json
- Templates\CISBaselines\9.0 - Windows Cloud PC and AVD\Azure Virtual Desktop\Baseline - AVD - Use port range for RDP Shortpath for unmanaged networks.json
- Templates\CISBaselines\9.0 - Windows Cloud PC and AVD\Windows 365 Cloud PC\Baseline - Win365 - Allow audio and video playback redirection.json
- Templates\CISBaselines\9.0 - Windows Cloud PC and AVD\Windows 365 Cloud PC\Baseline - Win365 - Allow audio recording redirection.json
- Templates\CISBaselines\9.0 - Windows Cloud PC and AVD\Windows 365 Cloud PC\Baseline - Win365 - Do not allow COM port redirection.json
- Templates\CISBaselines\9.0 - Windows Cloud PC and AVD\Windows 365 Cloud PC\Baseline - Win365 - Do not allow Clipboard redirection.json
- Templates\CISBaselines\9.0 - Windows Cloud PC and AVD\Windows 365 Cloud PC\Baseline - Win365 - Do not allow client printer redirection.json
- Templates\CISBaselines\9.0 - Windows Cloud PC and AVD\Windows 365 Cloud PC\Baseline - Win365 - Do not allow drive redirection.json
- Templates\CISBaselines\9.0 - Windows Cloud PC and AVD\Windows 365 Cloud PC\Baseline - Win365 - Do not allow smart card device redirection.json
- Templates\CISBaselines\9.0 - Windows Cloud PC and AVD\Windows 365 Cloud PC\Baseline - Win365 - Do not allow supported Plug and Play device redirection.json
- Templates\CISBaselines\9.0 - Windows Cloud PC and AVD\Windows 365 Cloud PC\Baseline - Win365 - Do not allow video capture redirection.json
- Templates\CISBaselines\9.0 - Windows Cloud PC and AVD\Windows 365 Cloud PC\Baseline - Win365 - Enable screen capture protection.json
- Templates\CISBaselines\9.0 - Windows Cloud PC and AVD\Windows 365 Cloud PC\Baseline - Win365 - Enable watermarking.json
- Templates\Compliance\Android-Compliance-FullyManaged-Basic.json
- Templates\Compliance\Android-Compliance-FullyManaged-Strict.json
- Templates\Compliance\Linux-Compliance-Basic.json
- Templates\Compliance\Linux-Compliance-Strict.json
- Templates\Compliance\Windows-Compliance-Policy.json
- Templates\Compliance\Windows-Custom-Compliance.json
- Templates\Compliance\iOS-Compliance-Basic.json
- Templates\Compliance\iOS-Compliance-Strict.json
- Templates\Compliance\macOS-Compliance-Basic.json
- Templates\Compliance\macOS-Compliance-Strict.json
- Templates\ConditionalAccess\Block access for unknown or unsupported device platform.json
- Templates\ConditionalAccess\Block access to Office365 apps for users with insider risk.json
- Templates\ConditionalAccess\Block all agent identities from accessing resources.json
- Templates\ConditionalAccess\Block all agent users from accessing resources.json
- Templates\ConditionalAccess\Block high risk agent identities from accessing resources.json
- Templates\ConditionalAccess\Block legacy authentication.json
- Templates\ConditionalAccess\No persistent browser session.json
- Templates\ConditionalAccess\Require MDM-enrolled and compliant device to access cloud apps for all users (Preview).json
- Templates\ConditionalAccess\Require compliant or hybrid Azure AD joined device for admins.json
- Templates\ConditionalAccess\Require compliant or hybrid Azure AD joined device or multifactor authentication for all users.json
- Templates\ConditionalAccess\Require multifactor authentication for Azure management.json
- Templates\ConditionalAccess\Require multifactor authentication for Microsoft admin portals.json
- Templates\ConditionalAccess\Require multifactor authentication for admins.json
- Templates\ConditionalAccess\Require multifactor authentication for all users.json
- Templates\ConditionalAccess\Require multifactor authentication for guest access.json
- Templates\ConditionalAccess\Require multifactor authentication for risky sign-ins.json
- Templates\ConditionalAccess\Require password change for high-risk users.json
- Templates\ConditionalAccess\Require phishing-resistant multifactor authentication for admins.json
- Templates\ConditionalAccess\Secure account recovery with identity verification (Preview).json
- Templates\ConditionalAccess\Securing security info registration.json
- Templates\ConditionalAccess\Use application enforced restrictions for O365 apps.json
- Templates\DynamicGroups\Autopilot-Groups.json
- Templates\DynamicGroups\Manufacturer-Groups.json
- Templates\DynamicGroups\OS-Groups.json
- Templates\DynamicGroups\Ownership-Groups.json
- Templates\DynamicGroups\User-Groups.json
- Templates\DynamicGroups\VM-Groups.json
- Templates\Enrollment\Windows-Autopilot-Device-Preparation-UserDriven.json
- Templates\Enrollment\Windows-Autopilot-Profile.json
- Templates\Enrollment\Windows-ESP-Profile.json
- Templates\Enrollment\Windows-Self-Deploy-Autopilot-Profile.json
- Templates\Filters\Android-Filters.json
- Templates\Filters\Windows-Architecture-Filters.json
- Templates\Filters\Windows-Manufacturer-Filters.json
- Templates\Filters\Windows-VM-Filters.json
- Templates\Filters\iOS-Filters.json
- Templates\Filters\macOS-Architecture-Filters.json
- Templates\Filters\macOS-Filters.json
- Templates\MobileApps\Windows\M365\M365Apps.json
- Templates\MobileApps\Windows\Store\AdobeAcrobatReaderDC.json
- Templates\MobileApps\Windows\Store\CompanyPortal.json
- Templates\MobileApps\Windows\Store\MicrosoftCopilot.json
- Templates\MobileApps\Windows\Store\MicrosoftTeams.json
- Templates\MobileApps\Windows\Store\Notion.json
- Templates\MobileApps\Windows\Store\PowerBIDesktop.json
- Templates\MobileApps\Windows\Store\PowerShell.json
- Templates\MobileApps\Windows\Store\Slack.json
- Templates\MobileApps\Windows\Store\Spotify-MusicandPodcasts.json
- Templates\MobileApps\Windows\Store\VLC.json
- Templates\MobileApps\Windows\Store\VisualStudioCode.json
- Templates\MobileApps\Windows\Store\WhatsApp.json
- Templates\MobileApps\Windows\Store\WindowsApp.json
- Templates\MobileApps\Windows\Store\WindowsTerminal.json
- Templates\MobileApps\Windows\WinGet\Apps\7-zip.json
- Templates\MobileApps\Windows\WinGet\Apps\anysphere-cursor.json
- Templates\MobileApps\Windows\WinGet\Apps\claude-code.json
- Templates\MobileApps\Windows\WinGet\Apps\claude.json
- Templates\MobileApps\Windows\WinGet\Apps\docker-desktop.json
- Templates\MobileApps\Windows\WinGet\Apps\everything-search.json
- Templates\MobileApps\Windows\WinGet\Apps\foxit-pdf-reader.json
- Templates\MobileApps\Windows\WinGet\Apps\git-for-windows.json
- Templates\MobileApps\Windows\WinGet\Apps\github-desktop.json
- Templates\MobileApps\Windows\WinGet\Apps\google-chrome.json
- Templates\MobileApps\Windows\WinGet\Apps\greenshot.json
- Templates\MobileApps\Windows\WinGet\Apps\microsoft-edge.json
- Templates\MobileApps\Windows\WinGet\Apps\microsoft-powertoys.json
- Templates\MobileApps\Windows\WinGet\Apps\microsoft-teams.json
- Templates\MobileApps\Windows\WinGet\Apps\mozilla-firefox.json
- Templates\MobileApps\Windows\WinGet\Apps\notepad-plus-plus.json
- Templates\MobileApps\Windows\WinGet\Apps\notion.json
- Templates\MobileApps\Windows\WinGet\Apps\power-bi-desktop.json
- Templates\MobileApps\Windows\WinGet\Apps\putty.json
- Templates\MobileApps\Windows\WinGet\Apps\sharex.json
- Templates\MobileApps\Windows\WinGet\Apps\slack.json
- Templates\MobileApps\Windows\WinGet\Apps\treesize-free.json
- Templates\MobileApps\Windows\WinGet\Apps\visual-studio-code.json
- Templates\MobileApps\Windows\WinGet\Apps\vlc-media-player.json
- Templates\MobileApps\Windows\WinGet\Apps\windows-app.json
- Templates\MobileApps\Windows\WinGet\Apps\windows-terminal.json
- Templates\MobileApps\Windows\WinGet\Apps\winscp.json
- Templates\MobileApps\Windows\WinGet\Apps\zoom-workplace.json
- Templates\MobileApps\Windows\WinGet\Icons\7-zip.png
- Templates\MobileApps\Windows\WinGet\Icons\anysphere-cursor.png
- Templates\MobileApps\Windows\WinGet\Icons\claude-code.png
- Templates\MobileApps\Windows\WinGet\Icons\claude.png
- Templates\MobileApps\Windows\WinGet\Icons\docker-desktop.png
- Templates\MobileApps\Windows\WinGet\Icons\everything-search.png
- Templates\MobileApps\Windows\WinGet\Icons\foxit-pdf-reader.png
- Templates\MobileApps\Windows\WinGet\Icons\git-for-windows.png
- Templates\MobileApps\Windows\WinGet\Icons\github-desktop.png
- Templates\MobileApps\Windows\WinGet\Icons\google-chrome.png
- Templates\MobileApps\Windows\WinGet\Icons\greenshot.png
- Templates\MobileApps\Windows\WinGet\Icons\microsoft-edge.png
- Templates\MobileApps\Windows\WinGet\Icons\microsoft-powertoys.png
- Templates\MobileApps\Windows\WinGet\Icons\microsoft-teams.png
- Templates\MobileApps\Windows\WinGet\Icons\mozilla-firefox.png
- Templates\MobileApps\Windows\WinGet\Icons\notepad-plus-plus.png
- Templates\MobileApps\Windows\WinGet\Icons\notion.png
- Templates\MobileApps\Windows\WinGet\Icons\power-bi-desktop.png
- Templates\MobileApps\Windows\WinGet\Icons\putty.png
- Templates\MobileApps\Windows\WinGet\Icons\sharex.png
- Templates\MobileApps\Windows\WinGet\Icons\slack.png
- Templates\MobileApps\Windows\WinGet\Icons\treesize-free.png
- Templates\MobileApps\Windows\WinGet\Icons\visual-studio-code.png
- Templates\MobileApps\Windows\WinGet\Icons\vlc-media-player.png
- Templates\MobileApps\Windows\WinGet\Icons\windows-app.png
- Templates\MobileApps\Windows\WinGet\Icons\windows-terminal.png
- Templates\MobileApps\Windows\WinGet\Icons\winscp.png
- Templates\MobileApps\Windows\WinGet\Icons\zoom-workplace.png
- Templates\MobileApps\Windows\WinGet\Presets\mobile-apps.json
- Templates\MobileApps\Windows\WinGet\Presets\starter-pack.json
- Templates\MobileApps\Windows\WinGet\Schemas\winGetAppPreset.schema.json
- Templates\MobileApps\Windows\WinGet\Schemas\winGetAppTemplate.schema.json
- Templates\MobileApps\macOS\M365Apps.json
- Templates\MobileApps\macOS\MicrosoftEdge.json
- Templates\Notifications\First-Warning.json
- Templates\OpenIntuneBaseline\BYOD\AppProtection\Android - Baseline - BYOD - App Protection.json
- Templates\OpenIntuneBaseline\BYOD\AppProtection\iOS - Baseline - BYOD - App Protection.json
- Templates\OpenIntuneBaseline\MACOS\IntuneManagement\CompliancePolicies\MacOS - OIB - Compliance - U - Device Health - v1.0.json
- Templates\OpenIntuneBaseline\MACOS\IntuneManagement\CompliancePolicies\MacOS - OIB - Compliance - U - Device Security - v1.0.json
- Templates\OpenIntuneBaseline\MACOS\IntuneManagement\CompliancePolicies\MacOS - OIB - Compliance - U - Password - v1.0.json
- Templates\OpenIntuneBaseline\MACOS\IntuneManagement\SettingsCatalog\MacOS - OIB - Authentication - D - Platform SSO - v1.0.json
- Templates\OpenIntuneBaseline\MACOS\IntuneManagement\SettingsCatalog\MacOS - OIB - Defender Antivirus - D - Antivirus Configuration - v1.0.json
- Templates\OpenIntuneBaseline\MACOS\IntuneManagement\SettingsCatalog\MacOS - OIB - Defender Antivirus - D - MDE Configuration - v1.0.json
- Templates\OpenIntuneBaseline\MACOS\IntuneManagement\SettingsCatalog\MacOS - OIB - Device Security - D - Accounts and Login - v1.0.json
- Templates\OpenIntuneBaseline\MACOS\IntuneManagement\SettingsCatalog\MacOS - OIB - Device Security - D - Restrictions - v1.0.json
- Templates\OpenIntuneBaseline\MACOS\IntuneManagement\SettingsCatalog\MacOS - OIB - Disk Encryption - D - FileVault - v1.0.json
- Templates\OpenIntuneBaseline\MACOS\IntuneManagement\SettingsCatalog\MacOS - OIB - Firewall - D - Gatekeeper - v1.0.json
- Templates\OpenIntuneBaseline\MACOS\IntuneManagement\SettingsCatalog\MacOS - OIB - Microsoft AutoUpdate - D - MAU Configuration - v1.0.json
- Templates\OpenIntuneBaseline\MACOS\IntuneManagement\SettingsCatalog\MacOS - OIB - Microsoft Edge - D - Password Management - v1.0.json
- Templates\OpenIntuneBaseline\MACOS\IntuneManagement\SettingsCatalog\MacOS - OIB - Microsoft Edge - D - Security - v1.0.json
- Templates\OpenIntuneBaseline\MACOS\IntuneManagement\SettingsCatalog\MacOS - OIB - Microsoft Edge - U - Extensions - v1.0.json
- Templates\OpenIntuneBaseline\MACOS\IntuneManagement\SettingsCatalog\MacOS - OIB - Microsoft Edge - U - Profiles, Sign-In and Sync - v1.0.json
- Templates\OpenIntuneBaseline\MACOS\IntuneManagement\SettingsCatalog\MacOS - OIB - Microsoft Edge - U - Updates - v1.0.json
- Templates\OpenIntuneBaseline\MACOS\IntuneManagement\SettingsCatalog\MacOS - OIB - Microsoft Office - D - Office Configuration - v1.0.json
- Templates\OpenIntuneBaseline\MACOS\IntuneManagement\SettingsCatalog\MacOS - OIB - Microsoft OneDrive - D - Service and Access - v1.0.json
- Templates\OpenIntuneBaseline\MACOS\IntuneManagement\SettingsCatalog\MacOS - OIB - Microsoft OneDrive - U - Known Folder Move - v1.0.json
- Templates\OpenIntuneBaseline\MACOS\IntuneManagement\SettingsCatalog\MacOS - OIB - Updates - D - Update Configuration - v1.0.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\CompliancePolicies\Win - OIB - Compliance - U - Defender for Endpoint - v3.1.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\CompliancePolicies\Win - OIB - Compliance - U - Device Health - v3.1.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\CompliancePolicies\Win - OIB - Compliance - U - Device Security - v3.1.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\CompliancePolicies\Win - OIB - Compliance - U - Password - v3.1.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\DeviceConfiguration\Win - OIB - TP - Health Monitoring - D - Endpoint Analytics - v3.4.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\DriverUpdateProfiles\Win - OIB - WUfB Drivers - Ring 1 - Pilot - v3.0.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\DriverUpdateProfiles\Win - OIB - WUfB Drivers - Ring 2 - UAT - v3.0.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\DriverUpdateProfiles\Win - OIB - WUfB Drivers - Ring 3 - Production - v3.0.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - ES - Attack Surface Reduction - D - ASR Rules (Audit Mode) - v3.1.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - ES - Attack Surface Reduction - D - ASR Rules (L2) - v3.7.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - ES - Defender Antivirus - D - AV Configuration - v3.3.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - ES - Defender Antivirus - D - Security Experience - v3.3.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - ES - Defender Antivirus Updates - Ring 1 - Pilot - v3.4.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - ES - Defender Antivirus Updates - Ring 2 - UAT - v3.4.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - ES - Defender Antivirus Updates - Ring 3 - Production - v3.4.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - ES - Encryption - D - BitLocker (OS Disk) - v3.7.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - ES - Encryption - U - Personal Data Encryption - v3.4.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - ES - Local Group Membership - D - Local Administrators - v3.7.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - ES - Windows Firewall - D - Firewall Configuration - v3.1.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - ES - Windows Firewall - D - Security Rules - v3.8.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - ES - Windows Hello for Business - D - WHfB Configuration - v3.2.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - ES - Windows LAPS - D - LAPS Configuration (24H2+) - v3.6.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - ES - Windows LAPS - D - LAPS Configuration - v3.1.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Credential Management - D - Passwordless - v3.3.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Defender Antivirus - D - Additional Configuration - v3.8.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Device Security - D - Administrator Protection - v3.7.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Device Security - D - Audit and Event Logging - v3.7.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Device Security - D - Config Refresh - v3.2.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Device Security - D - Enhanced Phishing Protection - v3.0.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Device Security - D - Local Security Policies (24H2+) - v3.6.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Device Security - D - Local Security Policies - v3.0.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Device Security - D - Location and Privacy - v3.2.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Device Security - D - Login and Lock Screen - v3.8.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Device Security - D - Printing - v3.7.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Device Security - D - Remote Desktop Services and RPC - v3.0.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Device Security - D - Script File Associations - v3.4.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Device Security - D - Security Hardening - v3.7.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Device Security - D - Timezone - v3.4.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Device Security - D - User Rights - v3.7.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Device Security - D - Windows Package Manager - v3.5.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Device Security - D - Windows Subsystem for Linux - v3.2.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Device Security - U - Device Guard, Credential Guard and HVCI - v3.7.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Device Security - U - Power and Device Lock - v3.6.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Device Security - U - Windows Sandbox - v3.4.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Device Security - U - Windows Spotlight and Org Messages - v3.0.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Internet Explorer (Legacy) - D - Security - v3.1.1.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Microsoft Accounts - D - Configuration - v3.2.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Microsoft Edge - D - Security - v3.8.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Microsoft Edge - D - Updates - v3.6.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Microsoft Edge - U - Extensions - v3.1.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Microsoft Edge - U - Password Management - v3.0.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Microsoft Edge - U - Profiles, Sign-In and Sync - v3.0.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Microsoft Edge - U - User Experience - v3.8.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Microsoft Office - D - Security - v3.6.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Microsoft Office - D - Updates - v3.0.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Microsoft Office - U - Config and Experience - v3.6.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Microsoft Office - U - Security - v3.6.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Microsoft OneDrive - D - Configuration - v3.2.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Microsoft OneDrive - U - Configuration - v3.8.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Microsoft Store - D - Configuration - v3.8.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Microsoft Store - U - Configuration - v3.3.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Network Security - D - Disable NTLM - v3.8.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Windows Apps - D - In-Box App Removal - v3.7.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Windows Hello for Business - D - Cloud Kerberos Trust - v3.5.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Windows Update for Business - D - Delivery Optimisation - v3.0.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Windows Update for Business - D - Reports and Telemetry - v3.0.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Windows User Experience - D - Automatic Restart Sign-On - v3.8.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Windows User Experience - D - Feature Configuration - v3.8.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Windows User Experience - D - Settings Sync - v3.7.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\SettingsCatalog\Win - OIB - SC - Windows User Experience - U - Copilot - v3.8.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\UpdatePolicies\Win - OIB - WUfB - Ring 1 - Pilot - v3.0.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\UpdatePolicies\Win - OIB - WUfB - Ring 2 - UAT - v3.0.json
- Templates\OpenIntuneBaseline\WINDOWS\IntuneManagement\UpdatePolicies\Win - OIB - WUfB - Ring 3 - Production - v3.0.json
- Templates\OpenIntuneBaseline\WINDOWS\PolicyManifest.json
- Templates\OpenIntuneBaseline\WINDOWS365\IntuneManagement\CompliancePolicies\Win365 - OIB - Compliance - U - Device Health - v1.0.json
- Templates\OpenIntuneBaseline\WINDOWS365\IntuneManagement\SettingsCatalog\Win365 - OIB - Device Security - D - Connectivity Settings - v1.0.json
- Templates\OpenIntuneBaseline\WINDOWS365\IntuneManagement\SettingsCatalog\Win365 - OIB - Device Security - D - Resource Redirection - v1.0.json
- Templates\StaticGroups\Static-Groups.json
- media\IHDEdit.mp4
- media\IHKLogo.png
- media\IHTLogoClearLight.png
- media\SampleOutput.png
- media\SocialCard.png
- media\TUI.png
- media\billboard.png
- media\demo.gif
- settings.schema.json
Version History
| Version | Downloads | Last updated |
|---|---|---|
| 1.1.1 (current version) | 5 | 7/6/2026 |
| 1.1.0 | 14 | 6/26/2026 |
| 1.0.1 | 16 | 6/20/2026 |
| 1.0.0 | 57 | 5/31/2026 |
| 0.8.1 | 28 | 5/26/2026 |
| 0.7.1 | 43 | 5/8/2026 |
| 0.7.0 | 39 | 4/26/2026 |
| 0.6.1 | 33 | 4/16/2026 |
| 0.6.0 | 26 | 4/5/2026 |
| 0.5.1 | 15 | 4/1/2026 |
| 0.3.4 | 232 | 1/18/2026 |
| 0.3.3 | 28 | 1/11/2026 |
| 0.3.1 | 16 | 1/9/2026 |
| 0.3.0 | 53 | 1/5/2026 |
| 0.2.9 | 8 | 1/5/2026 |
| 0.2.8 | 16 | 1/3/2026 |
| 0.2.7 | 20 | 1/1/2026 |
| 0.2.6 | 46 | 12/22/2025 |
| 0.2.5 | 24 | 12/18/2025 |
| 0.2.3 | 59 | 12/14/2025 |
| 0.2.2 | 99 | 12/9/2025 |
| 0.2.1 | 26 | 12/8/2025 |
| 0.1.1 | 31 | 11/28/2025 |