Skip to content
← Back to the guide

Microsoft 365 security baselines

4slides. Screenshot a slide, download it as a PNG, or use your browser's Print → Save as PDF for a LinkedIn-ready multi-page carousel — each slide becomes one page.

M
solvingmicrosoft365.com
1 / 4

Microsoft 365 security baselines

The minimum security configuration every Microsoft 365 tenant should have — and how to get there.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/microsoft-365-security-baselines

Slide 1Download PNG
M
solvingmicrosoft365.com
2 / 4
01

What is a security baseline in Microsoft 365?

A set of recommended configuration values — for Windows, Edge, Microsoft 365 Apps, and Defender for Endpoint — published by Microsoft and deployable as Intune policies. They encode the hardening Microsoft's own security…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/microsoft-365-security-baselines

Slide 2Download PNG
M
solvingmicrosoft365.com
3 / 4
02

Should I deploy Microsoft's security baselines as-is?

Deploy them to a pilot first. Baselines are strict by design and some settings (credential guard, script blocking, legacy protocol hardening) break older applications. Duplicate the baseline, adjust the handful of setti…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/microsoft-365-security-baselines

Slide 3Download PNG
M
solvingmicrosoft365.com
4 / 4
03

How do security baselines relate to CIS benchmarks?

They overlap heavily. CIS benchmarks are vendor-neutral and more granular; Microsoft baselines are curated for what Microsoft considers practical. Many organisations deploy Microsoft baselines and reference CIS for audi…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/microsoft-365-security-baselines

Slide 4Download PNG

Auto-generated from Microsoft 365 security baselines. This page is not indexed and isn't part of the guide itself.