Skip to content
Documentation
Verified

OpenIntuneBaseline

A community-driven security baseline framework for Microsoft Intune. Provides pre-configured security policies for Windows, Windows 365, and macOS aligned with NCSC, CIS Benchmarks, ACSC Essential Eight, and Microsoft best practices. Importable via IntuneManagement tool or native Intune import.

Works with
WindowsmacOSSecurity BaselinesConfig Profiles

Security Analysis

6of 6
All Checks Passed

3 files scanned on Aug 16, 2026

No Obfuscated Code
No Remote Execution
No Credential Theft
No Data Exfiltration
No Malicious Patterns
No Hardcoded Secrets
AI Analysis

Code appears to be legitimate Microsoft Intune / device management tooling (policy manifest management, Timezone/location settings, and post-OOBE updates). No malicious patterns detected. Ensure code signing, strict access controls, and monitoring are in place to guard against misuse of registry changes and update triggers.

You might also like

Other

Mace

M.A.C.E. is a native macOS app that lets security teams build, customize, audit, and deploy macOS compliance baselines using the mSCP 2.0 framework without scripting. It offers a visual, three-panel editor with 500+ rules, real-time audit results, and exportable configuration profiles for MDMs such as Intune and Jamf. The tool prioritizes ease of use, cross-MDM readiness, and reproducible baselines.

Cody KeatsCody Keats
Documentation

Intune Baselines

Intune Baselines provides curated JSON Intune profiles that implement CIS, compliance, and security baselines across Windows, macOS, iOS/iPadOS, Android, and enterprise apps. Built from best practices, Zero Trust concepts, and official CIS benchmarks, these profiles are designed for rapid import into Intune (via Micke-K's IntuneManagement tool). Regularly updated, they support scalable Modern Workplace deployments and testing in diverse environments.

Jan MulderJan Mulder
Documentation

Intune Mac Admins

A community-driven documentation hub for macOS management within Microsoft Intune. Features guides, scripts, tools, and best practices contributed by IT professionals and Microsoft MVPs. Includes a Copilot assistant for macOS management queries and integration with the Open Intune Baseline (OIB) project for curated device management settings.

Ugur KocUgur Koc +4
Documentation

Conditional Access Baseline

Conditional Access Baseline is a ready-to-use Intune baseline aligned with the Microsoft Conditional Access Baseline. It provides a reduced but comprehensive set of CA policies across identities, apps, and platforms, enforcing MFA, blocking legacy authentication, and applying risk-based controls. The baseline includes guidance to automate policy import (via IntuneManagementTool) and recommends adding break-glass accounts to the exclusion group CA-BreakGlassAccounts - Exclude.

Joey VerlindenJoey Verlinden