Unpacking Endpoint Management: Group Policy migration

Thanks guys!

What's the best way to apply security policies? is it using Settings Catalog or via Security Baseline in Endpoint Security? Will they conflict if both are used? Looks like Security Baseline for Windows 10 and later was published last time long time ago in 2021!!!

That would be great to have the same workflow that we have with AGPM. Check-out a Policy, make changes, Check-in, submit for deployment, and have an approver review and approve. Rollback ability. History of all changes made to the policy.

I'm looking forward to the day when we can generate a settings report that looks like the traditional RSoP, that gives us the policy path information, and the name of the Configuration Profile, or Security Baseline policy that the setting is being managed from. This is critical in debugging.

It is possible to get information when will be available to import in to intune 3th party ADMX and ADML? Current limit is only 10 files. This limmit is tooooo small. For example for manage firefox is 4 required. MS implemented management of chrome. But Update ADMX is still missing Can you fix it,please? THX

In the case of applied settings from Configuration Profiles when checking the client to see if the item is set as expected do we check the Registry item that's described in the setting documentation (the documentation usually points to the GPO setting and corresponding Registry item) or are settings delivered via Intune applied in a different location? Here's an example for an Edge setting from the Learn documentation: https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies#windows-information-and-settings-7 Windows information and settings Group Policy (ADMX) info GP unique name: AutoSelectCertificateForUrls GP name: Automatically select client certificates for these sites GP path (Mandatory): Administrative Templates/Microsoft Edge/Content settings GP path (Recommended): N/A GP ADMX file name: MSEdge.admx Windows Registry Settings Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\AutoSelectCertificateForUrls Path (Recommended): N/A Value Name: 1, 2, 3, ... Value Type: list of REG_SZ

If we want to control everything through the settings catalog only, how do we import exact copies of say disk encryption from endpoint security and security baselines? How can we get a single pane of glass to see all these settings?

Is it possible for third-party apps to have their own CSPs that work better with MDM products like Intune? It seems like that would be preferable to every customer uploading the third-party vendors' ADMX files.

We have devices filters today, that we can use for include and exclude on our policies. - Q: Will there be support for user filters?