Latest / The Windows Podcast with Fexingo: Microsoft, PC, and Enterprise Windows Conversations
Windows 11 Enterprise Baseline Security Profiles Go Mandatory
Microsoft is turning its Security Baseline recommendations into enforced defaults for Windows 11 Enterprise devices enrolled in Intune and Windows Update for Business. Starting with the 2026 H1 feature update, devices that fall below the baseline will see compliance warnings and, after 30 days, automatic remediation. Lucas and Luna unpack the policy shift, what it means for IT admins who have custom security configurations, and how this departs from the legacy Group Policy approach where baselines were merely advisory. They walk through the specific settings being enforced—Credential Guard…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.