Intune — Endpoint Management · Microsoft 365 Security Checkliste

Skillplan M365 Checklist

2026-07-20 00:24

Bewertungsfortschritt 0 / 136 Elemente 0%

Bisherige Erfüllung 0 / 0 Kontrollen 0%

Enforce a device compliance policy that requires BitLocker, Secure Boot, antivirus, and a current OS build.

Require Conditional Access to consume Intune device compliance signals (no access for non-compliant devices).

Enroll all Windows devices via Autopilot; eliminate manual on-the-box administrator provisioning.

Apply App Protection Policies (MAM) requiring a PIN, blocking copy/paste to unmanaged apps, and wiping on jailbreak.

Deploy Defender for Endpoint via Intune; do not rely on user-driven onboarding.

Enable Endpoint Privilege Management to grant just-in-time local-admin elevation for approved actions.

Apply ASR rules and Controlled Folder Access via the Intune Endpoint Security blade.

Maintain a corporate-device wipe policy for retired or lost devices and exercise it quarterly.