Using the CIS Microsoft Intune Build Kits for Microsoft Windows 10 and 11

Problem

Solution

The CIS Microsoft Intune for Windows 10 and 11 Benchmarks are designed to support Microsoft Intune-managed systems. As such, you will be importing the JSON files contained within the Build Kit into configuration profiles in the Microsoft Intune admin center. Additionally, there is an Excel file in the Build Kit .zip that details out recommendations to the JSON file.

Most Benchmark settings are contained in the Settings Catalog configuration profile in JSON format and can be imported directly into an Intune configuration profile.

To import these settings into Intune configuration profiles, as the profile type “Settings catalog,” perform the following:

1. Unzip the build kit to a local folder on the computer you plan to import from.

1. Navigate to Microsoft Intune admin center at Microsoft Intune admin center

2. Select Devices > Configuration profiles.

3. Under Profiles Create > Import policy.

4. Click the icon of the folder and select the build kit JSON file from the location the files were unzipped to. Add a new name and click save. The name can be the same as the file name or discretionary.

5. Repeat for any additional build kit profiles that are being added.

Once imported, edit the Profiles accordingly before applying to any system. Once the profiles are tailored to the organization’s needs and properly tested, begin rollout to a small group of systems.

Keywords; Intune Windows 10 Windows 11 Build Kit

Content by Label