Microsoft Intune

Exploring Microsoft Intune Config Refresh

July 28, 2025 by Jesper Nielsen • 11 minutes to read

Have you ever deployed a configuration policy, only to discover a user or rogue application changed the settings hours later? With traditional MDM, you might not even know until the next sync - and those syncs happen far less frequently than you might expect. Config Refresh gives IT administrators a way to automatically restore policy settings at regular intervals, closing the gap between when drift occurs and when it gets corrected.

5 thoughts about the Microsoft Intune security baselines

April 3, 2025 by Jesper Nielsen • 17 minutes to read

Should you apply the Microsoft Intune security baselines because Microsoft has already decided which settings are secure?

I do not think the Microsoft Intune security baselines are bad. They contain valuable recommendations and can help you understand how Microsoft approaches a secure configuration. However, I do not fancy using them as the foundation of my device configuration strategy.

A friend of mine says, “They are great if you do not know what you are doing.” I see it differently. If you do not know what you are doing, you should not apply a large collection of security settings that you cannot explain. A baseline does not remove the need to understand each setting. It makes that understanding even more important.