Microsoft Intune
GeneralIndex
In brief
Intune commercial tenants can audit Windows devices against STIG recommendations, with per-setting and per-device results to identify configuration gaps. The capability requires Intune Advanced Analytics and supports automated checks; manual checks are separate.
What Intune admins need to know
Administrators can use the audit results to prioritize remediation for Windows devices.
This summary was assembled from the tracked documentation change. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Device security
STIG audit baselines for Windows devices in commercial tenants
Microsoft Intune commercial tenants can now audit Windows devices against Security Technical Implementation Guide (STIG) recommendations. Review per-setting and per-device audit results to identify configuration gaps and prioritize remediation. The baseline evaluates supported automated checks without changing device settings.
This feature requires Intune Advanced Analytics. Assess rules that require manual verification separately.
For more information, see Use STIG audit baselines to assess Windows device compliance.
Applies to:
- Windows
Updated Windows support for Administrator protection settings
Microsoft Intune now supports two Administrator protection settings in the settings catalog on Windows 11 versions 24H2 and 25H2. Admins can configure the Administrator Approval Mode type and choose the elevation prompt behavior used with Administrator protection.
@@ -10,7 +10,7 @@ manager: laurawi author: lenewsad ms.author: lanewsad description: Find out what's new in Microsoft Intune.-ms.date: 2026-10-29T00:00:00.0000000Z+ms.date: 2026-10-30T00:00:00.0000000Z ms.topic: whats-new ai-usage: ai-assisted ms.custom: msecd-doc-authoring-1030@@ -158,6 +158,18 @@ Applies to:
### Device security
+#### STIG audit baselines for Windows devices in commercial tenants
+
+Microsoft Intune commercial tenants can now audit Windows devices against Security Technical Implementation Guide (STIG) recommendations. Review per-setting and per-device audit results to identify configuration gaps and prioritize remediation. The baseline evaluates supported automated checks without changing device settings.
+
+This feature requires Intune Advanced Analytics. Assess rules that require manual verification separately.
+
+For more information, see [Use STIG audit baselines to assess Windows device compliance](../device-security/security-baselines/stig-audit-baseline).
+
+Applies to:
+
+- Windows
+
#### Updated Windows support for Administrator protection settings
Microsoft Intune now supports two Administrator protection settings in the settings catalog on Windows 11 versions 24H2 and 25H2. Admins can configure the Administrator Approval Mode type and choose the elevation prompt behavior used with Administrator protection.