Every security baseline in Intune has worked the same way. You pick a baseline, assign it, and Intune pushes settings to the device. The STIG audit baseline does the opposite. It pushes nothing. It reads the device and tells you whether it meets the STIG. That sounds like a small difference. It isn’t. This is … Continue reading STIG audit baseline in Intune: auditing what is actually on the device