Complete Automation

Almost all CIS tests for Windows 10 and 11 are automated with SmartProfiler for Windows InTune CIS Assessment.

Detailed Reporting

Detailed reporting includes information about each CIS Test and Step-By-Step Recommendations to fix the issues.

528 Settings

Checks to make sure all InTune recommended settings by CIS are configured on the Target Windows devices.

Check InTune Configuration

Windows 10/11 InTune CIS Assessment supports checking if you have relevant InTune GPO configured in your Microsoft 365 Tenants.

Image

Windows 10/11 InTune CIS Assessment by SmartProfiler

As part of your Windows 10-11 InTune CIS Assessment, validating CIS settings in both the InTune Admin Center and on your devices ensures that security best practices are applied and enforced. It’s important to consistently monitor and audit GPO deployments to ensure compliance, especially as settings evolve in both on-prem AD environments and in the cloud through Intune. Properly identifying the source of GPO settings will also help prevent conflicts and ensure consistent enforcement of security policies across all devices.

The idea as part of Windows InTune GPO Assessment here is to:

  • Check if you are using CIS recommended InTune settings as part of your InTune GPO deployment.
  • If you have configured InTune GPO then are those GPO settings applying to expected devices?
  • What’s the source of GPO Setting? Is it AD GPO or InTune GPO?

The Center for Internet Security is a nonprofit entity whose mission is to ‘identify, develop, validate, promote, and sustain best practice solutions for cyberdefense.’ It draws on the expertise of cybersecurity and IT professionals from government, business, and academia from around the world. To develop standards and best practices, including CIS benchmarks, controls, and hardened images, they follow a consensus decision-making model. SmartProfiler is designed to support CIS Standards designed for Microsoft 365 and Azure Assessments.

Automation

Shape Image
Shape Image

Simple Requirement

SmartProfiler for Windows 10/11 InTune CIS Assessment requires a Service Principal Account with necessary read-only permissions to execute all tests if you need to check InTune GPO Configuration in your Microsoft 365 Tenants.

An Entra App with necessary permissions

SmartProfiler makes use of Entra App to ensure all settings are configured correctly in InTune Admin Center.

PowerShell and Graph API

SmartProfiler utilizes Microsoft PowerShell Modules and Graph API to perform assessment in InTune Admin Center and on target devices.

Read-Only Operation

SmartProfiler is a read-only product, and no write operation is ever made to the target while it is being assessed.

Image

Quick Assessment

SmartProfiler for Windows 10/11 InTune CIS Assessment is simple to use and execute in four-steps.

  • Register Tenant
  • Assessment Summary
  • Execute Assessment
  • Generate Report
View Details

Frequently Asked Questions

Image
List of Tests

CIS V3.0.0 Tests

Here is the list of tests included with SmartProfiler for Windows 10/11 InTune.

Why Choose SmartProfiler for Windows 10/11 InTune CIS Assessment

Instead of manually gathering data, which could take a significant amount of time, SmartProfiler for Windows 10/11 InTune CIS Assessment has automated all the tests to ensure that the assessment is completed in a matter of hours.

  • Fully Automated
  • Check InTune Settings on Target Devices for Troubleshooting Purposes
  • Check InTune GPO Settings in Microsoft 365 Tenants
  • Create Unlimited Templates and modify settings according your environment
  • Supports Latest CIS V3.0.0.
Download Now

What Client’s Say About Us

If you’re really looking for an Active Directory security assessment tool, download SmartProfiler and perform an assessment. This will assist you in identifying security, health, and configuration problems.

Kilva Dew

Systems Architect

The health and misconfiguration assessment feature of SmartProfiler can be very useful in demonstrating that your environment does not use Microsoft’s suggested settings.

Axon Detos

CEO

The best feature of SmartProfiler is that it can perform the assessment without a Global Admin account and without needing the registration of an Azure AD application. Because it only required a Global Reader Account, we were able to use the tool effectively for our clients and clients could allow us to conduct the assessment!

John Dona

Designer

SmartProfiler's advanced assessment parameters really gives you insights about your Active Directory environment and make sure every risk is mitigated.

Viral Joshi

IT Manager - BKT Tires

Latest Articles

blog image

M365 CIS Benchmark and Microsoft Zero Trust Security Model

Organizations are increasingly reliant on cloud-based services to enhance productivity and collaboration. Microsoft 365, with

Read More
blog image

Using Active Directory Smart Queries

AD Smart Queries ship as part of the Active Directory Assessment License. The AD Smart

Read More
blog image

Performing Active Directory Security Assessment

Before you can start performing Active Directory security assessment you are required to perform an

Read More

Copyright © DynamicPacks Technologies

Translate »

Table of Contents

→ Index