Microsoft Intune: Week of October 5, 2026

Device security

Intune security baseline for Windows 11, version 26H2

The Windows security baseline for Windows 11, version 26H2 is now available in Microsoft Intune. This baseline reflects current Microsoft security recommendations and is the latest available Windows security baseline in Intune.

The Windows 11, version 26H2 security baseline includes new settings, updated default values, and revised security guidance. Existing security baseline profiles don't automatically update to the new version.

To use the Windows 11, version 26H2 security baseline, Intune admins can create a new baseline profile or update an existing profile to the latest version. Review the settings before moving from a previous baseline version, especially if existing profiles include customizations.

The Configure NetBIOS settings policy isn't included in this baseline release because it's currently supported only on Windows Insider builds. We plan to add the setting in a future baseline update after it becomes available for supported, in-market Windows versions and through the Intune Settings Catalog. This change will be communicated when available.

For a detailed breakdown of setting changes, see the Windows blog post Windows 11, version 26H2 security baseline.

To view the default configuration of the Intune baseline for Windows 11, version 26H2, see Windows MDM baseline settings.