Skip to content

Commit ee381f2

Browse files
authored
Merge pull request #3732 from diannegali/docs-editor/tvm-security-baselines-1747059613
Update tvm-security-baselines.md
2 parents 7769591 + 06a8509 commit ee381f2

File tree

1 file changed

+5
-8
lines changed

1 file changed

+5
-8
lines changed

defender-vulnerability-management/tvm-security-baselines.md

Lines changed: 5 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ ms.collection:
1212
- Tier1
1313
ms.topic: conceptual
1414
search.appverid: met150
15-
ms.date: 04/24/2025
15+
ms.date: 05/12/2025
1616
---
1717

1818
# Security baselines assessment
@@ -33,14 +33,14 @@ A security baseline profile is a customized profile that you can create to asses
3333
Security baselines provide support for Center for Internet Security (**CIS)** benchmarks for Windows 10, Windows 11, and Windows Server 2008 R2 and above, as well as Security Technical Implementation Guides (**STIG)** benchmarks for Windows 10 and Windows Server 2019.
3434

3535
> [!NOTE]
36-
> The benchmarks currently only support Group Policy Object (GPO) configurations and not Microsoft Configuration Manager (Intune).
36+
> - The benchmarks currently only support Group Policy Object (GPO) configurations and not Microsoft Configuration Manager (Intune).</br>
37+
> - Security baseline assessment is not supported on non-English Windows system locale.</br>
38+
> - Security baseline assessment is not supported when DFSS (Dynamic Fair Share Scheduling) is enabled on Windows Server 2012 R2.</br>
39+
> - For security baseline assessment to be successful, **PowerShell Constrained Language Mode** must be set to **off** on your devices.
3740
3841
> [!TIP]
3942
> Did you know you can try all the features in Microsoft Defender Vulnerability Management for free? Find out how to [sign up for a free trial](defender-vulnerability-management-trial.md).
4043
41-
> [!NOTE]
42-
> Security baseline assessment is not supported when DFSS (Dynamic Fair Share Scheduling) is enabled on Windows Server 2012 R2.
43-
4444
## Get started with security baselines assessment
4545

4646
1. Go to **Vulnerability management** > **Baselines assessment** in the [Microsoft Defender portal](https://security.microsoft.com).
@@ -74,9 +74,6 @@ Useful icons to be aware of:
7474

7575
![Not using the default value](/defender/media/defender-vulnerability-management/customized_value.png) - This configuration has been customized and is not using the default value.
7676

77-
> [!NOTE]
78-
> For security baseline assessment to be successful, **PowerShell Constrained Language Mode** must be set to **off** on your devices.
79-
8077
## Security baselines assessment overview
8178

8279
On the security baselines assessment overview page you can view device compliance, profile compliance, top failing devices and top misconfigured devices.

0 commit comments

Comments
 (0)