Windows 10: Are Microsoft Security Baselines allowed to deploy via MS Intune with MS Business Premium...

Dear all,I am no native English speaker, so please excuse any incorrect spelling.We are hoping to reach a wider range of professionels who could answer this question by using english plus it probably helps a wider range of people this way.I will jump directly to the core questions that are relevant to answer the question regarding license requirement for the use of security baselines for our usecase.Afterwards i will explain our research effort so far and the origin of confusion about licensing requirements for MS Security Baselines deployment via Intune with Microsoft Business Premium Abonnem

:)

 

MS Security Baseline Help.

Hi Abraham,

Your MS Security Baseline concern is more complex than what is typically answered in the Microsoft Answers forums. It is best suited for the IT Pro audience on TechNet. Please post your question in our
Microsoft TechNet forums.

Let us know if you have any other questions.

 

Deploy Secfurity baselines profiles from Intune to Azure VM resources

Hi

I would like to deploy some Security baselines to Servers in our Azure enviroments.

 

MS Security Baseline Help.

Hi.

Under the recommendation of a friend, I installed the MS Security Baseline (From the official security baseline guide) to secure my computer and reduce the surface of attack..

I read the documentation, pretty interesting stuff, however I encountered a problem...

I am using Windows 10 Home OEM and I cannot longer install software as an user or update certain programs. I can install them from the Admin account (Both local accounts) but my user account cannot access them. It says that a security policy is not allowing
"this or that" program.

I did create a restoration point before applying the guideline using LGPO, however I do not wish to undo all the changes made by the Guideline as I did notice a better performance in my computer from a security point of view.

So here are my questions:

A) From a Home version, is it possible to tinker with the registry to allow a secondary, local user account to be able to install software as an administrator (The default state of windows I guess) or better yet, install software from the admin account and
have those available to other users? To be honest I am not sure what is exactly interfering but the reason I am asking is because I would like to enable and disable this state at will. I do not often install software and enabling a state in which no program
can escalate privileges is really helpful.

B) In case I have to go back to a restoration point, what would be the best way to harden windows home? I have read into the ways Windows already creates a secure environment with DEP and ASRL, but I would like a more hands on approach.

Finally, I really wish to know more about security and I am really just learning about this, so if anyone has a recommended reading suggestion I would appreciate it.

Thank you in advance for your assistance.

**Moved from: Windows / Windows 10 / Windows settings**