microsoft endpoint configuration manager

The reason we use the term “ Tenant Attach” is because it is simply a way to attach your ConfigMgr hierarchy to your tenant. Tenant Attach means that ConfigMgr or Intune can manage the device. A co-managed device is basically managed by both ConfigMgr and Intune at the same time. Co-management is not new and has been around for quite a while now. With tenant attach, you can view data and perform basic administrative tasks in your SCCM environment. Staging – Configure Roll Out Collectionsīy definition, Tenant attach connects your Azure tenant to your on-premises SCCM environment, and then you view and manage devices directly from the Intune Admin Center.Configure Upload to Microsoft Endpoint Manager Cloud Console.Enable device upload when co-management is already enabled.It's a little confusing and any anecdotes or bits of clarity would be greatly appreciated. It seems to be that Security Baselines are simply a Microsoft 'recommendation' for policies that you can set individuall under the 'Manage' section of Endpoint Security. Which is best to use or what situation would you use one over the other? If there is, what dictates whether you should use one over the other? Example: Security Baselines contain Bitlocker configurations but so do Disk Encryption policies. Is there a functional difference between Security Baselines and just setting the individual policies (Antivirus, Disk Encryption, Firewall, EDR, etc)? It looks like 'Security Baselines' contain much of the same configurations as the Policy settings found under the 'Manage' section of Endpoint Security. I started looking for STIGs or STIG equivalents (former AD on-prem guy) and I ran across Security Baselines under Endpoint Security. I see you can set policies for Antivirus, Disk Encryption, etc under the manage section of Endpoint Security. I started reviewing the various parts of Endpoint Security in MEM. I have gotten working demos of most of the baseline stuff going right now and I am moving on to the Endpoint Security aspect of Intune/MEM/Defender for Endpoint. Newer to Intune/MEM and I am trying to wrap my head around principals of the application.

Microsoft endpoint configuration manager