Source
r/Intune•
roastedpot

Assignment Failure reporting

Heya, I'm having an issue where Security baselines that I had deployed as a test are still showing as having assignment failures (Conflict with a setting) even long after the policy has been unassigned to anything.

Posted Feb 15, 2023, 5:02 PM UTC

21
Eyebanger•

What I've found is that to remove a security baseline setting is you need to wipe/reset the device. My sources are:

https://learn.microsoft.com/en-us/mem/intune/protect/security-baselines-configure

When a security baseline setting no longer applies to a device, or settings in a baseline are set to Not configured, those settings on a device might not revert to a pre-managed configuration depending on the settings in the security baseline. The settings are based on CSPs, and each CSP can handle the change removal differently.

​

https://www.reddit.com/r/Intune/comments/jz4i6c/comment/i3c0nf2/?utm_source=share&utm_medium=web2x&context=3

​

Symptom:

Remove applied Security Baselines from one Device

Cause:

Both the security baseline policy were taking effect on the device and user wanst to test the new policy on some devices

Resolution:

• security base line policy is permanent tattooed and inorder to apply the new security base line policy first re-assign the old policy from those devices and then reset the device and then apply the new security base line policy .

3