How do you try to avoid having policy conflicts in Intune? One minute we're advised to use a security baseline, the next we're setting up a disk encryption policy in "Endpoint Security". Lots of scope for overlaps and conflicts. From a 'style' perspective, I kind of like keeping small sets of related policy items in Configuration Profiles, so I wind up with loads of small Config Profiles (e.g. Edge, Bitlocker, Cortana, LocationSettings, Lockscreen, Onedrive, DeviceCerts, UserCerts, WindowsUpdate). This is pretty much opposite to our style in GPO, where we had almost all user settings in a big UserGPO and almost all device settings in a big DeviceGPO.
This is where the ambiguity comes in- I think it comes down to working with someone who's done it before. When I started, it was all profile templates, and then administrative templates came in to the picture. Settings catalog was much later, etc. It comes down to grouping everything logically and testing the policy that applies to your devices and works for what you're trying to achieve.
How do you try to avoid having policy conflicts in Intune? One minute we're advised to use a security baseline, the next we're setting up a disk encryption policy in "Endpoint Security". Lots of scope for overlaps and conflicts. From a 'style' perspective, I kind of like keeping small sets of related policy items in Configuration Profiles, so I wind up with loads of small Config Profiles (e.g. Edge, Bitlocker, Cortana, LocationSettings, Lockscreen, Onedrive, DeviceCerts, UserCerts, WindowsUpdate). This is pretty much opposite to our style in GPO, where we had almost all user settings in a big UserGPO and almost all device settings in a big DeviceGPO.
This is where the ambiguity comes in- I think it comes down to working with someone who's done it before. When I started, it was all profile templates, and then administrative templates came in to the picture. Settings catalog was much later, etc. It comes down to grouping everything logically and testing the policy that applies to your devices and works for what you're trying to achieve.