Intune
25 checks from CIS Microsoft 365 Foundations Benchmark, Mito: 13 High, 8 Medium, 4 Low.
| ID | Title | Severity | Suite |
|---|---|---|---|
| CIS.M365.4.1 | Ensure devices without a compliance policy are marked ‘not compliant’ | Medium | CIS Microsoft 365 Foundations Benchmark |
| MT.1053 | Ensure intune device clean-up rule is configured | Low | Mito |
| MT.1054 | Ensure built-in Device Compliance Policy marks devices with no compliance policy assigned as ‘Not compliant’ | Medium | Mito |
| MT.1092 | Intune APNS certificate should be valid for more than 30 days | High | Mito |
| MT.1093 | Apple Automated Device Enrollment Tokens should be valid for more than 30 days | High | Mito |
| MT.1094 | Apple Volume Purchase Program Tokens should be valid for more than 30 days | High | Mito |
| MT.1095 | Android Enterprise account connection should be healthy | High | Mito |
| MT.1096 | Ensure at least one Intune Multi Admin Approval policy is configured | Medium | Mito |
| MT.1097 | Ensure all Intune Certificate Connectors are healthy and running supported versions | High | Mito |
| MT.1098 | Mobile Threat Defense Connectors should be healthy | High | Mito |
| MT.1099 | Windows Diagnostic Data Processing should be enabled | Low | Mito |
| MT.1100 | Intune Diagnostic Settings should include Audit Logs (not run by Mito) | High | Mito |
| MT.1101 | Default Branding Profile should be customized | Low | Mito |
| MT.1102 | Windows Feature Update Policy Settings should not reference end of support builds | High | Mito |
| MT.1103 | Ensure Intune RBAC groups are protected by Restricted Management Administrative Units or Role Assignable groups | High | Mito |
| MT.1105 | Ensure MDM Authority is set to Intune | Low | Mito |
| MT.1123 | Ensure BitLocker full disk encryption is configured | High | Mito |
| MT.1177 | Ensure LAPS Configuration Policy is properly set. | Medium | Mito |
| MT.1178 | Ensure ASR Rules are configured correctly. | High | Mito |
| MT.1179 | Ensure App Control for Business is enabled. | High | Mito |
| MT.1180 | Ensure Managed Installer Rules are configured correctly. | Medium | Mito |
| MT.1214 | Ensure macOS compliance policy requires System Integrity Protection. | Medium | Mito |
| MT.1215 | Ensure Gatekeeper restricts macOS app download locations. | Medium | Mito |
| MT.1216 | Ensure macOS compliance policy requires a Defender machine risk score level. | Medium | Mito |
| MT.1217 | Ensure macOS LAPS is configured on Automated Device Enrollment profiles. | High | Mito |
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.