Microsoft Intune Endpoint Security Lab | Defender, Firewall & Attack Surface Reduction

In this hands-on Microsoft Intune Endpoint Security lab, I configured and verified endpoint protection controls as part of my Microsoft Entra ID & Intune Zero Trust Security Lab. I started by checking the existing Microsoft Defender security state on my Windows 11 client before making any changes. I then created and deployed endpoint security policies through Microsoft Intune for Microsoft Defender Antivirus, Windows Firewall and Attack Surface Reduction (ASR). For the Attack Surface Reduction rules, I used Audit mode first so the protections could be evaluated without immediately blocking legitimate activity. I then verified that the policies had reached the Windows 11 endpoint using both the local security state and PowerShell rather than relying only on the Intune deployment status. In this video, I demonstrated: Checking the Microsoft Defender baseline with PowerShell Configuring Microsoft Defender Antivirus through Intune Enabling Potentially Unwanted Application protection Enabling Network Protection Configuring Windows Firewall through Intune Verifying Domain, Private and Public firewall profiles Configuring Attack Surface Reduction rules Using ASR rules in Audit mode Verifying ASR rule deployment with PowerShell Checking policy deployment and per-setting status in Intune Verifying security controls directly on the Windows 11 endpoint This was Video 3 of my Microsoft Entra ID & Intune Zero Trust Security Lab. 📂 Full project documentation and screenshots: https://github.com/ajimohlot/Entra-In... ▶️ Full project playlist:    • Microsoft Entra ID & Intune Zero Trust Sec...   Previous videos: Video 1 – Microsoft Entra Conditional Access: Watch Video 1 Video 2 – Microsoft Entra Authentication Security: Watch Video 2 #MicrosoftIntune #MicrosoftDefender #EndpointSecurity #AttackSurfaceReduction #WindowsFirewall #MicrosoftEntra #ZeroTrust #Cybersecurity #HomeLab