{
    "api_version": "1",
    "kind": "dse_post",
    "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-098-check-the-configuration-source-and-locale-before-using-defender-baseline/",
    "item": {
        "id": "https://update.dsesecurity.com/updates/dse-20260917-098-check-the-configuration-source-and-locale-before-using-defender-baseline/",
        "slug": "dse-20260917-098-check-the-configuration-source-and-locale-before-using-defender-baseline",
        "url": "https://update.dsesecurity.com/updates/dse-20260917-098-check-the-configuration-source-and-locale-before-using-defender-baseline/",
        "alternate_urls": {
            "markdown": "https://update.dsesecurity.com/updates/dse-20260917-098-check-the-configuration-source-and-locale-before-using-defender-baseline.md",
            "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-098-check-the-configuration-source-and-locale-before-using-defender-baseline/"
        },
        "title": "Check the configuration source and locale before using Defender baseline assessments",
        "summary": "Which assessment boundaries matter before reporting Defender benchmark compliance for Windows devices?",
        "format": {
            "slug": "guide",
            "name": "Guide"
        },
        "priority": {
            "slug": "info",
            "name": "Information"
        },
        "featured": false,
        "image": {
            "theme": "cyber-defense",
            "label": "Cyber defense",
            "alt": "Layered glass and metal cyber-defense structure with controlled blue and gold signal paths.",
            "card_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-card.webp?v=1.8.20",
            "hero_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-hero.webp?v=1.8.20",
            "social_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20",
            "width": 2400,
            "height": 1350
        },
        "topics": [
            {
                "slug": "cybersecurity",
                "name": "Cybersecurity",
                "url": "https://update.dsesecurity.com/topic/cybersecurity/"
            },
            {
                "slug": "it",
                "name": "IT",
                "url": "https://update.dsesecurity.com/topic/it/"
            }
        ],
        "author": {
            "name": "DSE Security Editorial Team",
            "url": "https://update.dsesecurity.com/#editorial-team",
            "type": "Organization"
        },
        "publisher": {
            "name": "Detection Systems & Engineering",
            "url": "https://dsesecurity.com/"
        },
        "published_at": "2026-09-17T16:33:22+00:00",
        "modified_at": "2026-09-17T16:38:46+00:00",
        "reviewed_on": "2026-09-17",
        "reading_minutes": 1,
        "word_count": 184,
        "potentially_affected": "Use this applicability check for Microsoft Defender Vulnerability Management security baseline assessments. Record the benchmark, Windows locale and management method for the population being assessed before reporting coverage.",
        "dse_recommendation": "DSE recommends publishing a coverage statement beside each baseline result.",
        "primary_source": {
            "name": "Security baselines assessment - Microsoft Defender Vulnerability Management | Microsoft Learn",
            "url": "https://learn.microsoft.com/en-us/defender-vulnerability-management/tvm-security-baselines",
            "published_on": null,
            "authority": "Microsoft Learn"
        },
        "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
        "usage_info": "https://update.dsesecurity.com/usage/",
        "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
        "content_html": "<h2>Source facts</h2>\n<p>Microsoft documents these benchmarks for Group Policy configurations rather than Intune configurations. The assessment is not supported on Windows systems with a non-English system locale. Some configurations require manual checking and are not automatically assessed for compliance. <a href=\"https://learn.microsoft.com/en-us/defender-vulnerability-management/tvm-security-baselines\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn</a>.</p>\n<h2>Applicability</h2>\n<p>Use this applicability check for Microsoft Defender Vulnerability Management security baseline assessments. Record the benchmark, Windows locale and management method for the population being assessed before reporting coverage.</p>\n<h2>DSE recommendation</h2>\n<p>DSE recommends publishing a coverage statement beside each baseline result. Separate supported automatic checks from devices or settings that need another verification method. Have the endpoint owner approve the evidence route for each excluded population, and keep an unassessed configuration visible until that evidence is available.</p>\n<h2>Verification</h2>\n<p>Select representative devices from each reported population and verify that their configuration source and locale fit the documented assessment scope. Review the profile for entries requiring manual checks, assign those checks and retain their results. Confirm that the final summary distinguishes assessed, manually reviewed and unresolved items before using it to justify a remediation decision.</p>\n<h2>Official references</h2>\n<p><a href=\"https://learn.microsoft.com/en-us/defender-vulnerability-management/tvm-security-baselines\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn: Security baselines assessment</a>. Source reviewed September 17, 2026.</p>",
        "content_text": "Source facts\nMicrosoft documents these benchmarks for Group Policy configurations rather than Intune configurations. The assessment is not supported on Windows systems with a non-English system locale. Some configurations require manual checking and are not automatically assessed for compliance. Microsoft Learn.\nApplicability\nUse this applicability check for Microsoft Defender Vulnerability Management security baseline assessments. Record the benchmark, Windows locale and management method for the population being assessed before reporting coverage.\nDSE recommendation\nDSE recommends publishing a coverage statement beside each baseline result. Separate supported automatic checks from devices or settings that need another verification method. Have the endpoint owner approve the evidence route for each excluded population, and keep an unassessed configuration visible until that evidence is available.\nVerification\nSelect representative devices from each reported population and verify that their configuration source and locale fit the documented assessment scope. Review the profile for entries requiring manual checks, assign those checks and retain their results. Confirm that the final summary distinguishes assessed, manually reviewed and unresolved items before using it to justify a remediation decision.\nOfficial references\nMicrosoft Learn: Security baselines assessment. Source reviewed September 17, 2026.",
        "content_markdown": "## Source facts\n\nMicrosoft documents these benchmarks for Group Policy configurations rather than Intune configurations. The assessment is not supported on Windows systems with a non-English system locale. Some configurations require manual checking and are not automatically assessed for compliance. [Microsoft Learn](https://learn.microsoft.com/en-us/defender-vulnerability-management/tvm-security-baselines).\n\n## Applicability\n\nUse this applicability check for Microsoft Defender Vulnerability Management security baseline assessments. Record the benchmark, Windows locale and management method for the population being assessed before reporting coverage.\n\n## DSE recommendation\n\nDSE recommends publishing a coverage statement beside each baseline result. Separate supported automatic checks from devices or settings that need another verification method. Have the endpoint owner approve the evidence route for each excluded population, and keep an unassessed configuration visible until that evidence is available.\n\n## Verification\n\nSelect representative devices from each reported population and verify that their configuration source and locale fit the documented assessment scope. Review the profile for entries requiring manual checks, assign those checks and retain their results. Confirm that the final summary distinguishes assessed, manually reviewed and unresolved items before using it to justify a remediation decision.\n\n## Official references\n\n[Microsoft Learn: Security baselines assessment](https://learn.microsoft.com/en-us/defender-vulnerability-management/tvm-security-baselines). Source reviewed September 17, 2026."
    },
    "json_ld": {
        "@context": "https://schema.org",
        "@graph": [
            {
                "@type": "Organization",
                "@id": "https://dsesecurity.com/#organization",
                "name": "Detection Systems & Engineering",
                "alternateName": "DSE Security",
                "url": "https://dsesecurity.com/",
                "logo": {
                    "@type": "ImageObject",
                    "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20"
                }
            },
            {
                "@type": "Organization",
                "@id": "https://update.dsesecurity.com/#editorial-team",
                "name": "DSE Security Editorial Team",
                "url": "https://update.dsesecurity.com/",
                "parentOrganization": {
                    "@id": "https://dsesecurity.com/#organization"
                }
            },
            {
                "@type": "WebSite",
                "@id": "https://update.dsesecurity.com/#website",
                "name": "DSE Updates",
                "alternateName": "DSE Security Knowledge Hub",
                "url": "https://update.dsesecurity.com/",
                "inLanguage": "en-US",
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "potentialAction": {
                    "@type": "SearchAction",
                    "target": {
                        "@type": "EntryPoint",
                        "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}"
                    },
                    "query-input": "required name=search_term_string"
                }
            },
            {
                "@type": "WebPage",
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-098-check-the-configuration-source-and-locale-before-using-defender-baseline/",
                "url": "https://update.dsesecurity.com/updates/dse-20260917-098-check-the-configuration-source-and-locale-before-using-defender-baseline/",
                "isPartOf": {
                    "@id": "https://update.dsesecurity.com/#website"
                },
                "lastReviewed": "2026-09-17"
            },
            {
                "@type": "BreadcrumbList",
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-098-check-the-configuration-source-and-locale-before-using-defender-baseline/#breadcrumbs",
                "itemListElement": [
                    {
                        "@type": "ListItem",
                        "position": 1,
                        "name": "DSE Updates",
                        "item": "https://update.dsesecurity.com/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 2,
                        "name": "Check the configuration source and locale before using Defender baseline assessments",
                        "item": "https://update.dsesecurity.com/updates/dse-20260917-098-check-the-configuration-source-and-locale-before-using-defender-baseline/"
                    }
                ]
            },
            {
                "@type": [
                    "Article",
                    "TechArticle"
                ],
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-098-check-the-configuration-source-and-locale-before-using-defender-baseline/#article",
                "identifier": "https://update.dsesecurity.com/updates/dse-20260917-098-check-the-configuration-source-and-locale-before-using-defender-baseline/",
                "url": "https://update.dsesecurity.com/updates/dse-20260917-098-check-the-configuration-source-and-locale-before-using-defender-baseline/",
                "headline": "Check the configuration source and locale before using Defender baseline assessments",
                "description": "Which assessment boundaries matter before reporting Defender benchmark compliance for Windows devices?",
                "abstract": "Which assessment boundaries matter before reporting Defender benchmark compliance for Windows devices?",
                "articleBody": "Source facts\nMicrosoft documents these benchmarks for Group Policy configurations rather than Intune configurations. The assessment is not supported on Windows systems with a non-English system locale. Some configurations require manual checking and are not automatically assessed for compliance. Microsoft Learn.\nApplicability\nUse this applicability check for Microsoft Defender Vulnerability Management security baseline assessments. Record the benchmark, Windows locale and management method for the population being assessed before reporting coverage.\nDSE recommendation\nDSE recommends publishing a coverage statement beside each baseline result. Separate supported automatic checks from devices or settings that need another verification method. Have the endpoint owner approve the evidence route for each excluded population, and keep an unassessed configuration visible until that evidence is available.\nVerification\nSelect representative devices from each reported population and verify that their configuration source and locale fit the documented assessment scope. Review the profile for entries requiring manual checks, assign those checks and retain their results. Confirm that the final summary distinguishes assessed, manually reviewed and unresolved items before using it to justify a remediation decision.\nOfficial references\nMicrosoft Learn: Security baselines assessment. Source reviewed September 17, 2026.",
                "datePublished": "2026-09-17T16:33:22+00:00",
                "dateModified": "2026-09-17T16:38:46+00:00",
                "mainEntityOfPage": {
                    "@id": "https://update.dsesecurity.com/updates/dse-20260917-098-check-the-configuration-source-and-locale-before-using-defender-baseline/"
                },
                "inLanguage": "en-US",
                "isAccessibleForFree": true,
                "author": {
                    "@type": "Organization",
                    "name": "DSE Security Editorial Team",
                    "url": "https://update.dsesecurity.com/#editorial-team"
                },
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "image": {
                    "@type": "ImageObject",
                    "@id": "https://update.dsesecurity.com/updates/dse-20260917-098-check-the-configuration-source-and-locale-before-using-defender-baseline/#primaryimage",
                    "url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20",
                    "contentUrl": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20",
                    "width": 1200,
                    "height": 630,
                    "caption": "Check the configuration source and locale before using Defender baseline assessments"
                },
                "articleSection": [
                    "Cybersecurity",
                    "IT"
                ],
                "keywords": [
                    "Cybersecurity",
                    "IT",
                    "Guide",
                    "Information priority"
                ],
                "genre": "Guide",
                "about": [
                    {
                        "@type": "Thing",
                        "name": "Cybersecurity",
                        "url": "https://update.dsesecurity.com/topic/cybersecurity/"
                    },
                    {
                        "@type": "Thing",
                        "name": "IT",
                        "url": "https://update.dsesecurity.com/topic/it/"
                    }
                ],
                "wordCount": 184,
                "timeRequired": "PT1M",
                "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
                "usageInfo": "https://update.dsesecurity.com/usage/",
                "copyrightHolder": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
                "citation": {
                    "@type": "CreativeWork",
                    "name": "Security baselines assessment - Microsoft Defender Vulnerability Management | Microsoft Learn",
                    "url": "https://learn.microsoft.com/en-us/defender-vulnerability-management/tvm-security-baselines"
                }
            }
        ]
    }
}