Update policies with the policy migration tool

Microsoft is updating tenants by moving endpoint security policies for Windows devices and administrative templates to the new Graph API endpoint. This impacts existing imported NMM policies, as well policies that are assigned to your accounts as current global policies will be obsolete and can no longer be used.

The Nerdio Manager policy migration tool is a wizard-based solution that enables you to migrate policies to the new platform. This includes ensuring that assignments and variables are retained during the migration process.

To migrate a policy:

1. At the MSP level, navigate to Policy Management > Security Baselines.

2. Select the policy to be migrated.

   This is indicated by the warning icon. Hover over the icon to display a tooltip and recommendation.

3. From the action menu, select Migration.

   

   The policy state screen is displayed.

   Note: Status is displayed using a red, amber, green (RAG) status indicator.

   • Green indicates that the policy exists in the tenant, is valid, and can be used as a reference.

   • Red indicates that the policy has not been found in the tenant, and the likely cause is that the policy has been migrated by Intune.

4. Select Next.

5. On the Migration tab, select Selected for the candidate policy you want to use.

   Note: To display more details about the individual policies, select the info icon for that particular policy.

   

   Note: You need to ensure that the name of the policies are the same as those created in Intune. When Microsoft migrates policies to the new platform, the same policy name is retained.

6. Select Next.

7. On the Edit tab, compare the latest policy with the selected policy, and edit the selected policy if required.

   

   Note: You can edit the selected policy if required. The latest policy version is read-only.

8. Select Next.

9. On the Import tab, select Remove assignment of obsolete policy to the tenant if required.

10. Review the summary and select Save & close.

    

11. Monitor the task in the Security Baselines Tasks window.

12. Select Details to view the details of the tasks completed.