Microsoft published last week a dedicated page for recommended Intune security configurations