A desktop baseline is the documented standard for how a managed workstation should look and behave: approved wallpaper, taskbar layout, installed apps, browser settings, security agents, and policy-controlled features. It gives IT and security teams a reference point for normal operation.
Baselines matter because attackers often rely on change and confusion. A modified desktop can hide signs of compromise, disable controls, or make phishing and persistence easier to miss. Defenders use baselines to detect configuration drift, unauthorized software, and tampering during audits or incident response. They are usually enforced with gold images, group policy, MDM, and continuous compliance checks. A clear baseline turns a subjective “something looks wrong” into a measurable security control.