This blog post is about how to combine two different technologies to manage devices with Windows 10 Co-Management.
This topic has been divided into two parts:
Part I: Configuration Manager provisioned co-management
Part II: Intune provisioned devices that are enrolled in Intune
Microsoft introduced the new feature Co-Management in SCCM 1710 (Configuration Manager). It allows system administrators to manage a single device simultaneously from both Configuration Manager and Microsoft Endpoint manager (Intune) an MDM solution.
Co-Management allows administrators to manage Windows 10 by using both Configuration Manager SCCM and Intune. It creates a bridge between two different products with the phased transition.
Using Co-Management, we get new features and capabilities from Microsoft Intune.
But Intune doesn’t have more complex software deployments that we get from the SCCM and Resource access policies, Windows Updates policies, and Cloud Management Gateway.
In the below diagram we can see the Windows 10 devices and windows 7/8 legacy devices Managed by an on-premises or configuration manager. Co-management can be enabled for Windows 10 devices both when they are enrolled in Intune and when they are existing in Configuration Manager Clients. Co-Management using both Configuration Manager and Intune can have the same results.
In this step, the Intune subscription will be created in Configuration Manager.
verify the tenant details in Administration > Cloud Service > Azure Active Directory Tenants.
To verify Windows 10 Co-management in Microsoft Endpoint Manager, do following:
See the below screenshot for reference.
We are done with Part 1.
In this scenario, Windows 10, version 1709, devices already enrolled only in Intune. To combine config manager with Intune, Install the Configuration Manager client to Intune managed devices.
To achieve this, follow the below steps:
Or navigate to Drive:/ Program files\MicrosoftConfigurationManager\cd.latest\SMSSETUP\BIN\I386)
CCMSETUPCMD=”/mp:<URL of cloud management gateway mutual auth endpoint>/ CCMHOSTNAME=<URL of cloud management gateway mutual auth endpoint>
SMSMP=https://<FQDN of MP>
AADTENANTID=<AAD tenant ID>
AADCLIENTAPPID=<Server AppID for AAD Integration>
Open endpoint.microsoft.com Navigate to Home>Apps>Windows>
Click +Add Button, in the App type drop-down list select Line-of-business app and click on Select. In the App Package window select the ccmsetup.msi application, click ok to continue.
In the App Information tab, fill the required fields and click Next to continue.
In the Assignments tab, select the device group to assign the configuration manager.
Click Next to Revie + Save tab and click the Create button to finish.
The targeted Windows 10 devices will get the configuration manager client software. It will get enrolled immediately with SCCM. Thus, Windows 10 Co-Management now gets both the Intune and Configuration manager features.
If you have any more questions, feel free to Contact Us
Author is Bachelor of Technology in Electronics & Communication graduate in 2013 and have made the career establishment precisely in the field of Cloud IT infrastructure. Got associated with the Microsoft technologies right from the bottom of the ladder as Help desk operator. Working for Microsoft support with Convergys gave an end to end insight on Microsoft Intune and SAAS based technologies. Further worked for multiple clients to migrate their device management strategies from on-prem to cloud mostly Intune and AirWatch (VMware Workspace ONE). Worked with HCL and now with ITC infotech as Intune consultant for planning and implementation of device management for one of the biggest Beer manufacturing company globally.