Using Intune in MEMCM

Using Intune in MEMCM Admin Center

It seems crazy that only 12 months ago, we were talking about Intune vs SCCM.  As many of you know, Intune has been far more focused on being an access management solution to Azure resources;  whilst ConfigMgr, on the other hand, has been a traditional systems management solution. So, for many IT professionals, it was never Intune vs SCCM, but rather Intune andConfigMgr.

With Microsoft Endpoint Manager, the two came together as an integrated solution for managing all of your devices within a single console, called Microsoft Endpoint Manager admin center.  The next step in the journey, starting from Technical Preview 2002.2, sees the release of a new feature where you can upload your Configuration Manager devices to the cloud service and take actions from the Devices blade in the admin center.

WHAT WILL YOU NEED?

Enabling this feature creates a third-party app and a first party service principal, in your Azure AD tenant, so you’ll need Global Admin credentials.  You’ll also need to check that the user account you plan to use to trigger device actions has been discovered with both Active Directory user discovery and Azure Active Directory user discovery.  When you’re ready, you can go ahead and enable this pre-release feature from Administration > Overview Updates and Servicing > Features.

NOTES: After enabling, a restart of the SMS_EXECUTIVE service is needed. The service restart is a one-time action and only for this technical preview.  Use the following logs, located in <ConfigMgr install directory>\Logs, to monitor the device upload:

CMGatewaySyncUploadWorker.log

CMGatewayNotificationWorker.log

 

WITH CO-MANAGEMENT

If you have co-management enabled, you can go ahead and edit co-management properties, to enable device upload.  The default setting for device upload is ‘All my devices managed by Microsoft Endpoint Configuration Manager’. If needed, you can limit upload to a single device collection.

WITHOUT CO-MANAGEMENT

For those of us that don't have co-management enabled yet, we can use the Configure co-management wizard to enable device upload. This saves us time and effort, in that we can now upload devices without enabling automatic enrolment for co-management or switching workloads over, to be completed within Intune. Use the advice from Microsoft to enable device upload if you need more help.

FEEDBACK

As with all Technical Previews, we will have to wait and see what additional features will come from the deeper integration of Intune into MEMCM. If you decide to give it a go, please do let me know how you get on with this new feature.  You can also submit any feedback directly to the Microsoft team through their dedicated page

Share this post

About Us

Marathon Professional Services is your trusted IT solutions partner. We offer a range of services including Desktop Infrastructure Solutions and Virtualisation, and we act on a white-labelled basis as an extension of your business.