My presentation from EWUG 1711 on Microsoft System Center Configuration Manager 1710 CO-Management with Microsoft Intune

1. Windows 10 – Modern Device Management
Co-Management

2. Per Larsen
Microsoft MVP - Enterprise Mobility
@Perlarsen1975

3. What is modern management

4. Modern Management

5. What is CO-management

6. Paths to Modern Management
Big Switch Transition
Group by Group Transition
Iterative (“Co-management”)
Many workloads
need to be
modernized at the
same time
Doesn't address
the needs of the
full organization
Iteratively move
workloads to
modern
Cloud-first
A new organization
starting with modern
workplace

7. Co-Management
A practical way to migrate over time Modern is not “all or nothing” Minimize risk

8. Co-
Management

9. CO-management prerequisites

10. General prerequisites
• Configuration Manager version 1710 or later
• Azure AD
• EMS or Intune license for all users
• Azure AD automatic enrollment enabled (AzureAD P1)
• Intune subscription (MDM authority in Intune set to Intune)

11. Additional prerequisites for devices with the SCCM client
• Windows 10, version 1709 (also known as the Fall Creators Update) and later
• Hybrid Azure AD joined (joined to AD and Azure AD)

12. Additional prerequisites for devices without the SCCM client
• Windows 10, version 1709 (also known as the Fall Creators Update) and later
• Cloud Management Gateway in Configuration Manager (when you use Intune to
install the Configuration Manager client)

13. If you have a hybrid MDM environment (Intune
integrated with Configuration Manager), you
cannot enable co-management

14. Mobile Device Management Authority
• Microsoft Intune and Office 365
• Microsoft Intune
• Configuration Manager
• Mixed Authority Microsoft Intune and Configuration Manager

15. Compliance policies

16. Compliance policies
• Device Health
• Device properties
• System Security

17. Let’s have a closer look
Compliance Policies – Conditional Access

18. Windows Update for Business Policies

19. What is
Windows Update for Business?
• A collection of client and cloud
technologies suited for optimal WaaS
experience
• Focuses on a simple and lightweight
modern management approach for
deploying and servicing Windows 10
• Built on top of highly reliable and
scalable Windows Update service

20. Windows Update for Business
More than just configurations
Client controls (policies)
• Update rollout
• Bandwidth control
• Restart behavior
• More
Insights: Telemetry and metrics
• Security and Feature update status
• Windows Defender Antivirus status
• Update deployment and
troubleshooting
• Delivery Optimization efficiency
• More
Management Tool/Infra
• ConfigMgr
• Microsoft Intune
• Active Directory
• 3rd party tools
• More
Windows
Update

21. Let’s have a closer look
Windows Update for Business Integration with Intune

22. Resource access policies

23. Resource access policies
• VPN
• Wi-FI
• Email
• Certificate

24. Let’s have a closer look
Resource access policies

25. Login from
everywhere
Anywhere-
access to Office
documents
Manage and
secure any
device
Monitor
everywhere
Get apps
Everywhere
Office
everywhere,
encryption
everywhere

26. Thank you