How to enable Co-Management in SCCM 1902

Adam GrossSCCM3 Comments

It’s been over a year since our initial post about enabling Co-Management. Several improvements have been made so it’s worth revisiting the Co-Management SCCM 1902 topic.

Co-Management SCCM 1902 Prerequisites

  • Azure Subscription
  • Azure Active Directory Premium
  • Microsoft Intune subscription OR Enterprise Mobility + Security (EMS) subscription
  • Client computer using Hybrid Azure AD Joined (domain + AAD joined) using Azure AD Connect.

Enable SCCM 1902 Co-Management

  • Navigate to Administration / Cloud Services / Co-Management and select Configure Co-Management
Co-Management SCCM 1902
  • Click Sign In to enter your Intune credentials.
Co-Management SCCM 1902
  • After signing in, click Next.
Co-Management SCCM 1902
  • Configure Automatic enrollment in Intune. Select None or Pilot at this time. You can change this setting later. You can select your pilot collection later.
  • Select Pilot then click Next.
Co-Management SCCM 1902
  • Configure Workloads lets you choose which workloads will be managed by which system – Configuration Manager or Intune. Don’t change any settings at this time and click Next.
Co-Management SCCM 1902
  • Full list of workloads from the wizard:
Co-Management SCCM 1902
  • Configure the roll-out collections allows you to select the collection to use for deploying Co-Management. In this example, we selected our Co-Management Piloting collection.
  • Click Next.
Co-Management SCCM 1902
  • On the summary screen, click Close.
Co-Management SCCM 1902
  • Back in the console, verify that Co-Management appears. This is where you go to configure Co-Management workloads and targeted collections.
Co-Management SCCM 1902

Enroll Windows 10 1903 Client Into Intune for Co-Management

Client Settings

The Client Cloud Services node in the client settings policy allows you to configure devices to automatically register in Azure Active Directory instead of using a GPO as was previously necessary.

  • Open a Client Settings policy and select Cloud Services.
  • Set Automatically register new Windows 10 domain joined devices with Azure Active Directory to Yes then Click OK.
Co-Management SCCM 1902

Intune Auto Enrollment

  • In your Intune tenant, navigate to Device Enrollment > Windows Enrollment.
Co-Management SCCM 1902
  • Change MDM user scope to Some or All – if you choose Some, you will have to specify an AAD User Group.
  • * NOTE* – If you enable MDM and MAM for the same group, only MAM is enabled for those users and they will not auto enroll in Intune.
Co-Management SCCM 1902

Assigning Licenses

You must also be sure to assign an Intune license to any user who will use a co-managed device.

  • Navigate to Azure Active Directory > Licenses > All Products
  • Select the product with Intune licenses – in this case, Enterprise Mobility + Security E3.
Co-Management SCCM 1902
  • Select Licensed users or Licensed groups then select Assign to select a user or group to assign to.
Co-Management SCCM 1902
  • Select the License you want to assign
Co-Management SCCM 1902
  • Click Configure required settings then select the product license you want to assign then click Select.
Co-Management SCCM 1902
  • Click Assignment Options
  • Make any needed change to License options and click OK then click Assign.
Co-Management SCCM 1902

Auto-Enrollment Verification

To verify that devices are being auto-enrolled and managed by SCCM, you can review the Devices node in Intune. the Managed By and Compliance columns will indicate whether they are managed by ConfigMgr or not.

Co-Management SCCM 1902

On a Windows device, you can also check the SCCM compliance settings to ensure verify Co-Management compliance and also see the number of workloads are managed by via Co-Management.

Co-Management SCCM 1902
Co-Management SCCM 1902

You can also review CoManagementHandler.log in the CCM Logs folder on the client to see Co-Management related client logs.

Co-Management SCCM 1902

Moving Workloads to Intune

As I’m writing this, David James just tweeted that SCCM 1906 will likely ship in a few days. Based on past Technical Preview releases, I’m expecting to multiple pilot groups for Co-Management added on 1906. I will write a new post on moving workloads to Intune in 1906 to include the new options in that post.

Co-Management SCCM 1902
SCCM 1906 Technical Preview – Multiple Pilot collections for Co-Management workloads

1 Star2 Stars3 Stars4 Stars5 Stars (3 votes, average: 5.00 out of 5)
Loading...

Share this Post

3 Comments on “How to enable Co-Management in SCCM 1902”

  1. I keep hearing from out Microsoft account rep that Microsoft is moving away from co-management. Is that not the case? We are wanting to move some work loads to Intune but still keep sccm so I thought about co management until they said don’t do it.

    1. I would find a new Microsoft rep because he’s wrong. Co-Management is here to stay. In the next release of SCCM they will be adding more features to it. SCCM and Intune are being built as complimentary platforms to help new your needs. Choose which parts of each fit your business and use them.

Leave a Reply

Your email address will not be published. Required fields are marked *