Overview

• In this video guide, we will be covering how to setup Co-management in Microsoft SCCM. Co-management will allow you to use the full Configuration Manager client as well as the Microsoft Intune MDM.

Topics in Video

• Overview of Co-management in SCCM and Microsoft Intune – https://youtu.be/rTapalSHv6U?t=21
• The first scenario overview, using Azure AD Join Only (Cloud Domain Join) –  https://youtu.be/rTapalSHv6U?t=62
• The second scenario overview, using On-Prem domain join and auto-register in Azure Hybrid AD and MDM – https://youtu.be/rTapalSHv6U?t=86
• Validate Azure AD and Intune enrollment is enabled in the online portal – https://youtu.be/rTapalSHv6U?t=113
• Covering CMG prerequisites for the option to Install the SCCM Agent from an Azure AD only scenario – https://youtu.be/rTapalSHv6U?t=252
• Add the co-management subscription into the SCCM console – https://youtu.be/rTapalSHv6U?t=358
• Uploading the CCMSetup.msi to auto-deploy through Intune to install the SCCM agent through CMG – https://youtu.be/rTapalSHv6U?t=496
• Enroll a device into Azure AD from OOBE to have it auto-enroll into MDM/Intune – https://youtu.be/rTapalSHv6U?t=676
• Validate the device enrolled in MDM and the SCCM Client auto started and review the CCMSetup download from CMG over the internet – https://youtu.be/rTapalSHv6U?t=758
• Review ClientIDStartupManager to review how the Azure AD Authentication is used to be approved within the SCCM environment – https://youtu.be/rTapalSHv6U?t=871
• Validate in the Configuration Manager Control Panel applet the co-management is showing enabled – https://youtu.be/rTapalSHv6U?t=947
• Review the scenario for registering on-prem domain joined devices to register into Hybrid Azure AD and auto-MDM enroll in Intune – https://youtu.be/rTapalSHv6U?t=1043
• Install Azure AD Connect and Configure the OU for the user/device sync we need for the lab – https://youtu.be/rTapalSHv6U?t=1093
• Validate a valid public UPN suffix is configured in Active Directory Domain and Trust and configure the on-prem users that will be used to auto-enroll devices with the public UPN in AD Users and Computers – https://youtu.be/rTapalSHv6U?t=1171
• Set GPO to have devices auto-enroll into MDM/Intune when the device registered into Azure AD- https://youtu.be/rTapalSHv6U?t=1568
• Run dsregcmd /status to see if the device is registered with Azure AD – https://youtu.be/rTapalSHv6U?t=1687
• Configure devices to auto Azure Hybrid AD Join in Azure AD Connect – https://youtu.be/rTapalSHv6U?t=1731
• Validate on-prem domain joined SCCM client switched to be co-managed after auto-enrolling into Intune – https://youtu.be/rTapalSHv6U?t=1928
• Validate both devices are showing in Intune and the SCCM console with co-management capabilities – https://youtu.be/rTapalSHv6U?t=1997
• Deploy device reset to both co-managed devices – https://youtu.be/rTapalSHv6U?t=2099

Helpful Resources:

• Tutorial: Configure hybrid Azure Active Directory join for managed domains – https://docs.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-managed-domains
• Enable Windows 10 automatic MDM enrollment – https://docs.microsoft.com/en-us/intune/windows-enroll#enable-windows-10-automatic-enrollment
• Co-management for Windows 10 devices – https://docs.microsoft.com/en-us/sccm/core/clients/manage/co-management-overview
• Enroll a Windows 10 device automatically using Group Policy – https://docs.microsoft.com/en-us/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy
• Prerequisites for co-management – https://docs.microsoft.com/en-us/sccm/core/clients/manage/co-management-prepare#prerequisites
• Auto-Pilot for new Windows 10 Devices – https://docs.microsoft.com/en-us/sccm/core/clients/manage/co-management-prepare#new-windows-10-devices