Your series on SCCM is an incredible resource. Thank you so much for creating these videos. I have just started a new IT role and will be using SCCM on a daily basis, which is pretty scary at first as I have never used it. However, I feel so much more confident now. Thank you.
Hi Justin, Thank you so much for the video. Please correct me if I am wrong, First we need to sync the objects like users and devices to Azure AD through Azure AD connect. Second, we then enable CMG to have the devices co-managed. Also, we need to assign the license to the users to have the current devices (Managed by SCCM) enrolled to intune. The GPO enrollment is another enrollment type, is my understanding correct
Nice explanation Justin! The reason why your on-Prem machine joined to Hybrid Azure AD because even thought you un installed AAD connect, your Service Connection Endpoint (SCP) for your Azure Tenant still available in your OnPremise AD. So the machines used that information to join itself to Hybrid Azure AD.
Just a question... In need to configure co-management in MECM 2211, however the option does not appear. I have sometime called Cloud Attach but not co-management
I have a question regarding licensing. I have a visual studio subscription but that doesn't belong to me. It's given to me JUST to configure CMG in my lab environment and it doesn't seem to include license for Intune. So can I enroll in MS developer program using my personal account and configure a sandbox with a tenant name which is same as my current AAD tenant and then use it to setup comanagement in sccm? Would that work?
Thanks Justin for this video. Very enlightening. Just a question on activating co-management on local sccm, is azure ad connect need to be setup first or the azure ad is a prerequisite?
Thanks for this! Quick question, would IBCM (rather than CMG) allow the Config Mgr Client to be installed via Intune for Azure-AD joined devices only? We are looking at a 1:1 scheme for laptops and would like to use Autopilot and the benefits of Intune but also have some management of the devices using Config Mgr and I'd only want them to be Azure-AD joined rather than Hybrid.
Hello Justin, so When I try to enroll devices into co-management, there was en error Failed to enroll with RegisterDeviceWithManagementUsingAADDeviceCredentials with error code 0x80180015. By any chance you know the reason of thiss issue, or any troubleshoot step that I need to check to identify the main cause of the problem. Really appreciate if you response my issue
Hi Justin, silly question, do you need a CMG to have co-managment capabilities? Or can you just have inTune and SCCM work independently from each other?
I still don't understand why I should enable this. Perhaps I don't know enough about Intune but I wish I could get some examples of how this is a benefit.
Hi, While trying to setup CMG, i get an error on the last option "Testing the CMG channel for management point", i have tried almost everything and seems i'm out of option, can you suggest here?
Hi Justin, The links in the description of the video all refer back to this main video. Can you please provide the link to the video where you configure the Cloud Management Gateway. Thanks in Advance
When switching the workloads over to intune, how long does it take for the changes to apply? I have switched the "device configuration" workload over to intune, and created a device configuration policy that i assigned to some of my co-managed devices. But for some reason they do not get the policy, the status is set to "Not Applicable", Meanwhile non-co-managed devices that are only managed by Intune, get the Device configuration policy more or less right away. Please advise!
@@PatchMyPC Hey! thanks for ur reply, i found out what my problem was. Apperently the setting within "device configuration" within Intune was not included in the workload. Therefor i have to use GPO to deal with that.
01.Change status of 3000 Co-manage devices to Intune manage only. 02.Deploy company portal app on co-manage devices. 03.How to manage Autopilot for co-manage devices?(hardware hash etc) Environment is Hybrid AD Joined. GPO Migration completed. Application migration done completed. Script migration completed. Please share your valuable knowledge and experience share some documents or video reference please.
Justin. Thanks for doing this for the community. We appreciate it.
Very welcome!
Your series on SCCM is an incredible resource. Thank you so much for creating these videos.
I have just started a new IT role and will be using SCCM on a daily basis, which is pretty scary at first as I have never used it. However, I feel so much more confident now.
Thank you.
Thanks awesome to hear! It's comments like this that keeps me doing them!
I agree. These scenarios and explanations are the best I've found. Thanks for doing these!
@@precisionxt thanks for watching!
how do you feel about using SCCM now?
Justin thanks for doing this for the community. appreciate it.
You're welcome!
You are awesome. I was looking to have someone who teaches the same way we do in classroom trainings...
Glad to help
Really nice vid. Studying ms100 and this tied up a lot of details where I really don't feel like setting up a whole sccm, aadconnect environment.
Glad it was helpful!
Hi Justin, Thank you so much for the video. Please correct me if I am wrong, First we need to sync the objects like users and devices to Azure AD through Azure AD connect. Second, we then enable CMG to have the devices co-managed. Also, we need to assign the license to the users to have the current devices (Managed by SCCM) enrolled to intune. The GPO enrollment is another enrollment type, is my understanding correct
Thanks Justin, it was a very resourceful video.
Thanks for watching
Nice explanation Justin! The reason why your on-Prem machine joined to Hybrid Azure AD because even thought you un installed AAD connect, your Service Connection Endpoint (SCP) for your Azure Tenant still available in your OnPremise AD. So the machines used that information to join itself to Hybrid Azure AD.
Thanks for watching.
Your channel is a godsend
Thanks!
Just a question... In need to configure co-management in MECM 2211, however the option does not appear. I have sometime called Cloud Attach but not co-management
Awesome explanation.. Thanks Justin
Thanks for watching
another excellent tutorial. i like the details you provide. thank you!
Thanks for watching!
Thanks a lot your guidance. That was really helpful and has given me a kickstart to further deep dive into it.
Thanks for watching
You're a genius sir!!! Hands down!
Thanks for watching
Great video, great explanation
Thanks for watching
I have a question regarding licensing. I have a visual studio subscription but that doesn't belong to me. It's given to me JUST to configure CMG in my lab environment and it doesn't seem to include license for Intune. So can I enroll in MS developer program using my personal account and configure a sandbox with a tenant name which is same as my current AAD tenant and then use it to setup comanagement in sccm? Would that work?
Is there any way I could exercise this with a trial account & lab?
I think you could. I'm pretty sure there is an Intune trial.
Thanks Justin for this video. Very enlightening. Just a question on activating co-management on local sccm, is azure ad connect need to be setup first or the azure ad is a prerequisite?
I believe you will want it first
Hello, in my Azure Portal, Mobility MDM & MAM, Microsoft Intune Enrollment is missing, do You know how can i configure it?
Hmm, I'm not sure why that would be. - Justin
I'm in the same boat. Did you ever figure that out?
Thanks for this! Quick question, would IBCM (rather than CMG) allow the Config Mgr Client to be installed via Intune for Azure-AD joined devices only? We are looking at a 1:1 scheme for laptops and would like to use Autopilot and the benefits of Intune but also have some management of the devices using Config Mgr and I'd only want them to be Azure-AD joined rather than Hybrid.
You should be able to install when using IBCM, but would need to have a client certificate for IBCM authentication.
@@PatchMyPC Great thanks!
hi, when i enable co-management i dont get the parameter for AADCLIENTAPPID and AADTENANTID in the command line generated, what could be the reason?
I think in 1810, they may have reduced the number of parameters needed for a CMG based client stall.
excellent tutorial as usual !
Thanks for watching.
Is there any way to change mdm authority from sccm to intune?
This may be helpful learn.microsoft.com/en-us/mem/configmgr/comanage/workloads
awesome serie. Its pretty hard to find content about modern deployment using co management with intune and sccm
Thanks for watching!
So i have to install cmg first before i can go on with this tutorial?
No, you don't need to.
I am not able to get the client install command line when signing in for Co-Management. My azure services and CMG have been setup. Any idea?
What's ccmsetup.log saying?
Solved... Removed the CMG connection point and re-added it... Now I get the command line ... Sometimes it's back to the basics :)
Hello Justin, so When I try to enroll devices into co-management, there was en error Failed to enroll with RegisterDeviceWithManagementUsingAADDeviceCredentials with error code 0x80180015. By any chance you know the reason of thiss issue, or any troubleshoot step that I need to check to identify the main cause of the problem. Really appreciate if you response my issue
Hi Justin, silly question, do you need a CMG to have co-managment capabilities? Or can you just have inTune and SCCM work independently from each other?
CMG is not a requirement I believe.
I still don't understand why I should enable this. Perhaps I don't know enough about Intune but I wish I could get some examples of how this is a benefit.
It's totally optional. If your not using Intune, there wouldn't be any value.
Hi,
While trying to setup CMG, i get an error on the last option "Testing the CMG channel for management point", i have tried almost everything and seems i'm out of option, can you suggest here?
Is you MP HTTPs
Hi Justin, The links in the description of the video all refer back to this main video. Can you please provide the link to the video where you configure the Cloud Management Gateway. Thanks in Advance
Never Mind Justin. I got the link to it on your channel. btw, your videos are 10/10. Great job
Thanks!
For me the big problem is that the machines are taking a long time to enroll on intune with co-management.
When switching the workloads over to intune, how long does it take for the changes to apply? I have switched the "device configuration" workload over to intune, and created a device configuration policy that i assigned to some of my co-managed devices. But for some reason they do not get the policy, the status is set to "Not Applicable", Meanwhile non-co-managed devices that are only managed by Intune, get the Device configuration policy more or less right away.
Please advise!
I would expect next policy cycle, but I haven't tested it.
@@PatchMyPC Hey! thanks for ur reply, i found out what my problem was. Apperently the setting within "device configuration" within Intune was not included in the workload. Therefor i have to use GPO to deal with that.
Thanks Justin for the video, I have a question about AAD, what AAD subscription do I need?
I believe premium may be needed for auto-enroll to work.
01.Change status of 3000 Co-manage devices to Intune manage only.
02.Deploy company portal app on co-manage devices.
03.How to manage Autopilot for co-manage devices?(hardware hash etc)
Environment is Hybrid AD Joined.
GPO Migration completed.
Application migration done completed.
Script migration completed.
Please share your valuable knowledge and experience
share some documents or video reference please.