S03E24 - Co-Management Lessons Learned - Moving to the Cloud (I.T)

I'm about to start a major co-management project and this episode couldn't have been more topical. Thank you guys for covering some of the shortcuts and pitfalls of the integration of Intune/endpoint manager into a SCCM environment.
It is great to watch Adam grow and learn over the year(s). Keep up the great work, guys!

is Microsoft E5 Developer license is enough to configuring policy in intune

I know you keep complaining about it - but Proactive Remediations is a feature of Endpoint Analytics. That's why it is where it is. It wouldn't make sense to put it somewhere else.

This helps a lot but I think Microsoft really needs to improve their documentation around the co-management workloads and outline more clearly what governs/changes what between ConfigMgr and Intune when you move those workloads

It is very briefly mentioned that there is documentation on setting up Microsoft Connected Cache without installing MECM. You don't have a link to that on hand by any chance? I know MS is working on a stand alone solution, but that one has been in private preview since 2019 and with us looking into going from non MS tools to Intune would love to avoid setting up MECM (why the heck did I watch a video about co-management when we'll probably never use it at increased speed?) but still leverage on-prem cache servers for DO.

Great Video guys keep it up 👍👏

is windows enterprise or pro better for intune

Good stuff Guys, I have been trying to setup MDM wins over GP using CSP this whole time and always end up with GP managing auto-updates on clients.
Now I have used a similar approach using Setting catalogs let's see how it goes.
i have been scratching my head for last two days as i am not able to deploy updates using Intune after switching workload to Pilot devices due to MDM GP conflict.
and yes i echo with you on Proactive Remediation, makes no sense to put it on Reports and bit confused about licensing of it, does EMS E3 covers it ?

Thank you so much for covering this topic in such depth. And for practical know how and the gotchas that save all of us so much time! Hope to see you again at MMS next week.

Hi Guys, completely unrelated question, is there a way that we can set up default apps to adobe for all pdf documents? at the moment its defaulting to Edge

With the Internet 11 desktop application retiring and going out of support on June 15th, 2022, will you have videos on setting up site discovery or site list?

hello Steve and Adam first of all really colle show on the subject of Intune

What I would really like to see is a video about the configuration of MS HoloLens in Intune, which configurations are necessary. A step-by-step guide would be cool, have you ever planned to do something like that?

One of the best episodes since the series started !

What are you doing about your Servers getting patched when you bin SCCM Adam, or are the desktop and servers managed separate in your environment and they are staying on SCCM?

Just a call out, some of the attack surface reduction policies are not governed by the endpoint security workload. In our case, it was Kernal DMA protection settings did not end up being enforced until device config was moved all the way to Intune.

Great video. I've setup and used co-management before and it's great. But my new role, the M365 team here won't set it up as they think then they will have to "manage two systems". They want to cut the cord of on premises and straight to cloud native, no transition, don't be nice on users. I thought there was a way to go co-management and at the end transition the devices to cloud native, I need to keep reading.

I'm tired of fighting Microsoft on the MBAM front, we discovered this one over a year ago and the DCR's are ignored. Last advice was to use Personal date protection in win 11, but this does not support hybrid join. The issue here is no ability to manage tpm and pin via intune :(