CO-MANAGED WINDOWS 10 DEVICES

Question

Hello Support,

I don't have much experience with co-management. Could someone please help me troubleshoot the following issues?

Our requirements is,

• We needed to check the compliance status on the Intune portal.
• Deploy Windows 10 updates from Intune on a select number of PCs that are connected to a VPN or the company network.
• • Deploy few policies from Intune
  Issue description:

  All of our Windows 10 devices are managed through an on-premises environment (local domain + SCCM), and we would want to manage a few Windows 10 computers using Intune based on our requirements. We recently activated the co-managed option, and all Windows 10 PCs are now mirrored on the Intune portal,
  

Next ,
I've created a new security group and assigned it to all of our Windows 10 devices and added the security group in compliance policies and configuration profiles (with basic settings)
When I checked the status the next day, all machines were marked as not applicable,
Compliance Policies:

Configuration profiles:

I created a new profile in Update rings, feature updates, and quality updates and assigned it to a few of windows 10 for testing but all windows 10 testing machines were marked as not applicable.
Could you kindly tell me how to troubleshoot the above problem?

Answer 1

@MJ, Thanks for posting in Q&A.

For co-management device, there are following workloads:

• Compliance policies
• Windows Update policies
• Resource access policies
• Endpoint Protection
• Device configuration
• Office Click-to-Run apps
• Client apps

If you want Intune to manage the device for some policy, you can switch the workload to Intune. Here is a link with more details:

https://learn.microsoft.com/en-us/mem/configmgr/comanage/workloads

For "Not Applicable" status, it means the policy isn't supported on this platform. From the picture you provided, it shows the compliance policy is still managed by Configuration manager. Please switch the related workloads to see if the result will be different.

After the workload is switched successfully, then we can see it under the device in Intune.

Hope it can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.