MECM or Co-management with AzureAD joined Devices

shockoMS 276 Reputation points
2023-05-19T15:17:06.4466667+00:00

We are currently running MECM Current Branch. I have several AzureAD joined machines and looking to manage them with MECM or co-management (Intune and MECM). Is this possible? I have started reading some of the literature but it seems that MECM requires the device to either by ADDS joined or hybrid joined (i.e. have a computer object in ADDS). 

Microsoft System Center
Microsoft System Center
A suite of Microsoft systems management products that offer solutions for managing datacenter resources, private clouds, and client devices.
897 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,692 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,449 questions
0 comments No comments
{count} votes

Accepted answer
  1. Simon Ren-MSFT 31,831 Reputation points Microsoft Vendor
    2023-05-22T06:07:59.4933333+00:00

    Hi,

    Thank you for posting in Microsoft Q&A forum.

    Yes, agree with @Alfredo Revilla - Upwork Top Talent | IAM SWE SWA , it is possible. Based on my knowledge, most MECM clients are on-promise domain joined, and you say the several machines are also AzureAD joined, so you can enable co-management for these machines.

    For more detailed steps and information, please refer to the official articles:

    Tutorial: Enable co-management for existing Configuration Manager clients

    Tutorial: Enable co-management for new internet-based devices

    Thanks for your time. Have a nice day!

    Best regards,

    Simon


    If the response is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    1 person found this answer helpful.

2 additional answers

Sort by: Most helpful
  1. 2023-05-20T16:06:06.1366667+00:00

    Hello @shockoMS , it is possible to co-manage devices with MECM and Intune. Basically you will install the MECM agent in Intune managed devices. The latter requires the devices to be Azure AD joined (cloud only join) or Azure AD hybrid joined (on-premise+cloud join). For more information take a look to Prerequisites.

    Let us know if you need additional assistance. If the answer was helpful, please accept it and rate it so that others facing a similar issue can easily find a solution.

    1 person found this answer helpful.

  2. Simon Ren-MSFT 31,831 Reputation points Microsoft Vendor
    2023-05-23T07:44:19.1333333+00:00

    Hi @shockoMS ,

    Thank you for your reply.

    Per my experience, yes. If you can't deploy your on-premises AD with Azure AD as hybrid Azure AD, the Azure AD joined devices MUST communicate with a CMG and cannot communicate with MECM directly.

    Thanks for your time. Have a nice day!

    Best regards,

    Simon


    If the response is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    1 person found this answer helpful.
    0 comments No comments