Moving Office updates to Intune in Co-management

Question

Hello,

we are testing co-management scenario in our company and want to move updates to be managed from Intune
instead of SCCM/WSUS.
We already started with Windows updates(Pilot Collection) but I can't find within the documentation if we can move Office updates to be managed from Intune. We still install Office using SCCM(OS image contains it) and just want to have Windows+Office updates managed by Intune.
Do we need to use Company portal application or updates will be visible within Windows Update window?
We also want Office updates to be forced so that users are not able to avoid updates.

Thank you

Answer 1

From Configuration
Try to move the Co-Management slider for Office Click-to-Run Apps. Starting 1906, if you have controlled this behavior to a subset of collection, you need to add the device to the respective collection.

Once the policies are processed, you may need a restart of the “Microsoft Office Click-to-Run Service” service. You will notice Office is no longer managed by ConfigMgr which clears the yellow background.
It is now updated via Office CDN.

On the device registry, it sets the OfficeMgmtCOM value to 0 in the following registry keys:

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\office\16.0\Common\officeupdate

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Policies\Microsoft\office\16.0\Common\officeupdate

Here is the reference: https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/co-management-of-office-click-to-run-apps-workload/ba-p/871090

Answer 2

Frankly pushing Microsoft 365 apps patches using ConfigMgr is pretty straight forward. Create ADRs snd forget the rest. To top it off you get the benefit of the compliance reporting. If you do want to move the patching work load for Microsoft 365 apps then you can move the workload Office click to runs apps to Intune.