Answered by:
SCCM 2012, Intune and Windows OS Support

Question
-
I am just trying to confirm what I believe I am reading about Microsoft OS Support for Windows Intune when integrated with SCCM 2012 R2...
What I believe to be the case:
Windows RT, Windows RT 8.1, Windows 8.1 all have the ability to enroll via OMA-DM, thus can be managed by SCCM.
Down-level OS's such as XP SP3, Vista, and Windows 7 require the Intune Client to be installed, thus can only be managed by a standalone Intune subscription?
Can anyone confirm this?
Thanks!
Friday, April 11, 2014 4:57 PM
Answers
-
More or less correct.
Generally, even for Win 8.1 and WinRT, IBCM or DirectAccess are a better choice than OMA-DM as it can only enable management of a limited subset of features. Two important ones cannot be: software updates and endpoint protection.
As you've seen (based on your other thread), you can still use the Intune subscription that is connected to your ConfigMgr site to manage devices with the Intune client installed. Effectively, there are two halves of the Intune subscription, the full client management half and MDM half which can be controlled by Intune or ConfigMgr. Just because the MDM half is controlled by ConfigMgr does not technically preclude you from still utilizing the full client management half. That's not at all saying you should do this though, but you certainly could.
Jason | http://blog.configmgrftw.com
- Marked as answer by William Bracken Tuesday, April 15, 2014 1:08 PM
Friday, April 11, 2014 7:32 PM
All replies
-
More or less correct.
Generally, even for Win 8.1 and WinRT, IBCM or DirectAccess are a better choice than OMA-DM as it can only enable management of a limited subset of features. Two important ones cannot be: software updates and endpoint protection.
As you've seen (based on your other thread), you can still use the Intune subscription that is connected to your ConfigMgr site to manage devices with the Intune client installed. Effectively, there are two halves of the Intune subscription, the full client management half and MDM half which can be controlled by Intune or ConfigMgr. Just because the MDM half is controlled by ConfigMgr does not technically preclude you from still utilizing the full client management half. That's not at all saying you should do this though, but you certainly could.
Jason | http://blog.configmgrftw.com
- Marked as answer by William Bracken Tuesday, April 15, 2014 1:08 PM
Friday, April 11, 2014 7:32 PM -
Thanks Jason, I 100% agree in general that using IBCM or DirectAccess would be the preferred method for Windows devices. For the purposed of these questions, just trying to understand all the moving parts.
As far as managing the MDM part via SCCM and the full client mgmt via Intune, didn't honestly know if SCCM was still capable of managing the device at all once the Intune client was installed. That's good to know. Not preferable given you are now managing a device in two locations but good to know you can if you so choose.
Thanks!
Sunday, April 13, 2014 4:20 PM -
I really wish that they would replace IBCM with Intune or least make that possible. Its something we asked for/recommended a while back. It makes so much sense and would make it so easy (theoretically).
Jason | http://blog.configmgrftw.com
Sunday, April 13, 2014 5:14 PM