none
Co-management with Intune and wipe device RRS feed

  • Question

  • Hi Team

    We have SCCM 1906 cb in our environment and co-management is also enabled for Pilot collections.

    Now we are trying to test wipe of devices via Intune , now my question is do i have to add device in collection which is added in co-management pilot .

    As we are able to wipe devices from Intune without adding in collection which is enabled for co-management is this expected behavior.

    My expectation is that device should be wiped only when they are added in  pilot co-management collection .

    Wednesday, January 22, 2020 5:41 PM

Answers

  • That's because it's already enrolled in Intune and when the ConfigMgr agent is installed it's installed in a co-management mode (otherwise it would never install successfully as using the two management tools together is not allowed without co-management). The collection in COnfigMgr for the reverse order where the systems are managed by ConfigMgr first. The collection is also for setting which workloads are controlled by which management tool. Because ConfigMgr has no wipe functionality, this function is always available to devices enrolled in Intune or co-managed.

    Jason | https://home.configmgrftw.com | @jasonsandys

    • Marked as answer by SCCM Rockstar Thursday, January 23, 2020 4:59 PM
    Thursday, January 23, 2020 1:54 PM

All replies

  • Can you please clarify your question and statements?

    Are you saying that you are able to initiate a wipe from Intune on devices not in your co-management collection?

    And that are you asking if this is expected?


    Jason | https://home.configmgrftw.com | @jasonsandys

    Wednesday, January 22, 2020 9:14 PM
  • Hi Jason yes we are enrolling devices via intune using autopilot and once device is enrolled we are using sccm to manage devices in the second stage and after that its fully managed by SCCM but we have co-management  enabled for pilot collection and when we need to use intune functionality we add device to Pilot collection but now we have observed that we can wipe devices without adding in co-management collection .

    Thursday, January 23, 2020 5:05 AM
  • That's because it's already enrolled in Intune and when the ConfigMgr agent is installed it's installed in a co-management mode (otherwise it would never install successfully as using the two management tools together is not allowed without co-management). The collection in COnfigMgr for the reverse order where the systems are managed by ConfigMgr first. The collection is also for setting which workloads are controlled by which management tool. Because ConfigMgr has no wipe functionality, this function is always available to devices enrolled in Intune or co-managed.

    Jason | https://home.configmgrftw.com | @jasonsandys

    • Marked as answer by SCCM Rockstar Thursday, January 23, 2020 4:59 PM
    Thursday, January 23, 2020 1:54 PM
  • Thanks Jason understood .
    Thursday, January 23, 2020 5:00 PM