Co-management – Installing SCCM 1710 Client from Intune

With co-management available in SCCM Current Branch 1710, you can install the SCCM client on a Windows 10 1709 Intune enrolled machine (Intune standalone) by creating an app in Intune. This will leverage the Cloud Management Gateway and Azure AD User Discovery. This example post is for a Windows 10 1709 Intune enrolled machine, but you could also use Autopilot with the steps below to get the SCCM client installed as well.

Microsoft lists two paths for co-management. This post is about the second path.

Co-management for Windows 10 devices

https://docs.microsoft.com/en-us/sccm/core/clients/manage/co-management-overview

There are two main paths to reach to co-management. One is Configuration Manager provisioned co-management where Windows 10 devices managed by Configuration Manager and hybrid Azure AD joined get enrolled into Intune. The other is Intune provisioned devices that are enrolled in Intune and then installed with the Configuration Manager client reach a co-management state.

Prerequisites:

  • SCCM Current Branch 1710 – https://docs.microsoft.com/en-us/sccm/core/plan-design/changes/whats-new-in-version-1710
  • Cloud Management Gateway configured – See https://blogs.technet.microsoft.com/arnabm/2016/12/19/step-by-step-cloud-management-gateway/
  • Azure AD User Discovery configured – See https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/Azure-services-wizard#webapp
  • Cloud Distribution Point – See https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/use-a-cloud-based-distribution-point
  • Windows 10 1709 machine enrolled in Intune and Azure AD joined
  • Management Point with HTTPS enabled for Azure AD user authentication

Firstly, distribute the Configuration Manager Client Package to the Cloud Distribution Point.

intunecomgmt-01

Next co-management will be enabled. This will provide the SCCM command line arguments with the correct information to install the SCCM client through Intune.

In Administration section, expand Cloud Services and right click Co-management

intunecomgmt-02

Sign in with your Intune account and click Next.

intunecomgmt-03

Select the required settings. Copy the command line arguments for later as this will be used in Intune to deploy the SCCM client.

intunecomgmt-04

I have set all to Pilot Intune.

intunecomgmt-05

I have created a test Pilot Intune collection.

intunecomgmt-06

Close the Wizard.

intunecomgmt-07

ccmsetup.msi needs to be uploaded from C:\Program Files\Microsoft Configuration Manager\bin\i386 on the SCCM 1710 site server to Intune

In portal.azure.com go to Intune then Mobile Apps, then Apps and click Add.

intunecomgmt-08

Browse to the ccmsetup.msi

intunecomgmt-09

Fill in the details. You can change the name and other information as you like. For the Command-line arguments, paste in the details that we copied before.

intunecomgmt-10

The ccmsetup.msi will then begin to upload. You can view the notifcation below to see when it has been uploaded.

Click on Assignments and select a group. I created an Azure AD dynamic group for Windows 10 1709 machines and made the app as “Required”

intunecomgmt-11

On the Windows 10 1709 machine, you can do a Sync, then you can see the SCCM client is installing. If you see the ccmsetup.log file, it will start to grab the SCCM client files from the Cloud DP (make sure the client is distributed to the Cloud DP)

intunecomgmt-13

When you open up Company Portal now, you will see “Your apps are located in Software Center”. You can see in Software Center my SCCM applications are now appearing.

intunecomgmt-14

You can now see the device appearing in the SCCM console as active as it is communicating through the CMG.

intunecomgmt-15

Advertisements

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s