Blog - Page 40 Of 42 - Device Management Blog

SCCM Support Center Tool Video Review & Remote Client Support

In this video post, you will get video experience of Configuration Manager support center tool. SCCM Support center tool is a tool which will help you to troubleshoot client health for SCCM admins. Remote SCCM client support center tool helps you to connect client PowerShell.

[Related Post – How to Use Support Center Tool and SCCM Logs and Quick Tips to Read Logs]

SCCM Server Troubleshooting Tools

If you are looking for a solution where you want to troubleshoot SCCM server stuff, then I would recommend reading the following post SCCM Server Side Troubleshooting Tool Kit Guide. SCCM support center tool can be used for log viewing at the server side as well.

Remote SCCM Client Support Center Tool

SCCM support center tool helps to connect remotely to SCCM client devices. This support center tool when you have an appropriate communication channel opened between the remote client and the machine from where you are running the support center tool.

Support Center helps to reduce the challenges when troubleshooting SCCM client devices. Previously, when working with support to address an issue with SCCM clients, you would need to manually collect log files and other information to help troubleshoot the problem. It was easy to forget a crucial log file accidentally, causing additional headaches for you and the support personnel who you’re working with.

Use SCCM Support Center to streamline the support experience. It helps you:
- Create a troubleshooting bundle (.zip file) that contains the SCCM client log files. You then have a single file to send to support personnel.
- View SCCM client log files, certificates, registry settings, debug dumps, client policies.
- Real-time diagnostic of inventory (replaces ContentSpy), policy (replaces PolicySpy), and client cache.

PowerShell SCCM Support Center

There are three PowerShell commandlets supported by SCCM Support Center or Configuration Manager Support Center. You can use these powershell cmdlets to create a remote connection to another SCCM client, to configure the data collection options, and to start data collection.

Name	Description
Get-CMDataCollectionTasks	Gets the data collection tasks that apply to a SCCM client computer.
Invoke-CMDataCollection	Starts collecting data for a SCCM client computer.
New-CMMachineConnection	Creates a connection to a SCCM client computer.

SCCM Support Center Tool — SCCM Support Center

Resources

Support Center for Configuration Manager (SCCM Support Center) – More details – https://docs.microsoft.com/en-us/sccm//core/support/support-center
SCCM Admin Console Walkthrough Video Guide – https://howtomanagedevices.com/sccm-admin-console-video-guide/

SCCM Integration with Azure Log Analytics with OMS Connector

You can connect your SCCM environment to Azure Log Analytics (OMS) to sync device collection data. The SCCM OMS connection helps to create reference the device collections in Log Analytics and Azure Automation. In this video tutorial, you will see how to configure SCCM Azure Log Analytics.

Step by Step SCCM Azure Log Analytics Integration

With the above video guide, I will help you to integrate SCCM and Azure Log Analytics. The following steps will help you to understand the process of connecting SCCM with OMS (Azure Log Analytics).

Something you need to take care before integrating SCCM Azure Log Analytics (SCCM and OMS). Microsoft announced Desktop Analytics integration with SCCM. So make sure the roadmap of OMS connection with SCCM is still required or not.

Login to the Azure portal with appropriate access rights to integrate SCCM with Log Analytics.
In the Azure portal, register SCCM as a Web Application and/or Web API app, and ensure that you have the client ID and client secret key from the registration from Azure AD. See Use portal to create an Azure AD application and service principal that can access resources for detailed information about how to accomplish this step.
In the Azure portal, grant SCCM (the registered web app) with permission to access Log Analytics.
In SCCM console, add a connection using the Add OMS Connection Wizard.
In SCCM, update the connection properties if the password or client secret key ever expires or is lost.
Download and install the Microsoft Monitoring Agent on the computer running the SCCM service connection point site system role. The agent sends SCCM data to the Log Analytics workspace.
In Log Analytics, import collections from SCCM as computer groups.
In Log Analytics, view data from SCCM as computer groups.
You can read more about connecting SCCM to Log Analytics at Sync data from SCCM to the Microsoft Log Analytics.

Resources

How to Convert MSI Packages to MSIX Using SCCM

Have you heard about SCCM MSIX conversion wizard? This MSIX conversion wizard gives you an option to convert existing application to MSIX packages. In this video post, you will see MSIX package conversion process. The process which I explained in the above video is to Convert MSI Packages to MSIX.

Find Out the List of MSI Packages?

First phase of convert MSI packages to MSIX is the inventory of MSI packages which should be converted to MSIX. Also, you need to make sure whether you would be able to convert all the packages to MSIX.

I do agree that all your MSI packages can’t be converted to MSIX packages without any manual efforts or coding. But, this is the stage where you should get a sponsor to analyze and test the existing MSI packages to understand compatibility.

This compatibility check to convert MSI packages to MSIX is important for your organization. This analysis will help to understand the efforts to convert MSI packages to MSIX.

How to Convert MSI Packages to MSIX

SCCM 1810 or above will help you to convert MSI packages to MSIX. SCCM uses the MSIX conversion tool in the background to install MSI package on reference computer and capture the changes in the system to make MSIX package.

The following prerequisites should be in place to convert MSI packages to MSIX and test those MSIX packages.

Purchase public cert – code signing certificate or Internal PKI cert or self signing cert
SCCM 1810 Infrastructure
Windows 10 1809
SCCM 1810 or later installed on Windows 1809 or later
Windows 1809 or later with local admin access
Windows 10 SDK with SignTool.exe
Clean Windows 1809 or later reference device without any previous installations of the MSI packages which are getting converted to MSIX
The user should have access to MSI Package Source location and MSIX package SAVE location
Enable sideloading of Windows apps on Windows 10 device

Reference

Step by Step guide to test MSI to MSIX package conversion process – https://www.anoopcnair.com/sccm-msix-conversion-process/

Why should you Download & Install Windows 10 SDK & Tools

In this video post, you will see Windows 10 SDK tools and utilities. I have download Windows 10 SDK recently to use of the application signing tool. I used SignTool.EXE tool to sign one of my MSIX application. MSIX application can’t be installed without signing it.

Download Windows 10 SDK Tools

You can download Windows 10 SDK tools. There are two ways to get the Windows 10 SDK. You can install it from Microsoft Windows site. I would recommend downloading Windows 10 SDK ISO. You can start the download link, Also, you can by select this version of the Windows 10 SDK in the Visual Studio installer optional components.

https://developer.microsoft.com/en-us/windows/downloads/windows-10-sdk

Install Windows 10 SDK Tools

Installation of Windows SDK is straightforward. You should take care of Windows 10 SDK tool system requirements.

Supported operating systems

Windows 10 App Development (UWP)
Windows 10 version 1507 or higher: Home, Professional, Education, and Enterprise (LTSB and S are not supported)
Windows Server 2012 R2 (Command line only) Windows Server 2016 (Command Line only)
Win32 Development
Windows 10 version 1507 or higher
Windows Server 2016: Standard and Datacenter
Windows 8.1
Windows Server 2012 R2
Windows 7 SP1
(Not all tools are supported on earlier operating systems)

Hardware requirements

1.6 GHz or faster processor
1 GB of RAM
4 GB of available hard disk space

List of Windows 10 SDK Tools

Windows 10 utilities which are helpful for IT Pros, Devops, and Developers.

accevent.exe
adpcmencode3.exe
betest.exe
bulkmetadatapackagingwizard.exe
cert2spc.exe
certmgr.exe
ComparePackage.exe
computerhardwareids.exe
convert-moftoprovider.exe
cppwinrt.exe
ctrpp.exe
DeployUtil.exe
DeviceMetadataWizard.exe
dxc.exe
dxcapsviewer.exe
espexe.exe
extidgen.exe
filetypeverifier.exe
filtdump.exe
filtreg.exe
ftquery.exe
fxc.exe
gamesaveutil.exe
genmanifest.exe
graphedt.exe
ifilttst.exe
inspect.exe
isxps.exe
jsconstraintdebug.exe
makeappx.exe
makecat.exe
makecert.exe
makepri.exe
mbidgenerator.exe
mc.exe
mdmerge.exe
mftrace.exe
midl.exe
midlc.exe
midlrt.exe
mlgen.exe
mt.exe
muirct.exe
oleview.exe
PackageEditor.exe
pktextract.exe
pvk2pfx.exe
rc.exe
regwinmd.exe
signtool.exe
StoreUploader.exe
TB3x.exe
topoedit.exe
tracefmt.exe
tracelog.exe
tracepdb.exe
traceview.exe
tracewpp.exe
uuidgen.exe
vsdiagview.exe
vshadow.exe
vssagent.exe
vsstrace.exe
vstorcontrol.exe
vswriter.exe
winmdidl.exe
wsdcodegen.exe
wsddebug_client.exe
wsddebug_host.exe
wstracedump.exe
wstraceutil.exe
wsutil.exe
xpsanalyzer.exe
xpsconverter.exe

MSIX Support – Windows 10 SDK Tools

The Windows SDK tooling has been updated to support the new MSIX format. You can now use the MakeAppx tool to package your application with MSIX, and validate your MSIX package using the Windows App Certification Kit.

Resource

PWA Windows Desktop And Mobile Experience – https://howtomanagedevices.com/pwa-windows-desktop/

What is New in SCCM 1810 New Features Video Tutorial

Microsoft released SCCM 1810 version in the fast ring (opt-in). I have published a couple of posts and videos about SCCM 1810 upgrade. I would recommend reading those posts to get more details about the upgrade process. In this video post, I will give you a walkthrough experience of SCCM 1810 New Features (What is New in SCCM 1810).

List of SCCM 1810 New Features

The following features are identified and explained in the video blog above. I would recommend going through the resources section as well to get more details about SCCM 1810 new features (What is New in SCCM 1810).

Improvements to collection evaluation
SCCM administrator authentication
The Management insights rule for peer cache source client version
Improvements to internet-based client setup
Convert applications to MSIX
Changes to client notification action to wake up a device
Improvement to the client installation
Required app compliance policy for co-managed devices
Improvement to co-management dashboard
New boundary group options
Site system on Windows cluster node
Logging Improvements to CMPivot
Improvements to scripts
New client notification action to wake up the device
Task sequence support for boundary groups
Management insights dashboard
In-console documentation dashboard (Not Released in this SCCM 1810 new features)
Improvements to driver maintenance (Model details)
Task sequence support of Windows Autopilot for existing devices (Out of box Support)
Improvements to CMPivot (80KB or above in msg size)
Improvement to lifecycle dashboard
Improvement to the data warehouse
Improvement of maintenance windows for software updates
Phased deployment of software updates
Improvement to repair applications
Community Hub (Not Released in this SCCM 1810 new features)
Specify the drive for offline OS image servicing (Not Released in this SCCM 1810 new features – I couldn’t confirm this)
Co-managed device sync activity from Intune
Repair SCCM applications
Approve application requests via email
Improvement to script output
Improvement of third-party software updates

Resource (SCCM 1810 New Features)

SCCM ConfigMgr 1810 Upgrade #Video Guide
SCCM 1810 Upgrade Step by Step Walkthrough Guide
SCCM 1810 What is New -> https://docs.microsoft.com/en-us/sccm/core/plan-design/changes/whats-new-in-version-1810
Windows 10 Support as SCCM Client – https://docs.microsoft.com/en-us/sccm/core/plan-design/configs/support-for-windows-10
Windows 10 ADK Support for SCCM 1810? https://docs.microsoft.com/en-us/sccm/core/plan-design/configs/support-for-windows-10#windows-10-adk

Free Tool to Backup and Restore Windows 10

I have explained how to Install Veeam Agent for Windows, How to Create Recovery Media for Windows 10, and How to install Veeam Agent license in the previous post. I would recommend reading that post to get more details about the product. In this post, you will see how to take backup of Windows 10 machine and How to Restore Windows 10 Backup.

Define What Data to Backup and Configure the Backup Job

Before you configure backup Windows 10 job, you should decide the following:

Windows 10 Backup Scope – Entire Computer Image, Specific Windows 10 Volume (C drive, D Drive, etc.), or Specific Folder (Restore Windows 10 Backup)
Windows 10 Backup Destination – Where you want to store Windows 10 created backup
Windows 10 Backup Schedule – How often you want to take backup of Windows 10 device

What is the Windows 10 Backup Destination Location

Windows 10 backups created with Veeam Agent for Microsoft Windows free tool. Installation of Windows 10 free backup tool is explained in the previous post here. The Windows 10 backup can be saved to one of the following locations:

Removable storage device
Local computer drive
Network shared folder
Backup repository managed by a Veeam backup server
Cloud repository managed by a Veeam Cloud Connect service provider
Microsoft OneDrive (Recommended option in my point of view)

You can backup Windows 10 device to Microsoft OneDrive, and that is best and recommended option for me. You cannot save the backup of entire Window s10 computer on the local computer disk. Veeam Agent for Microsoft Windows does not back up data to which symbolic links are targeted. Restore Windows 10 Backup options are explained in the below section.

Types of Windows 10 Backup Options with Veeam Agent for Windows

In this section, you will explore the types of Windows 10 backup options. As I explained in the above video, I have used an entire computer image option to take Windows 10 backup.

Volume-Level Backup
File-Level Backup (Slowest)
System State Data Backup (Fastest)

The entire Windows 10 image backup will back up your entire computer image for a fast recovery on any level. Deleted, temporary and Windows 10 page files are automatically excluded from the image to reduce the backup size. Restore Windows 10 Backup options are explained in the below section.

Launch Configure Veeam Agent for Windows Backup Wizard

In this section, you will see how to configure a Windows 10 backup task. The following steps will help you to launch a Veeam agent for Windows:

From the main menu, select All Programs > Veeam > Configure Backup
Or use the Microsoft Windows search to find the Configure Backup option on your Windows 10 computer

I would recommend completing the Veeam backup configuration wizard as I explained the above video. Select the check mark “Run the job when I click finish” to start the Windows 10 backup process. The restore Windows 10 Backup options are explained in the below section.

Processes Involved in Windows 10 Backup Process – Veeam Agent Microsoft Windows

Veeam agent home page will provide you with the process of the Windows 10 backup process. The backup or restore point creation took 2:40 hours to backup 980 GB SSD Windows 10 device. Veeam agent for Windows created 480 GB backup. The Windows 10 restore points are created on external hard disk.

The following processes are completed during the Windows 10 backup task:

Initializing
Preparing for backup
Creating VSS snapshot
Calculating digests
Getting a list of local users
EFI system partition (disk 0) (260.0 MB) 260.0 MB read at 247 MB/s
Local Disk (C:) (952.6 GB) 30.6 GB read at 94 MB/s
Local Disk (C:) (952.6 GB) 730.6 GB read at 82 MB/s
Windows RE tools (disk 0) (860.0 MB) 860.0 MB read at 125 MB/s
Saving GuestMembers.xml
Finalizing
Truncating transaction logs
Truncating SQL server transaction logs
Processing finished at 24-11-2018 19:29:45

Restore Windows 10 Backup options – Veeam Agent for Microsoft Windows

The restore Windows 10 Backup options are explained in this section. Once you finish the backup task for Windows 10 device, you can restore files or volumes from restore points. When you stored the backup in the external hard disk, ensure that the hard disk with a valid backup of your Windows 10 machine is connected and accessible.

The following steps will help you restore files as I shown in the above video:

In Windows 10 Explorer, browse to the backup target and find a VBK or VBM file in the backup chain.
Double-click the VBK or VBM file
In the displayed window, select a restore point from which you want to restore the file
Click Open
Veeam Agent for Microsoft Windows will display the backup file content in the Veeam Backup browser
Locate the file you want to restore, right-click it and select Restore >
Select Overwrite or keep the option
The file will be restored to its original location on your Windows 10 device

Resources:

Veeam Agent for Windows Restore Process – https://helpcenter.veeam.com/docs/agentforwindows/userguide/howto_restore_files.html?

Veeam Agent for Windows Backup Configuration Process – https://helpcenter.veeam.com/docs/agentforwindows/userguide/backup_job_create.html?

SCCM 1810 Upgrade Video Guide – Best Practices

Microsoft released the SCCM 1810 production version as an opt-in. Yes, it’s opt-in version (fast ring). This SCCM 1810 Upgrade video post will give much more details. The SCCM 1810 won’t be available in your SCCM console until Microsoft releases a SLOW ring version of SCCM 1810. So how do you get the 1810 version today in your console? Here is the blog post from Microsoft to get the 1810 version on to your LAB, Development, or pre-production/staging environment. Checkout Micros oft Annoucement about the release here.

SCCM 1810 Fast Ring  is an Opt-in update option given to SCCM customers
SCCM 1810 Slow Ring is GA, generally available for all applicable SCCM Infra

[Related Post – SCCM 1810 Upgrade Step by Step Walkthrough Guide ]

Best time to Deploy SCCM 1810 to Production?

Microsoft fully supports the SCCM 1810 fast ring or opt-in version. Hence officially you can upgrade your production environment to SCCM 1810 with opt-in version. However, I won’t directly jump into the production upgrade.

I want to test the 1810 version in the LAB environment and Staging environment before going into production upgrade. By the time I complete all these testing in staging, Microsoft will release the fast ring version of SCCM 1810.

SCCM 1810 Known Issues?

I’m not aware of any known issues of SCCM 1810 production version. However, I will try to keep an eye on SCCM 1810 known issues announcements from Microsoft and update here or in another blog.

SCCM 1810 Upgrade Best Practices?

Microsoft has already provided a checklist of SCCM 1810 upgrade best practices in their documentation here. I would recommend reading that documentation before proceeding with the upgrade. SCCM 1810 In-console update available only for 1710, 1802, or 1806?

Check All Windows Server, SQL components running on your SCCM site servers for the supportability of SCCM 1810 version
All sites run a supported version of SCCM
Review the version of the Windows ADK for Windows 10
Review the site and hierarchy status for unresolved issues
Review file and data replication between sites
Install all applicable critical Windows updates
Disable database replicas for management points at primary sites
Set SQL Server AlwaysOn availability groups to manual failover
Disable SCCM site maintenance tasks at each site
Create a backup of the site database
Temporarily stop any antivirus software on SCCM Servers
Plan for SCCM client piloting
Plan to use service windows
Review supported extensions for SCCM 1810
Run the SCCM 1810 setup prerequisite checker
Update All SCCM site

SCCM 1810 Download or Upgrade Stuck?

When you have an issue with SCCM 1810 update download and upgrade process, please check the monitoring workspace and understand what is happening. Also, you refer to the log files mentioned in each stage of SCCM console monitoring workspace.

I have blogged about SCCM troubleshooting on update and servicing issue. I would recommend reading the following post to get more help on SCCM 1810 upgrade issues.

https://howtomanagedevices.com/sccm-updates-and-servicing-issue/

Site Server, Client, and Console Version Numbers?

Following table is the best place to know more about the SCCM 1810 console, site server, and client version numbers.

SCCM 1810 Site Version	SCCM 1810 Console Version	SCCM 1810 Client Version	Baseline	In-console update available for?
5.00.8692.1000	5.1810.1075.1300	5.00.8740.1003	No	Yes for SCCM 1710, 1802, or 1806

Resource:

What is new in SCCM 1810 version – https://docs.microsoft.com/en-gb/sccm/core/plan-design/changes/whats-new-in-version-1810

SCCM CB End of Life details – https://www.anoopcnair.com/sccm-life-cycle/

[Related Post – SCCM 1810 Upgrade Step by Step Walkthrough Guide -Coming Soon]

Tool to Create Windows 10 1809 Recovery Media

In this post, I’m going to introduce you to a tool which can be used to safeguard your Windows 10 devices. Have you seen boot failure issues with Windows 10 and server devices? You can use this tool to boot the Windows 10 and server 2016 devices from pre-created recovery media and recover the data. Windows 10 Recovery media can be created a tool called Veeam agent for Microsoft Windows.

Why is Windows 10 Recovery Media Important?

The Windows 10 recovery media or image can be helpful if one of the following errors occur:

The Windows 10 on the computer fails to start or boot
The Windows 10 computer is blocked with malware, and you cannot get access to your data
When you want to perform a bare-metal restore from the backup on the computer without the Windows 10 and other software installed
When you want to restore the Windows 10 system volume of the computer

Veeam Agent for Microsoft Windows

You can create Windows 10 recovery media using Veeam agent for Windows. In case of a disaster, you can start the Windows 10 OS from the Veeam Recovery Media and use Veeam Agent for Microsoft Windows and standard Microsoft Windows tools to diagnose and fix problems.

This tool can be used for creating recovery media for the following Windows operating systems:

Windows 7 SP1
Windows 8.x
Windows 10
Windows Server 2008 R2 SP1
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016

In this video post, I installed Veeam agent for Windows in Windows 10 1809 machine and created a recovery media.

Download Veeam Agent for Microsoft Windows?

Download the free version of Veeam agent for Microsoft Windows and use it for desktop and laptops. Also, there is an option for you to try the trial version of FULL Veeam agent for Microsoft Windows for 30 days.

Free Veeam Agent for Windows Desktop and Laptops (Windows 10)
Thirty (30) Days trail Veeam Agent for Windows Workstations & Servers

Download the Free version of Veeam agent for Windows 10 backup and recovery from the following link:

https://www.veeam.com/windows-backup-download.html

Install Veaam Agent for Microsoft Windows

Install Veeam backup and recovery agent for Windows 10. You can use this agent to create Windows 10 recovery media. The installation process is straightforward, and the installer itself install the other dependant required software. List of prerequisite software are:

.NET Framework 4.5.2
SQL Server 2012 Express LocalDB Edition
SQL Server 2012 Management Objects
SQL Server System CLR Types

As you can see in the above video, the installation is straightforward. Veeam agent for Windows V2.2 is compatible with Windows 10 1809 version.

Create Windows 10 Recovery Media – Veeam Agent for Windows

As I mentioned above, Veeam Agent for Windows can be used to create recovery media for server and desktop operating systems like Server 2012, 2016, etc. In this video post, I’m going to explain how to create recovery media for Windows 10 1809.

I used the four (4) GB USB drive to create the recovery media for Windows 10 1809 machine. You can create a recovery image on different kinds of media:

Removable storage devices such as USB drives or SD cards
CD/DVD/BD
ISO images on local or external computer drives

How to Launch – Veeam Agent for Windows to Create Recovery Media?

Once you install Veeam agent for Microsoft Windows, you can launch “Create Recovery Media” shortcut from Windows 10 Start Menu – Veeam folder.

Drivers required to run hardware and devices on your Windows 10 computer will be added to recovery media. Also, network and wireless network drivers will be added to the media. There is an option to add additional drivers from a network folder into Windows 10 recovery media using Veeam Agent for Microsoft Windows.

Default Folder Path – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Veeam\Tools

Steps – Windows 10 Recovery Media – Veeam Agent for Windows

The following are the high-level steps involved in the creation of Windows 10 recovery media using Veeam agent for Microsoft Windows. As I mentioned above, I used four GB USB drive to create the recovery media.

Note – The all the data in the USB media will be erased while creating the recovery media.

Mounting Recovery Environment Image
Copying Veeam Recovery Environment Files
Adding the .NET Framework
Adding Wireless networking support files
Adding System Drivers
Adding Internet Browser
Copying Boot Files
Unmounting Recovery Image
Preparing USB Disk
Copying Data to USB Disk
Recovery Media Has Been Created

How to Boot Windows 10 device with USB Recovery Media

Plug in the Windows 10 recovery media created with Veeam agent for Microsoft Windows and the select the option to boot the Windows device from USB media.

There are several options given in the Veeam Recovery Media for Windows 10. I have explained most of them in details in the above video tutorial.

Resource

Veeam Agent https://www.veeam.com/veeam_agent_windows_2_2_release_notes_rn.pdf

PWA Windows Desktop And Mobile Experience – https://howtomanagedevices.com/pwa-windows-desktop/

SCCM Replication Issue – SQL Replication Troubleshooting Guide

SCCM Database replication issues are common when you have an SCCM hierarchy with CAS, Primary, or Secondary servers. Let’s check what the necessary troubleshooting steps an SCCM admin can perform are.

SCCM replication issue is not very easy to troubleshoot via forums or offline. The above SCCM Replication Issue troubleshooting video will help you fix some of the common SCCM replication issues.

Latest Updated Post – FIX SCCM SQL Replication Issues Using Replication Link Analyzer

SCCM Co-Management Video Guide with 16 Posts

First of all, co-management is not SCCM and Intune feature, but it’s a Windows 10 feature. Windows 10 provides an option to device management applications to concurrently manage a device. For example, you can manage a Windows 10 device with SCCM and Intune at the same time. Even this could true for other vendors and solutions like Airwatch and Kace? More SCCM Co-Management details are below with 16 posts and more than ten (10) video tutorial. This post also includes the latest updates of co-management.

Windows 10 Version Requirement?

Co-management is a dual management capability available with Windows 10 1709 version (Fall Creators Update) and later. Co-management is the bridge between traditional management and modern management. So if your Windows 10 version is not 1709 or later, then you can’t manage that device with SCCM and Intune at the same time.

SCCM Version Required for Co-management?

Your SCCM version should be SCCM 1710 or later to support co-management scenario. If you have the latest version of SCCM 1806 or 1810, then you can avoid creating many PKI certificates to implement co-management. Co-management setup for SCCM is getting simplified with latest releases of SCCM.

Firewall Ports Required for Co-Management?

We do not need to open any inbound ports to your on-premises network. The SCCM service connection point and CMG connection point initiate all communication with Azure and the CMG. These two site system roles must be able to create outbound connections to the Microsoft cloud.

Is CMG Mandatory for SCCM Co-Management

No, SCCM CMG is not mandatory for Co-Management. When you use Intune to install the SCCM client, enable a cloud management gateway in SCCM. More details in Microsoft documentation here.

Co-Management Related Posts

SCCM co-management related posts are available in the following list. Some of them are outdated as I mentioned in the video above. I would recommend reading the Microsoft documentation on co-management to get the latest updates.