Blog Post

SCCM Intune Hybrid to Standalone Guide Pt 3

Dujon Walsham • Jun 18, 2019

Changing Users to Intune Standalone / Import Devices to Intune

From the previous Intune hybrid setup the user collection which is mapped to the subscription is currently controlling the hybrid configuration.

Here we can stagger the process for certain users that want to migrate to using standalone.

For this we would need to add in an Exclusion Collection for the actual user collection which is mapped to your MDM collection, this way those users in the excluded collection will not be part of the hybrid setup, and will have the opportunity of being only Intune standalone users.

Collection Exclusion for Users

Create Collection

1.Open the Configuration Manager console

2.Click the Assets and Compliance Tab

3.Right Click User Collections and choose “Create Device Collection”

4. General: Specify details for this collection – Type in a name for the collection and select the Limiting Collection for All users. Then click next

5. Membership Rules: Define membership rules for this collection – Add in the members you need and then click next

6. Summary: Confirm the settings – Click next to create.


Add to Exclusion List

1.Open the Configuration Manager console

2.Click the Assets and Compliance Tab

3.Go to the Users Collection and right click the properties of the collection which is used for the Intune Subscription

4.Go to the membership tab and add an Exclusion Collection rule.

5.Select the collection you just created then click next.

Import Devices to Intune

If users are in Intune without the device pairings from the device affinity then we can add the devices in by using the CMDlets from the Import tool which was used earlier.

Import Intune PowerShell Module

1.Open PowerShell in Administrator Mode

2.Browse to the location of the Import Tool Folder

3. Run the following; Import-Module .\Microsoft.IntuneDataImporter.Commands.psd1

Add Devices to Intune for Standalone

First we will need to obtain the device Ids for the mobile devices in SCCM. You can get this from running

Get-CMDevice | Select Name, SMSID

Then once you have the Id/s you can then run the following

$Password = ConvertTo-SecureString ‘< Enter the Password for intune account >’ –AsPlainText –Force
$Credential = New-Object System.Object.Automation.PSCredential (‘< enter username to intune >’, ‘$Password’)

Switch-MDMDeviceAuthority –Credential $credential –DeviceIds <SMSId>

Change MDM Authority to Intune Standalone

Once you have fully migrated all users across to the Intune Standalone, and all of the devices have also been added to Intune, you can then change the MDM authority to Intune Standalone by removing the subscription of the Intune hybrid within the SCCM console.

1.Open the Configuration Manager Console

2.Go to Administration – Cloud Services

3.Select the Microsoft Intune Subscriptions and right click the subscription and choose delete.

4. Introduction: Choose removal option – Select the “Change MDM Authority to Microsoft Intune” option and click next.

5. Subscription: Microsoft Intune Subscription – Click Sign in

6. Summary : Confirm the settings – Click next to complete.

by D Walsham 13 Dec, 2021
Looking through the current SQL Server topology and how it affects our decision
by D Walsham 07 Oct, 2021
Introduction
by D Walsham 06 Oct, 2021
Introduction
by D Walsham 12 Aug, 2021
All the parts of the series we went into great detail about how we analyse an end to end solution and how we would design a solution in which would allow us to build endpoints without SCCM being a dependency. Whilst we did this, there is another scenario which we have not touched on yet, which is the hybrid scenarios. In a perfect world ideally you would have your Azure Active Directory within the cloud, every machine meets the recommended requirements for Windows 10, everything is imported into Intune/Autopilot and everyone is happy. But we know this isn't realistic in all cases. Many organisations cannot just simply up and go from on-premise into the cloud therefore the checkpoint here is of course getting into hybrid solutions such as; Co-Management Between Intune and SCCM Hybrid AD with Azure AD and On-Premise AD syncing together These things can play a very interesting part in how you would tackle this if you envisage the next step in the blueprint is to be in a position in which you can build and manage endpoints soley within Intune. With this final part of the series we will go in-depth in how the common hybrid setups look like and how we go about moving into the next step of being able to manage and build devices without SCCM.
by D Walsham 29 Jul, 2021
In continuation from the previous part where we had discussed how we create the "on site" piece of the solution, this was the part which would allow us to get our endpoints into a state in which they would essentially be ready to go through the Autopilot process. Which leaves our next piece of the puzzle, to begin the configuration of the actual backend side that resides within our Endpoint Management console. And you will see how everything ties up together to satisfy the full end to end process of getting an unknown (or known) device to proceed thorough the whole workflow to be finally managed by Intune without the aid of SCCM taking part in any of the prerequisites or preparation at hand.
by D Walsham 15 Jul, 2021
In this part we are now going to look into the technical step by step points on how we put everything together. In the previous part we spoke about the structure of how we would asses whether a machine was actually ready to be built with Autopilot or not with a build checklist process which would step through all areas which would cover an endpoints eligibility. Now with everything planned out we finally want to step into making things reality by putting everything together.
by D Walsham 02 Jul, 2021
When it comes to managing your endpoints in endpoint manager, one of the things you may be looking to do is to get all of your Intune registered machines to also be enrolled as Autopilot devices. Now we can of course just have the deployment profile deployed to all machines and then hit the "Convert targeted machines to autopilot" but this might not necessarily be feasible for every client. We may want to perform some due diligence first so we can at least understand what devices in Intune are not in Autopilot.
Show More
Share by: