it/dev connections: intune, configmgr, or both: choose the right tool for the job

Intune, Configuration Manager, or Both (Hybrid): Choose the Right Tool for the Job

#ITDEVCON

INTUNE, CONFIGURATION MANAGER, OR BOTH (HYBRID): CHOOSE THE RIGHT TOOL FOR THE JOB

Who we are• Peter Daalmans, Senior Technical Consultant at IT-Concern

– [email protected] // @pdaalmans

• Titles– Microsoft MVP: Enterprise Client Management

• Communities– Owner of http://configmgrblog.com

– Co-founder / Lead of Windows Management User Group NL

• Books:– Mastering System Center 2012 Configuration Manager

– Mastering System Center 2012 R2 Configuration Manager

– Coming up: Mastering Microsoft EMS

#devconnections


Who we are• Greg Ramsey, Infrastructure Tools Strategist at Dell, Inc.

– [email protected] // @ramseyg

• Titles– Microsoft MVP: Enterprise Client Management

• Communities– Owner of http://ramseyg.com

– Moderator on Microsoft TechNet Forums

– Northwest System Center Users Group (www.nwscug.org)

• Books– System Center 2012 Configuration Manager Unleashed

– System Center 2012 R2 Configuration Manager Unleashed

– Microsoft System Center 2012 Configuration Manager: Administration Cookbook

#devconnections


Agenda

• Introduction

• Windows Management Options

– Microsoft Intune only

– SCCM VNEXT only

– SCCM VNEXT with Microsoft Intune

– SCCM VNEXT stand alone MDM

#ITDEVCON


WINDOWS 10 MANAGEMENT

Introduction

#ITDEVCON


Management Questions

• Where do your systems ‘live’?

• Services to offer to your customers?

• What must you control?

• User Experience?

#ITDEVCON


MICROSOFT INTUNE

Windows 10 management

#ITDEVCON


Intune Manageability

• Two flavors:

– Management via Intune Agent

• Windows PC’s

– Management via MDM channel

• Windows 8+, Windows Phone 8+, iOS, Android,

Mac OS X (available Q4 2015)

#ITDEVCON


Management via Agent• Policies

• Company resource access

• Application / Updates management

• Remote wipe

• Remote Reboot

• Remote Endpoint Protection Management

• Inventory

• Reporting

#ITDEVCON


Management via MDM

• Enrollment

• Policies


• Application management

• Remote wipe / lock / passcode reset

• Inventory

• Reporting

#ITDEVCON


#ITDEVCON

Windows 10 PCs and

mobile devices

(with MDM or agent

style management

of PCs)

Windows 10 PCs and

mobile devices

(with MDM or agent

style management

of PCs)


Pro’s and Con’s agent

• Pro’s

– More remote control features

– Update management

• Con’s

– Need to install Intune agent software

#ITDEVCON


Pro’s and Con’s MDM• Pro’s

– No software installation required

– Great for BYOD or CYOD

• Con’s

– No control over software updates

– Troubleshooting is difficult via company

portal

#ITDEVCON


DEMO: INTUNE

#ITDEVCON


INTUNE TROUBLESHOOTING

#ITDEVCON


SCCM VNEXT


#ITDEVCON


SCCM VNEXT Manageability

• Native support via SCCM VNEXT client

• Full support for all SCCM VNEXT features

– OSD

– Compliance

– Application Management

– Inventory

– etc

#ITDEVCON


#ITDEVCON

Windows 10 PCs

(with native

management of PCs)

ConfigMgr

ConfigMgr console

SQLData Policies


DEMO: SCCM VNEXT

#ITDEVCON


SCCM VNEXT

TROUBLESHOOTING

#ITDEVCON


SCCM (VNEXT) + INTUNE


#ITDEVCON


Hybrid Manageability• Enrollment

• Policies


• Application management

• Inventory

• Reporting

• Remote wipe

#ITDEVCON


#ITDEVCON

ConfigMgr

ConfigMgr console

SQLData

Windows 10 PCs and

mobile devices

(with MDM-style

management of PCs)


Pro’s and Con’s• Pro’s

– Single pane of glass for MDM and onprem

– Great for BYOD or CYOD

– Full manageability features of SCCM

– Full manageability features of Intune

• Con’s

– New features can come later than in Intune

standalone (but PG is working on it)

#ITDEVCON


DEMO: SCCM + INTUNE

#ITDEVCON


SCCM + INTUNE

TROUBLESHOOTING

#ITDEVCON


SCCM VNEXT STANDALONE

MDM


#ITDEVCON


SCCM VNEXT MDM• (Bulk)Enrollment / provisioning packages

• Policies


• Application management (Required Appx and Web to

devices only)

• Inventory (limited)

• Reporting

• Remote wipe - retire

#ITDEVCON


What do we need?

• Public Key Infrastructure (AD CS)

• Intune Connector setup

• HTTPS-enabled Management Point

• HTTPS-enabled Distribution Point

• Enrollment Point and Enrollment Proxy Point

• Client Settings configured

#ITDEVCON


#ITDEVCON

Windows 10 PCs and

mobile devices

(with MDM-style

management of PCs)

ConfigMgr

ConfigMgr console

SQLData Policies


DEMO: SCCM MDM

#ITDEVCON


TroubleshootingSite Server Logs - <SiteServerDir>\Logs\

#ITDEVCON

SMSEnrollSrvSetup.log Setup for STS Service and Classic Enrollment

Service

SMSEnrollWebSetup.log Setup for STS Proxy, discovery service and classic

enrollment proxy

TEMHostWrapper.log Setup for CM Service based enrollment service

Enrollsrv.log Configuration of STS Service and classic

enrollment service

Enrollweb.log Configuration of STS Proxy, discovery service and

classic enrollment proxy


Troubleshooting - 2MP Logs- <Drive>:\SMS_CCM

#ITDEVCON

EnrollmentPoint\Logs\EnrollmentService.log Setup for STS Service and

Classic Enrollment Service

EnrollmentProxyPoint\Logs\Enrollmentweb.log Setup for STS Proxy,

discovery service and

classic enrollment proxy


Troubleshooting - Client

(This page intentionally left blank)

#ITDEVCON


Troubleshooting – Client 2

• Event Log

– Microsoft\Windows\CAPI2 (enable)

– Microsoft\Windows\Workplace Join

(enable)

– Microsoft\Windows\Appx*

#ITDEVCON


SERVICING IN WINDOWS 10

#ITDEVCON


Current Branch, CBB, and LTSB

#ITDEVCON

Source

http://www.drwindows.de/content/attachments/132029-win10testing.jpg.html


Servicing, CBB

#ITDEVCON

Source

source: https://www.windowspro.de/wolfgang-sommergut/updates-fuer-windows-10-microsoft-gibt-firmen-8-monate-zeit-zur-installation


#ITDEVCON

Source

source: http://www.zdnet.fr/actualites/windows-10-comment-microsoft-prevoit-de-pousser-ses-nouveautes-vers-les-pros-39820822.htm


Overview: Windows 10 management with ConfigMgr and Intune

#ITDEVCON

Product Version Release Vehicle Windows 10 Features

Supported

Windows Servicing Model

Supported

ConfigMgr

Technical Preview

New and existing features

Current Branch & Current Branch for Business, Long-Term Servicing BranchGenerally

Available

ConfigMgr 2012 SP2 and ConfigMgr 2012 R2SP1

Service Packs Existing featuresLong-Term Servicing Branch

ConfigMgr 2007 HotfixExisting features (management only, no OSD)

Long-Term Servicing Branch

Microsoft IntuneMonthly Service Updates

New and existing featuresCurrent Branch & Long-Term Servicing Branch


Feature SummarySoftware

Udpates

OS Bare

Metal

Deployment

OS In-

Place

Upgrad

e

OS

Servicing

OS

Config

App

Deploym

ent

Mobile

Application

Management

Inventory

ConfigMgr

Traditional

Intune

Stand-

Alone

Hybrid

ConfigMgr

On-Prem

MDM

#ITDEVCON


Help to shape Intune & SCCM

• Share your voice & ideas!– http://microsoftintune.uservoice.com/

– http://configurationmanager.uservoice.com/

#ITDEVCON

Rate This Session Now!Rate with Mobile App:

• Select the session from the

Agenda or Speakers menus

• Select the Actions tab

• Click Rate Session

Rate with Website:

Register at www.devconnections.com/logintoratesession

Go to www.devconnections.com/ratesession

Select this session from the list and rate it

Tell Us

What

You

Thought

of This

Session

Be Entered to

WINPrizes!

#ITDEVCON

it/dev connections: intune, configmgr, or both: choose the right tool for the job

Technology