MDM: Fundamentals, Security, and the Modern Desktop

Chapter 4Co-Management and Co-Policy Management

When Intune first shipped, the party line was clear: A machine shouldn’t be managed by, say, Active Directory with Group Policy and by SCCM and also Intune. That would be a disaster because how would you know what setting was coming from where?

That was the “Story 1.0.” I want to explain that story first and then go onward to “Story 2.0,” which happened around September of 2017, and explain where that’s different and now evolved.

This “Story 1.0” was called Hybrid MDM.

This “Story 2.0” is called co-management and it involves your MDM service alongside both SCCM and Group Policy.

Indeed, using Group Policy alongside MDM has some interesting advantages and pitfalls. First, you can use Group Policy ...