Improved Microsoft Intune Migration Process Starting to Arrive -- Redmondmag.com

Improved Microsoft Intune Migration Process Starting to Arrive

By Kurt Mackie
09/15/2017

Microsoft this week unveiled a new process to make it easier for organizations to migrate settings when Microsoft Intune has been integrated with System Center Configuration Manager (SCCM), which Microsoft refers to as a "hybrid" mobile management approach.

The new migration process, announced this week, is designed for organizations that want to move to a pure Microsoft Intune-managed environment instead, which Microsoft calls a "standalone" mobile management approach. Switching from the hybrid approach to the standalone Intune service, though, has required organizations to "reconfigure all settings in Intune, including re-enrolling all devices." It also was a potentially painful process because the whole tenancy had to be switched at once.

The new approach supposedly adds a little more flexibility to this switching process. It permits a "phased approach" with testing along the way, according to a Microsoft document describing the process.

First, organizations use a Microsoft Intune Data Importer tool, available from GitHub, to copy policies from SCCM to Microsoft Intune. Objects can be imported if they are based on Active Directory groups, Microsoft's announcement explained. Organization may be OK at this stage "if the policies targeted to a user are the same in both consoles," Microsoft's announcement noted.

Next, organizations can move some users over to the standalone Intune service. It'll result in a so-called "mixed authority" state, with some users managed under standalone Intune, while others continue to be managed via hybrid SCCM. During this phase, the tenancy-level polices can only be modified via the SCCM console, Microsoft's announcement explained. However, it's possible to dispense with the legacy Silverlight-based console during this phase, at least for the users that were moved over to Intune management.

Organizations first need to know that they have the mixed authority capability before they can proceed with this stage, though. They'll get a notification from the Office 365 Message Center telling them if it's possible.

The last step in the move to standalone Microsoft Intune is to "initiate the tenant MDM authority switch through the Configuration Manager console." It'll move things created via the Azure Portal, along with tenancy-level policies, to Intune, which gets managed through the Azure Portal. Moreover, "enrolled devices will not be required to re-enroll," Microsoft's announcement claimed.

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.

Featured

Cisco Warns of Brute Force Attacks Targeting VPNs and Firewalls

Cisco has revealed that a global increase in brute force attacks targeting Virtual Private Networks (VPNs) and other devices is currently taking place.
What's Inside Microsoft 365's Security Toolbox?

Microsoft provides plenty of native tools to secure Microsoft 365. IT pros just have to know where to look.
Microsoft Kills 30-Day Data Retention Policy for Copilot in Fabric

Microsoft this week announced several usability improvements coming to Copilot in Fabric in preparation of its general availability release later this year.
Using Microsoft Office to Build a Network Diagram 2

Now that we've set up our process, let's dig in with the actual execution.
Microsoft Graph 'Activity Logs' Feature Goes Live

Microsoft announced the general availability of the "activity logs" capability in Microsoft Graph, giving administrators more options to track user activity and identify patterns of potential misuse.