Improved Microsoft Intune Migration Process Starting to Arrive
Microsoft this week unveiled a new process to make it easier for organizations to migrate settings when Microsoft Intune has been integrated with System Center Configuration Manager (SCCM), which Microsoft refers to as a "hybrid" mobile management approach.
The new migration process, announced this week, is designed for organizations that want to move to a pure Microsoft Intune-managed environment instead, which Microsoft calls a "standalone" mobile management approach. Switching from the hybrid approach to the standalone Intune service, though, has required organizations to "reconfigure all settings in Intune, including re-enrolling all devices." It also was a potentially painful process because the whole tenancy had to be switched at once.
The new approach supposedly adds a little more flexibility to this switching process. It permits a "phased approach" with testing along the way, according to a Microsoft document describing the process.
First, organizations use a Microsoft Intune Data Importer tool, available from GitHub, to copy policies from SCCM to Microsoft Intune. Objects can be imported if they are based on Active Directory groups, Microsoft's announcement explained. Organization may be OK at this stage "if the policies targeted to a user are the same in both consoles," Microsoft's announcement noted.
Next, organizations can move some users over to the standalone Intune service. It'll result in a so-called "mixed authority" state, with some users managed under standalone Intune, while others continue to be managed via hybrid SCCM. During this phase, the tenancy-level polices can only be modified via the SCCM console, Microsoft's announcement explained. However, it's possible to dispense with the legacy Silverlight-based console during this phase, at least for the users that were moved over to Intune management.
Organizations first need to know that they have the mixed authority capability before they can proceed with this stage, though. They'll get a notification from the Office 365 Message Center telling them if it's possible.
The last step in the move to standalone Microsoft Intune is to "initiate the tenant MDM authority switch through the Configuration Manager console." It'll move things created via the Azure Portal, along with tenancy-level policies, to Intune, which gets managed through the Azure Portal. Moreover, "enrolled devices will not be required to re-enroll," Microsoft's announcement claimed.
Kurt Mackie is senior news producer for the 1105 Enterprise Computing Group.