ConfigMgr won’t be happy with duplicate machine names. Also, client auth certs 
must have unique subject names as well.

J

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of SCCM Admin
Sent: Monday, March 27, 2017 6:58 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Internet Clients

Could there be an issue with managing duplicate machine names since these 
aren't domain joined?

On Fri, Mar 24, 2017 at 9:20 PM, Jason Sandys 
<ja...@sandys.us<mailto:ja...@sandys.us>> wrote:
ConfigMgr never ever cares if a system to be managed is joined to a domain.

Certificate enrollment is always a challenge and depends upon a lot of things 
but there is no easy answer here.

Web enrollment is one possibility (if the users are local admins which is bad 
of course): 
https://technet.microsoft.com/en-us/library/hh831649%28v=ws.11%29.aspx.

The certificate enrollment web service is another possibility: 
https://technet.microsoft.com/en-us/library/hh831822(v=ws.11).aspx

J

From: <listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> 
on behalf of SCCM Admin <sccmadmin...@gmail.com<mailto:sccmadmin...@gmail.com>>
Reply-To: "mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>" 
<mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>
Date: Friday, March 24, 2017 at 7:23 PM
To: "mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>" 
<mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>
Subject: [mssms] Internet Clients

To manage internet machines with Azure through the cloud management gateway do 
they have to be joined to the domain, or can they be treated as workgroup 
clients.

Also how would the client certificate be sent to those machines?





Reply via email to