A few points here:
- Yes many, many folks use it. - No, it’s not perfect and has some growing and polishing to do. - Don’t confuse Compliance Settings and Compliance Policies. Compliance Settings are for applying settings to mobile devices. Compliance Policies are for checking the compliance of a system and only for use with conditional access. - Each managed platform has its own distinct management layer. There is a fair amount of commonality on the what that management layer does, but how they do it often very different and in general and completely out of the hands of the ConfigMgr and Intune teams. Even within the Android “platform” (if you can call it that *cough* garbage *cough*) there is a ton of differences with regards to management between the various flavors and iterations. This leads to all kinds of complexity that must be understood to properly manage a diverse environment let alone build a tool to manage them. - Not sure what’s going on with the Apple Configurator, but Microsoft are really at the mercy of Apple on this one as they – Apple – like to change things on their end and since they own everything including the management layer in iOS everyone else has to keep up with them. Another example of this was iOS 9.2 which completely broke MDM management in the platform and it took them almost 2 months to release the fix. - If you are having specific issues, I’d encourage you to post them on the Intune forums on TechNet, on the Intune DL here on MyITForum (I think there is one), or to contact Intune support (it’s free). J From: [email protected] [mailto:[email protected]] On Behalf Of Freddy Grande Sent: Thursday, April 7, 2016 6:58 PM To: [email protected] Subject: [mssms] Hybrid Intune w/ ConfigMgr 1602 Hi all, Does anyone use Hybrid Intune with ConfigMgr? We’re moving to this and I haven’t been able to find much helpful info online – just general stuff and a lot of the time it refers to just the Intune cloud console. It almost seems like no one is using hybrid Intune ☹ Confusing things so far are: where am I supposed to create settings? Configuration Items/Baselines or Compliance Policies? There’s also Certificate, Email, VPN and Wi-Fi Profiles sections but these seem to overlap with the aforementioned baselines/policies… There seems to be no straightforward support for WPA Wi-Fi networks using a Pre-Shared Key. It looks like you can import an XML file into Wi-Fi Profiles but this is only compatible with Windows devices (mobile or desktop). Apparently I can use the exact same XML for Android devices in a Configuration Item as an OMA-URI, however, this seems to be continuously deployed with constant “Company Portal – Configured networks for your workplace.” notifications on the device seemingly every time it checks, is this supposed to not require remediation…? The Deployment status shows “Remediation failed” for the Wi-Fi settings. Lastly iOS supposedly just needs an Apple .mobileconfig file imported in a Configuration Item but it fails with the error 0X87D1FDEA (Invalid parameter to CIM setting). I have tried using this site to create the config file, http://johnathonb.com/2015/05/intune-ios-psk-mobile-config-generator/, as well as used a Mac Mini with Apple’s own Apple Configurator 2 tool and both yield the same result. There’s a lot of frustration here and I hope that it’s not like this the whole time and becomes more usable once I’ve worked out the kinks. Don’t get me started on the fact that the Company Portal only works on Windows Phone 8.1 at the moment with our test iOS and Android devices failing to ‘enroll’ but still being visible and targetable in the ConfigMgr console (other policies like password and encryption are going through fine(ish). /vent *hoping for tiny chance that someone on this list has experience with this* Regards, Freddy NOTICE: This email is confidential. If you are not the nominated recipient, please immediately delete this email, destroy all copies and inform the sender. Australian Maritime Systems Ltd. (AMS) prohibits the unauthorised copying or distribution of this email. This email does not necessarily express the views of AMS. AMS does not warrant nor guarantee that this email communication is free from errors, virus, interception or interference.
