A conditional access extension was released today for hybrid: http://blogs.technet.com/b/configmgrteam/archive/2015/03/12/conditional-access-for-exchange-online.aspx
I also did a blog post on this topic recently -- it's not definitive, but it should help: http://blog.configmgrftw.com/comparing-the-two-modes-of-microsoft-intune/.<http://blog.configmgrftw.com/comparing-the-two-modes-of-microsoft-intune/> J [http://blog.configmgrftw.com/wp-content/uploads/2015/02/cloud-computer2.jpg]<http://blog.configmgrftw.com/comparing-the-two-modes-of-microsoft-intune/> Comparing the Two Modes of Microsoft Intune - ConfigMgrFTW! A comparison of the two modes of Microsoft's Intune device management service: hybrid and stand-alone. Read more...<http://blog.configmgrftw.com/comparing-the-two-modes-of-microsoft-intune/> New Extension Now Available: Conditional Access for Exchange Online - System Center Configuration Manager Team Blog - Site Home - TechNet Blogs Official Blog of the Microsoft System Center Configuration Manager Product Group. Read more...<http://blogs.technet.com/b/configmgrteam/archive/2015/03/12/conditional-access-for-exchange-online.aspx> ________________________________ From: [email protected] <[email protected]> on behalf of Jason Lang <[email protected]> Sent: Thursday, March 12, 2015 12:04 PM To: [email protected] Subject: RE: [mssms] ConfigMgr Intune Integration It can be changed if you open a ticket with MS. You have to remove all devices, and it wipes a lot of stuff and takes like 7 days to process. But can be done via an intune support ticket. Generally speaking its pretty destructive, so better to not do it unless you have to! Sent from my Android phone using TouchDown (www.nitrodesk.com) -----Original Message----- From: Vicki Williams [[email protected]] Received: Thursday, 12 Mar 2015, 1:00PM To: [email protected] [[email protected]] Subject: RE: [mssms] ConfigMgr Intune Integration We have had similar discussions, its documented in TechNet<https://technet.microsoft.com/en-us/library/jj884158.aspx?f=255&MSPPError=-2147217396>: Once you select Configuration Manager as your management authority, you cannot change the management authority to Microsoft Intune in the future. Nor can you go from Intune to SCCM. I don’t remember where I read that, but I know I saw it. In short, once you select a management authority there’s no changing it. Vicki From: [email protected] [mailto:[email protected]] On Behalf Of Dwayne Allen Sent: Thursday, March 12, 2015 12:05 PM To: [email protected] Subject: Re: [mssms] ConfigMgr Intune Integration I have heard from Microsoft Engineers about not being able to revert Intune to a standalone system if you ever integrate it with SCCM, but I don't know if it is documented anywhere. ----- Dwayne Allen [email protected]<mailto:[email protected]> (479) 310-0027 On Thu, Mar 12, 2015 at 11:00 AM, Beardsley, James <[email protected]<mailto:[email protected]>> wrote: We’re about to implement Intune for MDM and we’re at the point where we’re trying to decide if we want to keep it and CM separate entities or if we want to integrate Intune into CM. My first thought is, of course we should integrate them but in looking at this chart on TechNet<https://technet.microsoft.com/en-us/library/dn646980.aspx>, it seems that we’d lose some pretty important features by doing so. Am I understanding it right that if we add our Intune subscription to CM, we’d lose the ability to: 1. Reset someone’s passcode 2. Remote Lock 3. We would be unable to configure Conditional Access (which sounds like DCM for mobile devices) Also, one of my colleagues mentioned that we’d lose the ability to use multi-factor authentication on the laptops if we did not integrate but I haven’t seen that documented. Is all of this true and if so, is Microsoft planning to add those features down the road? If they’ll be added in the next major update within 6 months to a year, then we may just keep them separate until then and then add the subscription at that point. One final question, as I was starting to test adding our subscription to CM, I could’ve sworn I got a warning that once it was added, we can’t remove the subscription later on and revert back to standalone Intune. However, I no longer see that warning. Is that true or did I dream that? Thanks for your input. James Beardsley | Firm Technology Group Dixon Hughes Goodman LLP [cid:8644FC49-D5C9-45AE-B387-04FAFC0CC7A5]<http://www.dhgllp.com/> ________________________________ Confidentiality Notice: This e-mail is intended only for the addressee named above. It contains information that is privileged, confidential or otherwise protected from use and disclosure. If you are not the intended recipient, you are hereby notified that any review, disclosure, copying, or dissemination of this transmission, or taking of any action in reliance on its contents, or other use is strictly prohibited. If you have received this transmission in error, please reply to the sender listed above immediately and permanently delete this message from your inbox. Thank you for your cooperation.
