r/Intune • u/Aeroamer • 17h ago
General Question Intune migration incentive
Last year we updated our users to windows 11 from windows 10, managed by sccm. Early next year we will migrate users to intune via autopilot and reset. What suggestions do y’all have for telling users to be even 5% motivated to do this?
5
u/Altruistic-Pack-4336 12h ago
Place mail behind a Conditional access rule that requires a compliant device. Target that rule to groups of users of your liking and Microsoft will force everybody that wants to mail to enroll their device.
This can apply to other company wide used resources as well and not just mail.
Mandatory phased rollout.
1
u/Aeroamer 2h ago
What do you mean by mail
1
u/Altruistic-Pack-4336 2h ago
Exchange environment or other mail servers. That’s a resource used by almost everybody so biggest bang for the buck
2
u/Canihavea666 15h ago
You can convert them to entra joined with a tool from Foernsit. We did about 1000 machines this way 3-4 years ago. You do need the enterprise version to push/createa script for bulk migration. And they'll have to log in a couple of times at first bit it migrated profiles and joined the machines without issue
2
u/spazzo246 13h ago
Hello! I recnetly got assigned to work on a migration project where I have around 200 devices that the customer wants to move to entra join from domain joined (Not in intune yet). What tool is this?
the sales guys mentioned something called profile wiz. is that it?
But enterprise version isnt scope and they are expecting to use the free version. which i dont think is going to end well
1
u/Nick12322 13h ago
I’ve done literally hundreds using the free version. It works great.
2
u/spazzo246 13h ago
im still going to heavilly suggest to wipe devices instead but they want to see the other method too. As ugly as it is need to show them how slow it is vs full wipe and entra join
1
u/sublimeinator 6h ago
Leaving the domain leaves behind GPO management, without Intune, what becomes your management plane when you go entra joined?
2
u/spazzo246 5h ago
Devices are able to be enrolled without wiping. But it's very ugly
I'm also doing autopilot/wiping for half of the devices to make them entra joined and managed by Intune. For some reason customer wanted to entra join and enroll without wiping for half of their devices
1
u/roach8101 15h ago
You can also use Quest or Power Sync Pro for this.
1
0
u/Aeroamer 15h ago
Does it do the full migration if not doing co-management?
1
u/roach8101 15h ago
It migrates the device from hybrid to Entra join. You removed the Configuration Manager client to make it full cloud.
2
u/pjmarcum 15h ago
You don’t need to reset devices to go from SCCM to Intune. You can just remove the SCCM client. I suspect what you really mean is you want to migrate them from HDJ to AADJ. And no, there’s nothing you can tell users to make them want to do that. Probably the only thing an end user would even notice is that it’s less of a PIA when they change their password when not connected to the internal network.
Just remove the SCCM client and move to AADJ by attrition.
2
2
u/harsh_probation 17h ago
Bribe them with the promise of a fresh machine that actually boots in under 2 minutes. The autopilot reset means they get that new laptop smell without losing their files, sell it as a free performance upgrade rather than an IT chore
2
u/Ragepower529 16h ago edited 15h ago
You do realize that you can just remove SCCM and then enter join all those devices and then convert all those joined devices to auto pilot devices
1
u/Aeroamer 16h ago
I’ve heard it’s not that simple
2
u/Ragepower529 15h ago
Biggest important detail is are you guys joined to your domain because it’s not listed? It’s just it’s managed by SCCM.
1
u/Aeroamer 15h ago
What?
1
u/spazzo246 13h ago
If you look at intune device list. what does the "Managed By" currently say
To get sccm device to "managed by intune" you can simply delete the SCCM Agent off the device and restart.
Or change the workload sliders in SCCM to Fully intune
1
1
u/skiddily_biddily 16h ago
You can do code management so that they are managed by an SCCM. You can hybrid join them so they are entra ID joined and AD joined. You don’t have to reset and go through autopilot.
1
u/Aeroamer 16h ago
System admin doesn’t want to he thinks it’s too messy
2
u/Tony_Chutch 16h ago edited 16h ago
He’s not technically wrong. Either way is messy. Hybrid devices blow and cannot wait until all our windows devices in our fleet are cloud devices.
1
1
u/skiddily_biddily 13h ago
It is a bit messy, but resetting every single device to enroll through autopilot is going to be so much messier
1
1
u/bakonpie 17h ago
make up some bullshit about how you are on a zero trust journey as an organization and cloud native endpoints are part of that journey.
1
u/Aeroamer 17h ago
Even I don’t get that one
4
u/There_Bike 16h ago
Exactly the point. If you don’t, they won’t.
1
u/Aeroamer 16h ago
Doesn’t make sense
3
u/SysAdminDennyBob 16h ago
He is saying that you need to market this with buzzwords so that everyone feels like this is the proper path.
"By moving to Entra we can fully realize our crypto synergies that bring us full circle. We'll be eating our own dogfood while strategizing across collaboration initiatives which goes full force into making this a win for everyone"
"Now, click that submit button and begin the journey!"
2
1
1
19
u/Tessian 17h ago
Why are you making users do this? You know you can enroll pcs on intune without autopilot and resetting?