Customer is looking to use SCCM 2012 for internal and external software and application deployment. What are the capabilities between SCCM and Intune? Is there a website that explains what can and cannot be done when the two are i

Hi,

I am not sure that there are one website that describes what can be done but the capabilites you get is Mobile Device Management where Window 8.1 is included in an BYOD scenario.

A good starting point would be here: http://technet.microsoft.com/en-us/library/jj884158.aspx

And then continue on, all setting that can be managed are listed here: http://technet.microsoft.com/en-us/library/dn376523.aspx there are also links to Applicaiton deployment, VPN profiles and much more.

Regards,
Jrgen

Have a look at my guide for Mobile Device Management in SCCM 2012/Intune (it's almost finished). This will give you a lot of information.

http://www.gerryhampsoncm.blogspot.ie/2014/01/mobile-device-management-in-sccm-2012-r2.html

Thanks for the links, I will take a look at them. So, the connection between SCCM and Intune only allows MDM? Customer absolutely wants to deploy software updates and apps to PCs internally and externally. Can this be accomplished with SCCM & Intune as it stands today? For example, if I approve a Windows OS update internally, is that somehow synced to Intune as well?

No, once you integrate SCCM 2012 and Intune all management is carried out in SCCM.

You will not be able to see any devices in Intune (mobile or computers).

Computers will be managed via SCCM only. If you want to manage Internet Based computers you will have to implement SCCM IBCM (Internet Based Client Management). This is not the same as I

Thanks Gerry. That is what I am trying to figure out. The customer has mostly laptops that are remote from the office. They want to manage them mainly with OS updates and software installs/updates. If Intune is really about MDM, then it's a nice to have, but what you are saying is that we will need to setup IBCM to really manage the PCs in the way they want? Correct?

Correct

And the company already has O365 for Exchange, Lync and SharePoint, so they have DirSync and ADFS already. Is there anything we would need to do for Intune?

In that case all of the back end work would be done. They would just need to buy Intune and integrate with SCCM.

so they have DirSync and ADFS already. Is there anything we would need to do for Intune?

No, from a DirSync / ADFS point of view.

Perfect. Thanks guys. Guess we need to start looking at IBCM.

An alternative to IBCM that some customers opt for is DirectAcces as this allows remote management and user access similar to a VPN that is always connected.

Depending on the size of the customer and the depth of management they require for their PCs, they could just use Intune stand alone without connecting to SCCM. If their main concern is laptop management with OS updates and software installs then Intune on its own would be reasonable and of course they would get the MDM capabilities as well.

Limitations of Windows Intune not connected to SCCM:

-No more than 7k users per tenant

-No "advanced" PC management features, like OS Distribution

Advantages are that since DirSync and ADFS are already set up, they can get up and running quickly.

Other disadvantages of stand-alone Intune include rudimentary (at best) MDM -- MDM in Intune connected to ConfigMgr is vastly better -- and honestly, the Windows management is decent but rather barebones.