Event banner
AMA: Managing Windows with Microsoft Endpoint Manager
Event Ended
Thursday, Nov 18, 2021, 08:00 AM PSTEvent details
Join us for Tech Community Live: Microsoft Endpoint Manager edition!
From Windows Autopilot to Zero Trust, this live Ask Microsoft Anything (AMA) event is your chance to bring your Windows managem...
Heather_Poulsen
Updated Dec 27, 2024
Dawn M Wertz
Nov 18, 2021Brass Contributor
We are just starting co-management. When the primary user changes in CM, does that information get uploaded to Intune? We have computers where when someone leaves, they are assigned to another person and where the manager will request the new computer for a new user, and OSD assigns that person as the primary user. How do we ensure the primary user is correct?
- Olaf_ThyssenNov 18, 2021Brass Contributor
SCCM measures the primary user by used minutes over a timeframe in days
When the computer has been cloud-attached via the SCCM client, the first user with an Intune license enrolls this device to his/her name as primary user in Intune and it will stay.
If IT guys "preparing" machine for new users with their own user and they have Intune license they always set themselves as primary user and it needs to be changed in Intune console to final user manually afterwards. Such preparing must be done by users without Intune license.
Setting IT guys as Device enrollment managers isn't often an option as then they can't enroll their own device - Dawn M WertzNov 18, 2021Brass ContributorDanny, with the co-management on the compliance settings, we are using conditional access. Since the email is sent to the primary user, we wanted to ensure it is going to the correct user. What happens is that a manager requests a computer and the primary user is set to that manager. The actual user's account is not created until the day they start. CM then changes the primary user based on the automatic primary user assignment. If the primary user is incorrect in MEM, the wrong person receives the email.
- Jason_SandysNov 18, 2021
Microsoft
And, I forgot to add that you should file this as feedback in the ConfigMgr console so it can be considered and potentially prioritized to be addressed. Be sure to add the technical and business scenario(s) and impact. - Jason_SandysNov 18, 2021
Microsoft
No. There is no direct connection between primary users in ConfigMgr and the primary user configured in Intune. For now, this is a manual process although you could certainly automate this using a combination of the ConfigMgr API and the Intune Graph API.