Join the Management Community!

If you're not already a member of our community, make sure to visit https://aka.ms/JoinIntuneCommunity to learn more and request to join. This space is a great opportunity to learn from your peers, engage directly with Microsoft product teams, and influence the future of our products!

How do we effectively target and manage applications based on different user personas within the Company Portal without creating assignment complexity or policy conflicts

We use GPO's quite a bit and the GPO analysis tool totally ignores all registry and scripts.  It does not even acknowledge them.  we have over 700 reg settings and no way to find if there are settings catalog replacements or others.  Why is there no tool currently to help or at least say they cannot import in the analysis tool. Are you planning to create one.  I was able to parse the xml export and ran it through AI and got a fair amount or replacements but you don't even have a good source of the complete settings catalog and explained settings.  It is very frustrating.  In addition there is no way to pull out baseline settings as you import other things.  Any plans for migration tools that would help?

Thanks for your answer to my GP question. I wrote some of GPP before it was acquired in 2006 so you're right; it's been 20 years or more so considering moving to a newer platform is probably essential at this point. Quick follow up question: Is MDM still a closed system as in the code to write an MDM extension has not been released yet?

What security configuration actions require Intune instead of Defender (security.microsoft.com)?

What are the most common mistakes any organizations or IT admin make when moving from on-prem device management (SCCM/GPO) to Intune (Hybrid join /cloud only )

How does a device know that it needs to be onboarded to Intune? 

where can i find a decision tree diagram that shows the high level choices to help a client visualize the complex set of devices, operating systems and policy types

my client wants to retire SCCM, they are currently using it only for patching, it's not used for application deployment. co-management is enabled. How can we be confident that it can be turned off?

How do we migrate 10.000 devices from a hybrid environment (AD+Entra joind) to cloud-native. Move them into Autopilot + Wipe? Or are there less 'destructive' paths?