Sharing a recap of all the questions covered during this show, along with associated timestamps:
 

Question – What’s currently top of mind for this team? – answered at 2:33.

Question – We have hundreds of GPOs built up over years. Where do we even start figuring out what to migrate, what to retire, and what to redesign for cloud-native? – answered at 9:33.

Question – With admin templates being deprecated, should we be using the Settings Catalog for everything now? When does it still make sense to use templates or custom ADMX? – answered at 15:40.

Question – Cloud-native tools handle Windows updates great, but third-party application patching can still be a hurdle. How are you leveraging cloud policies to keep non-Microsoft software updated without relying on local packaging servers? – answered at 21:24.

Question – How to manage those registry setting which are set in group policy does all these settings are available in setting catalogue? – answered at 23:31.

Question – What about security group targeting or WMI filters? How do we replicate that level of granularity in Intune? – answered at 27:34.

Question – Once we've deployed cloud-native policies, how do we get the same visibility we had with gpresult and RSOP to confirm the right settings are actually landing on devices? – answered at 30:33.

Question – Will it be possible in the future to allow multiple MDMs? We would love to centrally manage our MDE configs from Intune, but we can't on MacOS because compliance is established by JAMF. As soon as we try to enforce MDE configs on MacOS, Intune takes over establishing compliance for the device incorrectly, breaking other processes we have/need. We had a case with Microsoft that determined Intune doesn't support multiple MDMs. – answered at 33:07.

Question – How long should we realistically expect to run hybrid (GPO + Intune), and what does ‘done’ actually look like? – answered at 37:15.

Question – What are the common mistakes during hybrid to cloud-native migration? – answered at 44:02.

Question – Without OUs, how can Intune policies be applied to different geographic locations? Can devices be tagged with the country or office they're in? – answered at 48:32.

Question – What's the most effective way to reduce configuration drift across hybrid environments? – answered at 52:14.

Question – Is there a checklist to analyze GPOs in AD/SCCM to help do the "same" in Intune? Templates, baselines, a GitHub ready-to-deploy repository? – answered at 55:08.

That's a wrap for today. Want to stay engaged and informed?  https://aka.ms/JoinIntuneCommunity

how is the best method to group devices based on software needs.  Something that was easily done in SCCM

Is there (or will there be) a published list of URLs for Intune and Windows Autopilot that are not allowed to be SSL inspected? I find different bits of guidance for some URLs that just happen to be explicitly called out in some notes here and there in various Learn articles, but would be great if there was a consolidated "do not perform SSL inspection on these URLs" list. We regularly encounter issues with this on-prem, and it can be difficult to ID what URLs can and can not be inspected.

Hi team,

Do you see a future roadmap for replacing the current mobile access approach to on-prem / enterprise applications through Microsoft Tunnel (Per-App VPN) with a solution that is simpler to operate and maintain?

For example, platforms like VMware Workspace ONE / AirWatch provide a more streamlined UEM experience around app access, tunneling, and policy management.

Is Microsoft planning improvements in this area to reduce operational complexity for admins managing large-scale mobile environments?

During Group Policy to Intune migration, how should we think about policy precedence and configuration profile design?

In Group Policy, we had link order, inheritance, enforcement, and policy priority, so if the same setting existed in multiple GPOs there was a predictable winning policy. In Intune, when the same setting is configured in multiple profiles, it appears to report a conflict instead of applying a clear priority model.

What is Microsoft’s recommended approach for structuring Intune configuration profiles to avoid these conflicts? For example, should we organize profiles by security baseline, setting category, device role, user group, or application/workload? And if different teams need to manage overlapping settings, what design pattern is recommended for ownership, exceptions, and conflict prevention?

Without OUs how can Intune policies be applied to different geographic locations? Can devices be tagged with the country or office they're in?

How do you replicate group policy preferences in Intune?

Will it be possible in the future to allow multiple MDMs? We would love to centrally manage our MDE configs from Intune, but we can't on MacOS because compliance is established by JAMF. Soon as we try to enforce MDE configs on MacOS, Intune takes over establishing compliance for the device incorrectly, breaking other processes we have/need  Had a case with Microsoft that determined Intune doesn't support multiple MDMs. :( 

Hello,

SCCM out Intune IN...is there any checklist to analyze GPOs in AD/SCCM to help do the "same" in intune. Templates, bases lines github readay to deploy repository ?