Co-Management & Off-site Devices

[acjuelich]

Hello,

All of our Clients were and are managed by ConfigMgr for Servicing and Updates.  We had a bunch of devices go off-site due to COVID and they did not have VPN access and could no longer communicate with ConfigMgr.  During this time we have enabled Co-Management with the plan to move as many workloads to Intune as possible but we're obviously in a unique scenario because they can't communicate with ConfigMgr to get Co-Management policies, can't enroll in Intune, and can't communicate with a DC to get any changes in Group Policy.  Are there any options for me in this scenario?  I would like to revert our GPOs and finalize configuration of WUfB but a lot of those devices won't get those policies and I'm afraid when they come back onsite that some of those policies won't apply in the proper order and there would be the possibility that they reach out to un-managed Windows Update and update to a Feature Update we haven't approved yet.

Thanks!

[#2]

@acjuelich Really tough situation with no pretty or easy answers here.  IF there is somebody who has admin rights on the device, then you may have some scripting options.  Without any admin access, you are going to have to get creative.  (We have had customers in other situations actually create a drive up queue outside of their business with an IT Admin and a network cable to get settings updated from the network.)  Please reach out to our FastTrack team who is working to help customers in exactly this situation.  https://fasttrack.microsoft.com