Colorado State University

For many months now CSU has been working on creating the framework for our next iteration of endpoint management. Endpoint management is the practice of monitoring, securing, and controlling all devices connected to a network, from a single point of access. Our current endpoint management system is an on-premises Microsoft Endpoint Configuration Manager (MECM) and really only managed domain bound Windows computers. The future for all of this moves our endpoint management system off-premises and into the cloud. CSU will be using Microsoft’s Intune as our cloud system with the ability to manage both Windows computers as well as MacOS computers (and other OS even further down the road).

The migration to Intune follows a fairly straightforward path. For any given endpoint (computer) that we manage, the first step is to enroll the device into a co-managed state where management stays pretty much the same but configuration policy and compliance reporting will be shared with MECM and InTune. This allows us to monitor configuration policy on groups of like computers and address any issues with the InTune versions. Most single user and research computers will remain in this co-managed state until there is a reason to rebuilt/reset the device or the machine is retired. All rebuilt/reset and new computers will enter into the final phase of existence which is where it is solely managed by Intune (no more MECM).

We are working diligently to test and make sure all Intune configuration policy matches or is more efficient/convenient that the existing versions. End users may experience slight variations in how certain configuration policies present themselves, but no existing access should be altered.

The only known change will be in how an end user will interact with the endpoint management system in terms of installing deployable applications and updates. With MECM, we use the “Software Center” as described here: https://cnsit.colostate.edu/kb/install-applications-from-software-center/

Devices that have entered into a co-managed or Intune only state will find that the new method uses an app called the “Company Portal” as described here: https://cnsit.colostate.edu/kb/install-applications-from-company-portal/

I hope that this description has helped ease you into understanding the migration we are all about to embark on. Specific timelines for your device migrations will be communicated directly to you as we work through the final stages of the Intune setup. As always, if you have any initial questions please be sure to reach out and we will do our best to answer and address any concerns: https://cnsit.colostate.edu/help