SCCM Co-Management with Intune: Workload Migration Guide (2026)

Co-management lets a device be managed by both SCCM and Intune simultaneously, with individual workloads (compliance policies, Windows Update, apps, and so on) switched over to Intune one at a time rather than an all-or-nothing cutover. This staged approach is the realistic path most organisations actually take rather than a big-bang migration.

The seven co-management workloads

Compliance policies, device configuration, endpoint protection, resource access policies, Office Click-to-Run apps, Windows Update policies, and client apps can each be independently switched from SCCM to Intune authority. This granularity is the whole point of co-management. You’re not forced to move everything at once.

A sensible migration order

Compliance policies are the safest and most common starting point. Low risk, immediately useful for conditional access, and easy to validate. Windows Update policies (moving to Windows Update for Business via Intune) is a good second step. Endpoint protection and device configuration follow once you’re comfortable with the tooling. Leave client apps and Office Click-to-Run migration until later, since app deployment reliability is usually the thing organisations are most protective of during a transition.

Step 1: Enable co-management

In the SCCM console, under Administration > Cloud Services > Co-management, run the configuration wizard, which handles the Intune auto-enrollment and initial workload assignment. Existing SCCM clients need to check in and receive this policy before co-management activates on them.

Step 2: Pilot each workload switch on a small group

Use a pilot collection of a small number of test devices for each workload switch before applying it broadly. Watch specifically for policy conflicts where an SCCM-configured setting and an Intune-configured setting disagree. Co-management doesn’t automatically reconcile these, and whichever workload currently has authority wins.

For official guidance, see Microsoft’s Intune documentation.