Intune or Group Policy

[lmrogers]

Morning,

 

I've been thinking about this for the last week and need some opinions. Before my predecessor left he moved all staff laptops over to Intune and Azure AD, leaving all on site PCs hybrid joined and managed through both Group Policy and Intune. I have been finding Intune though quite inflexible with the staff devices and having the devices managed solely through Intune/Azure AD is causing some problems. Staff do not get prompted to change their password when that expires, printers and papercut do not authenticate properly. The laptops cannot authenticate against the wireless so staff have to keep signing into the wireless, which then causes problems when trying to sign into the laptop and not realising the wireless is not connected. Also the deployment is currently done manually on them which is very time consuming.

 

I am now considering moving them back to AD and removing the Intune management until it is possible to test it more and it becomes more of a developed solution. We do run Always on VPN so would still be able to manage then somewhat remotely. What are other people's views?

 

Cheers

[5tu]

Sounds like you'd benefit from the staff laptops being hybrid joined too so then you've got the best of both worlds. (This is what we do).

[lmrogers]

Sounds like you'd benefit from the staff laptops being hybrid joined too so then you've got the best of both worlds. (This is what we do).

 

That is what I'm thinking. Looking at getting SCCM installed as I love that for deployment.

[5tu]

We have co-management setup between SCCM and Intune. It's great as it allows you to decide which workloads you want to use SCCM for and which ones you want Intune to be responsible for.

[lmrogers]

It makes so much sense doing that until Intune is actually ready and flexible to do what we need it to.