Intune - Some basic approach questions

[Planehazza]

Hi all,

 

We're moving to Intune after I've pushed for it for years. We currently 'manage' (Ha!) roaming laptops by domain joining them and relying on users signing in on site then using cached profiles externally. Yep, I know, let's skip past this...  

 

We have a few hundred devices in SCCM, v2309 (will be updating to latest in coming weeks) so I'm thinking co management is probably the best solution. We have Entra ID Sync (on prem agent) in place, and we're a Google site so I'll need some M365 tweaks and Intune configs to prevent access to M365 resources. We literally need to use M365/Entra for sign in and device enrolment, and may look to juts federate against Google in time also (I'd ditch Google in a second if I had the option/power).

 

So, I'm thinking remove laptops from domain join and have Intune handle restritions and app deployment, but I'm a little fuzzy on the best way to tackle this.  Should I look to build to handle existing devices in SCCM, or just purge and redeploy them all? We'll not be looking to use autopilot any time soon, so will be relying on (likely a cut down, tweaked) task sequence to image devices and enrol to Intune.

 

Would love any advice and tips please, and apologies for the vagueness... going into this not blind, but perhaps naive. I'm teaching myself as I go.

 

Thanks!