Managing computers and mobile devices is an important job for every IT department. Microsoft provides three main ways to manage devices: Configuration Manager, Microsoft Intune, and Co-management. Each solution has different features and is useful in different situations. Understanding these tools helps organizations choose the best way to manage their devices.

Screenshot_4

Configuration Manager

Configuration Manager is a device management tool that works mainly in an on-premises environment. It uses a client installed on Windows devices to communicate with a local server.

Configuration Manager helps IT administrators install software, deploy operating systems, manage updates, collect hardware and software information, and create detailed reports. It is a good choice for organizations that need full control over their Windows devices.

Advantages

Disadvantages

Microsoft Intune

Microsoft Intune is a cloud-based device management service. It manages devices through the internet using secure HTTPS connections.

Intune supports Windows, macOS, Android, and iOS/iPadOS devices. It allows administrators to deploy applications, apply security policies, manage updates, and protect company data from anywhere.

It is a good solution for companies with remote employees and cloud-based environments.

Advantages

Disadvantages

Co-management

Co-management allows Configuration Manager and Intune to manage the same Windows 10 and Windows 11 devices together.

With co-management, organizations do not have to move everything to the cloud at once. They can move one workload at a time from Configuration Manager to Intune. This makes the migration process easier and safer.

For example, compliance policies and Windows updates can be managed by Intune, while software deployment remains in Configuration Manager.

Advantages

Disadvantages

Comparison

FeatureConfiguration ManagerMicrosoft IntuneCo-management
Device ManagementOn-premisesCloud-basedUses both tools
Supported DevicesMainly WindowsWindows, macOS, Android, iOS/iPadOSWindows devices
Policy ManagementGroup Policy and packagesConfiguration profiles and compliance policiesManaged by either tool
Software DeploymentMSI, scripts, and packagesWin32, MSIX, and Store appsBoth methods can be used
InventoryDetailed inventoryBasic cloud inventoryDepends on the active workload

When to Use Each Solution

Use Configuration Manager when

Use Microsoft Intune when

Use Co-management when

How Co-management Works

First, a Windows device is enrolled in Microsoft Intune while it is still managed by Configuration Manager. Then, the administrator selects which workloads should be managed by Intune.

For example:

Later, more workloads can be moved to Intune until all device management is done in the cloud.

Example

Contoso has 10,000 Windows laptops managed by Configuration Manager. The company wants to start using Intune for compliance policies and Windows updates.

The IT team enables co-management. They move compliance policies and updates to Intune but continue using Configuration Manager for software deployment. After several months, they move more workloads to Intune until all devices are fully managed in the cloud.

Conclusion

Configuration Manager, Microsoft Intune, and Co-management are all useful device management solutions.

Configuration Manager is best for organizations that need strong on-premises management. Microsoft Intune is best for cloud-based and remote work environments. Co-management is the best choice for organizations that want to move from Configuration Manager to Intune step by step.

Choosing the right solution depends on your organization's needs, existing infrastructure, and future plans.