When setting up co-management with Intune and SCCM, it is necessary to understand what capabilities are.
What are Capabilities?
Capabilities are numerical values that are linked to co-management and more precisely to workloads. Simply, a value will be given according to the distribution of the workload management between SCCM and Intune. This value is between 1 and 255. At 1, all workloads are managed by SCCM. At 255, Intune takes care of everything. If your machine has one of these 2 values, we can’t really talk about co-management.
How to find the Capability value ?
You can find this value in 5 different places :
- In the registry with HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CCM
- By SQL with the v_ClientCoManagementState view
- Via the CoManagementHandler.log
- With WMI
- Via the manager configuration properties panel
How are capabilities calculated?
Each workload has an associated value:
Capability | Workload |
1 | All Workloads with SCCM |
2 | Compliance Policies |
4 | Resource access Policies |
8 | Device Configuration |
16 | Windows Updates Policies |
32 | Endpoint Protection |
64 | Client Apps |
128 | Office Click-to-Run Apps |
The capability value is merged and recalculated depending on whether the workload is managed by SCCM or Intune.
For example, let’s move the workloads “Client Apps” (64), “Windows Update Policies” (16) and “Compliance Policies” (2). We will then have a co-management capability of 83. Here’s how to achieve this result:
Configured co-management (1) + Compliance Policies (2) + Windows Update Policies (16) + Client Apps (64) = 83
When the client receives new capabilities, a “merge” is performed on the workload indicators to obtain a new value. The SCCM client and Intune agent now know which workloads they can/can’t apply. An immediate Intune synchronization is performed to apply all applicable Intune policies.
Mapping Table
Capabilities | Workload |
---|---|
1 | Co-management Configured |
3 | Compliance Policies |
5 | Resource access Policies |
7 | Resource access Policies |
Compliance Policies | |
9 | Device Configuration |
11 | Device Configuration |
Compliance Policies | |
13 | Device Configuration |
Resource access Policies | |
15 | Device Configuration |
Resource access Policies | |
Compliance Policies | |
17 | Windows Updates Policies |
19 | Windows Updates Policies |
Compliance Policies | |
21 | Windows Updates Policies |
Resource access Policies | |
23 | Windows Updates Policies |
Resource access Policies | |
Compliance Policies | |
25 | Device Configuration |
Windows Updates Policies | |
27 | Device Configuration |
Windows Updates Policies | |
Compliance Policies | |
29 | Device Configuration |
Windows Updates Policies | |
Resource access Policies | |
31 | Device Configuration |
Windows Updates Policies | |
Resource access Policies | |
Compliance Policies | |
33 | Endpoint Protection |
35 | Compliance Policies |
Endpoint Protection | |
37 | Resource access Policies |
Endpoint Protection | |
39 | Resource access Policies |
Compliance Policies | |
Endpoint Protection | |
41 | Device Configuration |
Endpoint Protection | |
43 | Device Configuration |
Compliance Policies | |
Endpoint Protection | |
45 | Device Configuration |
Resource access Policies | |
Endpoint Protection | |
47 | Device Configuration |
Resource access Policies | |
Compliance Policies | |
Endpoint Protection | |
49 | Windows Updates Policies |
Endpoint Protection | |
51 | Windows Updates Policies |
Compliance Policies | |
Endpoint Protection | |
53 | Windows Updates Policies |
Resource access Policies | |
Endpoint Protection | |
55 | Windows Updates Policies |
Resource access Policies | |
Compliance Policies | |
Endpoint Protection | |
57 | Device Configuration |
Windows Updates Policies | |
Endpoint Protection | |
59 | Device Configuration |
Windows Updates Policies | |
Compliance Policies | |
Endpoint Protection | |
61 | Device Configuration |
Windows Updates Policies | |
Resource access Policies | |
Endpoint Protection | |
63 | Device Configuration |
Windows Updates Policies | |
Resource access Policies | |
Compliance Policies | |
Endpoint Protection | |
65 | Client Apps |
67 | Client Apps |
Compliance Policies | |
69 | Client Apps |
Resource access Policies | |
71 | Client Apps |
Resource access Policies | |
Compliance Policies | |
73 | Client Apps |
Device Configuration | |
75 | Client Apps |
Device Configuration | |
Compliance Policies | |
77 | Client Apps |
Device Configuration | |
Resource access Policies | |
79 | Client Apps |
Device Configuration | |
Resource access Policies | |
Compliance Policies | |
81 | Client Apps |
Windows Updates Policies | |
83 | Client Apps |
Windows Updates Policies | |
Compliance Policies | |
85 | Client Apps |
Windows Updates Policies | |
Resource access Policies | |
87 | Client Apps |
Windows Updates Policies | |
Resource access Policies | |
Compliance Policies | |
89 | Client Apps |
Device Configuration | |
Windows Updates Policies | |
91 | Client Apps |
Device Configuration | |
Windows Updates Policies | |
Compliance Policies | |
93 | Client Apps |
Device Configuration | |
Windows Updates Policies | |
Resource access Policies | |
95 | Client Apps |
Device Configuration | |
Windows Updates Policies | |
Resource access Policies | |
Compliance Policies | |
97 | Client Apps |
Endpoint Protection | |
99 | Client Apps |
Compliance Policies | |
Endpoint Protection | |
101 | Client Apps |
Resource access Policies | |
Endpoint Protection | |
103 | Client Apps |
Resource access Policies | |
Compliance Policies | |
Endpoint Protection | |
105 | Client Apps |
Device Configuration | |
Endpoint Protection | |
107 | Client Apps |
Device Configuration | |
Compliance Policies | |
Endpoint Protection | |
109 | Client Apps |
Device Configuration | |
Resource access Policies | |
Endpoint Protection | |
111 | Client Apps |
Device Configuration | |
Resource access Policies | |
Compliance Policies | |
Endpoint Protection | |
113 | Client Apps |
Windows Updates Policies | |
Endpoint Protection | |
115 | Client Apps |
Windows Updates Policies | |
Compliance Policies | |
Endpoint Protection | |
117 | Client Apps |
Windows Updates Policies | |
Resource access Policies | |
Endpoint Protection | |
119 | Client Apps |
Windows Updates Policies | |
Resource access Policies | |
Compliance Policies | |
Endpoint Protection | |
121 | Client Apps |
Device Configuration | |
Windows Updates Policies | |
Endpoint Protection | |
123 | Client Apps |
Device Configuration | |
Windows Updates Policies | |
Compliance Policies | |
Endpoint Protection | |
125 | Client Apps |
Device Configuration | |
Windows Updates Policies | |
Resource access Policies | |
Endpoint Protection | |
127 | Client Apps |
Device Configuration | |
Windows Updates Policies | |
Resource access Policies | |
Compliance Policies | |
Endpoint Protection | |
129 | Office Click-to-Run Apps |
131 | Office Click-to-Run Apps |
Compliance Policies | |
133 | Office Click-to-Run Apps |
Resource access Policies | |
135 | Office Click-to-Run Apps |
Resource access Policies | |
Compliance Policies | |
137 | Device Configuration |
Office Click-to-Run Apps | |
139 | Device Configuration |
Office Click-to-Run Apps | |
Compliance Policies | |
141 | Device Configuration |
Office Click-to-Run Apps | |
Resource access Policies | |
143 | Device Configuration |
Office Click-to-Run Apps | |
Resource access Policies | |
Compliance Policies | |
145 | Office Click-to-Run Apps |
Windows Updates Policies | |
147 | Office Click-to-Run Apps |
Windows Updates Policies | |
Compliance Policies | |
149 | Office Click-to-Run Apps |
Windows Updates Policies | |
Resource access Policies | |
151 | Office Click-to-Run Apps |
Windows Updates Policies | |
Resource access Policies | |
Compliance Policies | |
153 | Device Configuration |
Office Click-to-Run Apps | |
Windows Updates Policies | |
155 | Device Configuration |
Office Click-to-Run Apps | |
Windows Updates Policies | |
Compliance Policies | |
157 | Device Configuration |
Office Click-to-Run Apps | |
Windows Updates Policies | |
Resource access Policies | |
159 | Device Configuration |
Office Click-to-Run Apps | |
Windows Updates Policies | |
Resource access Policies | |
Compliance Policies | |
161 | Office Click-to-Run Apps |
Endpoint Protection | |
163 | Office Click-to-Run Apps |
Compliance Policies | |
Endpoint Protection | |
165 | Office Click-to-Run Apps |
Resource access Policies | |
Endpoint Protection | |
167 | Office Click-to-Run Apps |
Resource access Policies | |
Compliance Policies | |
Endpoint Protection | |
169 | Device Configuration |
Office Click-to-Run Apps | |
Endpoint Protection | |
171 | Device Configuration |
Office Click-to-Run Apps | |
Compliance Policies | |
Endpoint Protection | |
173 | Device Configuration |
Office Click-to-Run Apps | |
Resource access Policies | |
Endpoint Protection | |
175 | Device Configuration |
Office Click-to-Run Apps | |
Resource access Policies | |
Compliance Policies | |
Endpoint Protection | |
177 | Office Click-to-Run Apps |
Windows Updates Policies | |
Endpoint Protection | |
179 | Office Click-to-Run Apps |
Windows Updates Policies | |
Compliance Policies | |
Endpoint Protection | |
181 | Office Click-to-Run Apps |
Windows Updates Policies | |
Resource access Policies | |
Endpoint Protection | |
183 | Office Click-to-Run Apps |
Windows Updates Policies | |
Resource access Policies | |
Compliance Policies | |
Endpoint Protection | |
185 | Device Configuration |
Office Click-to-Run Apps | |
Windows Updates Policies | |
Endpoint Protection | |
187 | Device Configuration |
Office Click-to-Run Apps | |
Windows Updates Policies | |
Compliance Policies | |
Endpoint Protection | |
189 | Device Configuration |
Office Click-to-Run Apps | |
Windows Updates Policies | |
Resource access Policies | |
Endpoint Protection | |
191 | Device Configuration |
Office Click-to-Run Apps | |
Windows Updates Policies | |
Resource access Policies | |
Compliance Policies | |
Endpoint Protection | |
193 | Client Apps |
Office Click-to-Run Apps | |
195 | Client Apps |
Office Click-to-Run Apps | |
Compliance Policies | |
197 | Client Apps |
Office Click-to-Run Apps | |
Resource access Policies | |
199 | Client Apps |
Office Click-to-Run Apps | |
Resource access Policies | |
Compliance Policies | |
201 | Client Apps |
Device Configuration | |
Office Click-to-Run Apps | |
203 | Client Apps |
Device Configuration | |
Office Click-to-Run Apps | |
Compliance Policies | |
205 | Client Apps |
Device Configuration | |
Office Click-to-Run Apps | |
Resource access Policies | |
207 | Client Apps |
Device Configuration | |
Office Click-to-Run Apps | |
Resource access Policies | |
Compliance Policies | |
209 | Client Apps |
Office Click-to-Run Apps | |
Windows Updates Policies | |
211 | Client Apps |
Office Click-to-Run Apps | |
Windows Updates Policies | |
Compliance Policies | |
213 | Client Apps |
Office Click-to-Run Apps | |
Windows Updates Policies | |
Resource access Policies | |
215 | Client Apps |
Office Click-to-Run Apps | |
Windows Updates Policies | |
Resource access Policies | |
Compliance Policies | |
217 | Client Apps |
Device Configuration | |
Office Click-to-Run Apps | |
Windows Updates Policies | |
219 | Client Apps |
Device Configuration | |
Office Click-to-Run Apps | |
Windows Updates Policies | |
Compliance Policies | |
221 | Client Apps |
Device Configuration | |
Office Click-to-Run Apps | |
Windows Updates Policies | |
Resource access Policies | |
223 | Client Apps |
Device Configuration | |
Office Click-to-Run Apps | |
Windows Updates Policies | |
Resource access Policies | |
Compliance Policies | |
225 | Client Apps |
Office Click-to-Run Apps | |
Endpoint Protection | |
227 | Client Apps |
Office Click-to-Run Apps | |
Compliance Policies | |
Endpoint Protection | |
229 | Client Apps |
Office Click-to-Run Apps | |
Resource access Policies | |
Endpoint Protection | |
231 | Client Apps |
Office Click-to-Run Apps | |
Resource access Policies | |
Compliance Policies | |
Endpoint Protection | |
233 | Client Apps |
Device Configuration | |
Office Click-to-Run Apps | |
Endpoint Protection | |
235 | Client Apps |
Device Configuration | |
Office Click-to-Run Apps | |
Compliance Policies | |
Endpoint Protection | |
237 | Client Apps |
Device Configuration | |
Office Click-to-Run Apps | |
Resource access Policies | |
Endpoint Protection | |
239 | Client Apps |
Device Configuration | |
Office Click-to-Run Apps | |
Resource access Policies | |
Compliance Policies | |
Endpoint Protection | |
241 | Client Apps |
Office Click-to-Run Apps | |
Windows Updates Policies | |
Endpoint Protection | |
243 | Client Apps |
Office Click-to-Run Apps | |
Windows Updates Policies | |
Compliance Policies | |
Endpoint Protection | |
245 | Client Apps |
Office Click-to-Run Apps | |
Windows Updates Policies | |
Resource access Policies | |
Endpoint Protection | |
247 | Client Apps |
Office Click-to-Run Apps | |
Windows Updates Policies | |
Resource access Policies | |
Compliance Policies | |
Endpoint Protection | |
249 | Client Apps |
Device Configuration | |
Office Click-to-Run Apps | |
Windows Updates Policies | |
Endpoint Protection | |
251 | Client Apps |
Device Configuration | |
Office Click-to-Run Apps | |
Windows Updates Policies | |
Compliance Policies | |
Endpoint Protection | |
253 | Client Apps |
Device Configuration | |
Office Click-to-Run Apps | |
Windows Updates Policies | |
Resource access Policies | |
Endpoint Protection | |
255 | Client Apps |
Device Configuration | |
Office Click-to-Run Apps | |
Windows Updates Policies | |
Resource access Policies | |
Compliance Policies | |
Endpoint Protection |
Pingback: Create a collection for co-managed computers