Co-management Series “Merging the Perimeter” – Part 8: Monitoring Co-management

In the final part of the series we will look at the different ways of monitoring Co-management.

Monitoring Co-Management

In the final part of our co-management series we will look at the different ways to monitor co-management in our environment.

Monitoring Co-Management

Logs Glorious Logs

Co-management has it’s own log file which we have used throughout this series – CoManagementHandler.log located on each client (Default Client Logs Directory is C:\Windows\CCM\Logs) – Use it! Everything from capability changes to MDM enrollment is recorded in this log file.

As we move workloads to Intune, we can still check the relevant SCCM logs too. For example, the Co-ManagementHandler.log could show a workload shift to Intune, for Compliance Policies, evaluated by the capabilities number change.

Capabilities change to 3 indicates a workload shift to Intune for Compliance Policies

We can still check the SCCM Compliance log ComplRelayAgent.log for any impact from a co-management workload move to Intune.

The SCCM client will evaluate if any compliance policies deployed from SCCM should be applied. In the log below we can see that there is a capabilities evaluation. Any compliance policies deployed from SCCM to the client should not be evaluated because the workload has moved to Intune.


ComplRelayAgent.log indicates a capabilities value of 67 (Compliance Policies and Client Apps) means any Compliance Policies deployed by SCCM should not be evaluated

Thanks Peter Vanderwoude for the heads up on this info over at https://www.petervanderwoude.nl/post/co-management-and-the-configmgr-client/

SQL Tables

There is a handy view in the CCM database you can play with if you want to report which clients have different workloads moved to Intune

The SQL View is v_ClientCoManagementState

v_ClientCoManagementState

Client Registry

You can view the Co-management settings and perform Configuration Item evaluations against the client registry.

HKLM\Software\Microsoft\CCM\CoManagementFlags

Client Registry indicating Co-management capabilities

SCCM Co-management Dashboard

Accessible from the Monitoring Work-space, the Co-management dashboard is a great place to head to get an overall picture of your co-management health

Co-management dashboard in the Monitoring Work-space

Intune

Head over to the Devices blade in Intune to view related information for Co-managed devices.
https://devicemanagement.microsoft.com/#blade/Microsoft_Intune_Devices/DeviceEntryBlade/mDMDevices

MDM enrolled devices blade in Intune

WMI

Get-CimInstance -ClassName CCM_System -Namespace ‘root\ccm\invagt’ | Select ComgmtWorkloads

Summary

This concludes the final part of the series for Co-management. I hope you have found the series useful. Please comment or reach out if I can unpack any of these posts in more detail for you to help you better understand the awesome power of SCCM and Intune Co-management.

5/5 - (1 vote)

Leave a Comment

Your email address will not be published. Required fields are marked *

Time limit is exhausted. Please reload CAPTCHA.

 

This site uses Akismet to reduce spam. Learn how your comment data is processed.