SCCM 1906 Co-management Capabilities Matrix

I am putting together a Co-management deep dive series in the coming weeks (**UPDATE** Here it is). One of the things that has intrigued me is the “Capabilities” value when looking at Co-management workloads.

Co-management Capabilities

The values have changed in 1906 and can be found below

CapabilityWorkload
1No Workloads – Co-management Configured
2Compliance Policies
4Resource access Policies
8Device Configuration
16Windows Updates Policies
32Endpoint Protection
64Client Apps
128Office Click-to-Run Apps

When we start to move workloads to our Pilot Intune Collections or fully to Intune, the capabilities value reflects the combined workloads.

For example, moving client workloads for Compliance Polices and Client Apps will give the client a new co-management capability of 67. But how do we get to this number? 67

Co-Management Configured (1) + Compliance Policies (2) + Client Apps (64) = 67
We have to add 1 to any merged workload (Co-management configured)

But all the capabilities on my clients are odd numbers?

I started looking at this late last night and was examining the XML configs in the CI_DocumentStore table (that is where I found the capability workloads above). The values in the XML all show the workload capability value from the table above +1, so these values look like this

CapabilityWorkload
1No Workloads – Co-management Configured
3Compliance Policies
5Resource access Policies
9Device Configuration
17Windows Updates Policies
33Endpoint Protection
65Client Apps
129Office Click-to-Run Apps

So how can we easily work out the merged values if each workload already has +1 added to each workload? (Does that sentence even make sense – lol)

After a shout out on Twitter, the awesome @CodyMathis has done some work on this already. I am never one to reinvent the wheel! A bitwise operation can be done on the integers to get the new capabilities. This dude has a degree in Math! Check out his original post here https://sccmf12twice.com/2019/01/co-management-multiple-pilot-policies/

So when we look in CoManagementHandler.log and see the values with +1 already added – a bitwise operation could get us to the new merged capability value. Compliance Polices (3) and Client Apps (65) merged would give you 67! Lets see this in PowerShell using the -bor operator

3 -bor 65 = 67!
Co-management capabilities merged on the client

I would encourage you to check out his script. As of today it covers workloads pre-1906 but the Client Apps capability of 65 can be added and the Device Configuration value can be changed to 9. I have a Pull request on the script to reflect the changes in 1906 capabilities (Cody updated the script on 21/8/19 to reflect the changes in SCCM 1906) https://github.com/CodyMathis123/CM-Ramblings/blob/master/Convert-CoManagementWorkload.ps1

Summary

You can use the original values at the beginning of this blog to work out the merged capabilities or use the -bor operator and/or Cody’s script to work out the merged capabilities that have already had the +1 added to each workload.

More great reading on co-management capabilities can be found here:- https://techcommunity.microsoft.com/t5/Intune-Customer-Success/Support-Tip-Configuring-workloads-in-a-co-managed-environment/ba-p/707221

For ease of reference, i have used Cody’s script to help generate all the possible capabilities for easy lookup reference.

CapabilitiesWorkload
1None – Co-management Configured
3Compliance Policies
5Resource access Policies
7Resource access Policies
Compliance Policies
9Device Configuration
11Device Configuration
Compliance Policies
13Device Configuration
Resource access Policies
15Device Configuration
Resource access Policies
Compliance Policies
17Windows Updates Policies
19Windows Updates Policies
Compliance Policies
21Windows Updates Policies
Resource access Policies
23Windows Updates Policies
Resource access Policies
Compliance Policies
25Device Configuration
Windows Updates Policies
27Device Configuration
Windows Updates Policies
Compliance Policies
29Device Configuration
Windows Updates Policies
Resource access Policies
31Device Configuration
Windows Updates Policies
Resource access Policies
Compliance Policies
33Endpoint Protection
35Compliance Policies
Endpoint Protection
37Resource access Policies
Endpoint Protection
39Resource access Policies
Compliance Policies
Endpoint Protection
41Device Configuration
Endpoint Protection
43Device Configuration
Compliance Policies
Endpoint Protection
45Device Configuration
Resource access Policies
Endpoint Protection
47Device Configuration
Resource access Policies
Compliance Policies
Endpoint Protection
49Windows Updates Policies
Endpoint Protection
51Windows Updates Policies
Compliance Policies
Endpoint Protection
53Windows Updates Policies
Resource access Policies
Endpoint Protection
55Windows Updates Policies
Resource access Policies
Compliance Policies
Endpoint Protection
57Device Configuration
Windows Updates Policies
Endpoint Protection
59Device Configuration
Windows Updates Policies
Compliance Policies
Endpoint Protection
61Device Configuration
Windows Updates Policies
Resource access Policies
Endpoint Protection
63Device Configuration
Windows Updates Policies
Resource access Policies
Compliance Policies
Endpoint Protection
65Client Apps
67Client Apps
Compliance Policies
69Client Apps
Resource access Policies
71Client Apps
Resource access Policies
Compliance Policies
73Client Apps
Device Configuration
75Client Apps
Device Configuration
Compliance Policies
77Client Apps
Device Configuration
Resource access Policies
79Client Apps
Device Configuration
Resource access Policies
Compliance Policies
81Client Apps
Windows Updates Policies
83Client Apps
Windows Updates Policies
Compliance Policies
85Client Apps
Windows Updates Policies
Resource access Policies
87Client Apps
Windows Updates Policies
Resource access Policies
Compliance Policies
89Client Apps
Device Configuration
Windows Updates Policies
91Client Apps
Device Configuration
Windows Updates Policies
Compliance Policies
93Client Apps
Device Configuration
Windows Updates Policies
Resource access Policies
95Client Apps
Device Configuration
Windows Updates Policies
Resource access Policies
Compliance Policies
97Client Apps
Endpoint Protection
99Client Apps
Compliance Policies
Endpoint Protection
101Client Apps
Resource access Policies
Endpoint Protection
103Client Apps
Resource access Policies
Compliance Policies
Endpoint Protection
105Client Apps
Device Configuration
Endpoint Protection
107Client Apps
Device Configuration
Compliance Policies
Endpoint Protection
109Client Apps
Device Configuration
Resource access Policies
Endpoint Protection
111Client Apps
Device Configuration
Resource access Policies
Compliance Policies
Endpoint Protection
113Client Apps
Windows Updates Policies
Endpoint Protection
115Client Apps
Windows Updates Policies
Compliance Policies
Endpoint Protection
117Client Apps
Windows Updates Policies
Resource access Policies
Endpoint Protection
119Client Apps
Windows Updates Policies
Resource access Policies
Compliance Policies
Endpoint Protection
121Client Apps
Device Configuration
Windows Updates Policies
Endpoint Protection
123Client Apps
Device Configuration
Windows Updates Policies
Compliance Policies
Endpoint Protection
125Client Apps
Device Configuration
Windows Updates Policies
Resource access Policies
Endpoint Protection
127Client Apps
Device Configuration
Windows Updates Policies
Resource access Policies
Compliance Policies
Endpoint Protection
129Office Click-to-Run Apps
131Office Click-to-Run Apps
Compliance Policies
133Office Click-to-Run Apps
Resource access Policies
135Office Click-to-Run Apps
Resource access Policies
Compliance Policies
137Device Configuration
Office Click-to-Run Apps
139Device Configuration
Office Click-to-Run Apps
Compliance Policies
141Device Configuration
Office Click-to-Run Apps
Resource access Policies
143Device Configuration
Office Click-to-Run Apps
Resource access Policies
Compliance Policies
145Office Click-to-Run Apps
Windows Updates Policies
147Office Click-to-Run Apps
Windows Updates Policies
Compliance Policies
149Office Click-to-Run Apps
Windows Updates Policies
Resource access Policies
151Office Click-to-Run Apps
Windows Updates Policies
Resource access Policies
Compliance Policies
153Device Configuration
Office Click-to-Run Apps
Windows Updates Policies
155Device Configuration
Office Click-to-Run Apps
Windows Updates Policies
Compliance Policies
157Device Configuration
Office Click-to-Run Apps
Windows Updates Policies
Resource access Policies
159Device Configuration
Office Click-to-Run Apps
Windows Updates Policies
Resource access Policies
Compliance Policies
161Office Click-to-Run Apps
Endpoint Protection
163Office Click-to-Run Apps
Compliance Policies
Endpoint Protection
165Office Click-to-Run Apps
Resource access Policies
Endpoint Protection
167Office Click-to-Run Apps
Resource access Policies
Compliance Policies
Endpoint Protection
169Device Configuration
Office Click-to-Run Apps
Endpoint Protection
171Device Configuration
Office Click-to-Run Apps
Compliance Policies
Endpoint Protection
173Device Configuration
Office Click-to-Run Apps
Resource access Policies
Endpoint Protection
175Device Configuration
Office Click-to-Run Apps
Resource access Policies
Compliance Policies
Endpoint Protection
177Office Click-to-Run Apps
Windows Updates Policies
Endpoint Protection
179Office Click-to-Run Apps
Windows Updates Policies
Compliance Policies
Endpoint Protection
181Office Click-to-Run Apps
Windows Updates Policies
Resource access Policies
Endpoint Protection
183Office Click-to-Run Apps
Windows Updates Policies
Resource access Policies
Compliance Policies
Endpoint Protection
185Device Configuration
Office Click-to-Run Apps
Windows Updates Policies
Endpoint Protection
187Device Configuration
Office Click-to-Run Apps
Windows Updates Policies
Compliance Policies
Endpoint Protection
189Device Configuration
Office Click-to-Run Apps
Windows Updates Policies
Resource access Policies
Endpoint Protection
191Device Configuration
Office Click-to-Run Apps
Windows Updates Policies
Resource access Policies
Compliance Policies
Endpoint Protection
193Client Apps
Office Click-to-Run Apps
195Client Apps
Office Click-to-Run Apps
Compliance Policies
197Client Apps
Office Click-to-Run Apps
Resource access Policies
199Client Apps
Office Click-to-Run Apps
Resource access Policies
Compliance Policies
201Client Apps
Device Configuration
Office Click-to-Run Apps
203Client Apps
Device Configuration
Office Click-to-Run Apps
Compliance Policies
205Client Apps
Device Configuration
Office Click-to-Run Apps
Resource access Policies
207Client Apps
Device Configuration
Office Click-to-Run Apps
Resource access Policies
Compliance Policies
209Client Apps
Office Click-to-Run Apps
Windows Updates Policies
211Client Apps
Office Click-to-Run Apps
Windows Updates Policies
Compliance Policies
213Client Apps
Office Click-to-Run Apps
Windows Updates Policies
Resource access Policies
215Client Apps
Office Click-to-Run Apps
Windows Updates Policies
Resource access Policies
Compliance Policies
217Client Apps
Device Configuration
Office Click-to-Run Apps
Windows Updates Policies
219Client Apps
Device Configuration
Office Click-to-Run Apps
Windows Updates Policies
Compliance Policies
221Client Apps
Device Configuration
Office Click-to-Run Apps
Windows Updates Policies
Resource access Policies
223Client Apps
Device Configuration
Office Click-to-Run Apps
Windows Updates Policies
Resource access Policies
Compliance Policies
225Client Apps
Office Click-to-Run Apps
Endpoint Protection
227Client Apps
Office Click-to-Run Apps
Compliance Policies
Endpoint Protection
229Client Apps
Office Click-to-Run Apps
Resource access Policies
Endpoint Protection
231Client Apps
Office Click-to-Run Apps
Resource access Policies
Compliance Policies
Endpoint Protection
233Client Apps
Device Configuration
Office Click-to-Run Apps
Endpoint Protection
235Client Apps
Device Configuration
Office Click-to-Run Apps
Compliance Policies
Endpoint Protection
237Client Apps
Device Configuration
Office Click-to-Run Apps
Resource access Policies
Endpoint Protection
239Client Apps
Device Configuration
Office Click-to-Run Apps
Resource access Policies
Compliance Policies
Endpoint Protection
241Client Apps
Office Click-to-Run Apps
Windows Updates Policies
Endpoint Protection
243Client Apps
Office Click-to-Run Apps
Windows Updates Policies
Compliance Policies
Endpoint Protection
245Client Apps
Office Click-to-Run Apps
Windows Updates Policies
Resource access Policies
Endpoint Protection
247Client Apps
Office Click-to-Run Apps
Windows Updates Policies
Resource access Policies
Compliance Policies
Endpoint Protection
249Client Apps
Device Configuration
Office Click-to-Run Apps
Windows Updates Policies
Endpoint Protection
251Client Apps
Device Configuration
Office Click-to-Run Apps
Windows Updates Policies
Compliance Policies
Endpoint Protection
253Client Apps
Device Configuration
Office Click-to-Run Apps
Windows Updates Policies
Resource access Policies
Endpoint Protection
255Client Apps
Device Configuration
Office Click-to-Run Apps
Windows Updates Policies
Resource access Policies
Compliance Policies
Endpoint Protection
5/5 - (1 vote)

2 thoughts on “SCCM 1906 Co-management Capabilities Matrix”

  1. Pingback: System Center Ağustos 2019 Bülten – Sertaç Topal

  2. Pingback: Co-management Series “Merging the Perimeter” – Part 5: Enabling Co-management

Leave a Comment

Your email address will not be published. Required fields are marked *

Time limit is exhausted. Please reload CAPTCHA.

 

This site uses Akismet to reduce spam. Learn how your comment data is processed.