Set up hybrid MDM with Configuration Manager and Microsoft Intune

Applies to: System Center Configuration Manager (Current Branch)

Before you can manage iOS, Windows, and Android devices with Configuration Manager, they must be enrolled with Intune. Use the following steps to set up hybrid device enrollment with Configuration Manager using Intune. By completing the following steps, you will enable "bring your own device" (BYOD) enrollment for your users. These steps are also prerequisites for enrolling BYOD devices and enrolling company-owned devices.


As of August 14, 2018, hybrid mobile device management is a deprecated feature. For more information, see What is hybrid MDM.

Set up steps

Steps Details
Step 1: Create an MDM collection Create a Configuration Manager user collection with users whose devices can be enrolled
Step 2: Domain name requirements Confirm your organization's domain name service (DNS) and Active Directory user management meets MDM requirements
Step 3: Configure Intune Subscription The Intune service lets you manage devices over the Internet.
Step 4: Add terms and conditions Create terms and conditions to which users must agree before they can use the Company Portal app
Step 5: Create service connection point The service connection point sends settings and software deployment information to Configuration Manager and retrieves status and inventory messages from mobile devices.
Step 6: Enable platform enrollment MDM enrollment for iOS and Windows devices require additional steps for communication between the service and devices. Android requires no additional configuration.
Step 7: Set up additional management (Optional) Set up configuration items and conditional access for enrolled devices
Step 8: Verify MDM configuration View log files to confirm that the service connection point was created successfully and user accounts are synchronizing.

Enroll devices

After hybrid setup is complete, devices can be enrolled in Configuration Manager in a number of ways:

See also

Looking for Intune without Configuration Manager?