Device Migrations
Overview
This documentation (in conjunction with linked resources) provides a comprehensive guide for standardizing the onboarding and management of Windows workstations within the Technology Services enterprise endpoint management environment using Active Directory, MECM (Microsoft Endpoint Configuration Manager), and Intune.
The process enables delegated administration, unit-defined scope tagging, and consistent device lifecycle management. It details the workflow for collecting required unit information, implementing security delegation, and configuring endpoint management tools to ensure compliance, scalability, and ease of use for IT units across the organization.
There are three available onboarding pathways outlined in this document (MECM, Intune, and both), as well as three service level tiers. Specific onboarding guides are available as subpages for all endpoint management personnel to browse.
An onboarding pathway and service level will be decided based on the outcome of the discovery process
Resources
- Endpoint Administration (UEM) – Core members from UEM team
- Infrastructure Systems Operations (ISO) - Core members of MECM platform management team
- Unit Administration (UA) – Core members from Academic & Business Unit IT teams
Table of Contents
Onboarding Pathways
Co-Managed MECM & Intune Onboarding Path
Utilize both MECM and Intune for endpoint management, depending on device roles or unit requirements. This approach provides flexibility, comprehensive coverage, enhanced unit control and support for diverse needs.
Key actions:
o MECM onboarding optional – see below
o Intune onboarding optional – see below
MECM Onboarding Path
Full engagement with MECM for Windows workstation management for ongoing management. This approach provides for centralized unit control, comprehensive on-premises coverage, integrated resource management, consistency and standardization, scalability, advanced features and reduced complexity.
Key actions:
o MECM Agent deployment and verification.
o Configuration of client settings specific to unit requirements.
o App package and optional PMPC and Recast Agent management handled by UEM
o Maintain collaboration between UEM, ISO and Unit IT teams for ongoing support.
Intune Onboarding Path
Begin migrating endpoints into Intune as the primary management platform. This approach provides for modern cloud-based management, simplified administration, scalability and flexibility, user-centric experience and accessibility, integration with M365 ecosystem, preservation of legacy resources, and efficient onboarding and training.
Key actions:
o Intune Agent deployment and verification.
o Establish Administrative Units in Intune and assign RBAC permissions.
o Provide onboarding training and documentation for unit admins.
o Ensure legacy file shares and printing are preserved if needed
o Maintain collaboration between UEM and Unit IT teams for ongoing support.
Ongoing Support and Services
Ongoing support and services for units with devices onboarded to the enterprise workstation management platforms encompass several key elements designed to ensure sustainable operations and a positive experience for units after initial onboarding.
First, dedicated services management is provided by Unit IT Administrators, who act as the primary support contacts for end users within their respective academic or business units. These administrators deliver services such as technical troubleshooting, policy updates, software deployment, and addressing user issues as they arise, ensuring that device management continues to meet evolving unit needs.
Support is further enhanced through collaboration with specialized resource groups such as UEM and ISO. These teams assist with backend management tasks, escalated issues, maintaining system health, and responding to requests for additional features or configuration changes.
Training and documentation are ongoing, with UEM responsible for delivering onboarding materials, periodic refreshers, and guidance on emerging best practices or new platform capabilities.
Regular coordination meetings play a crucial role in maintaining alignment with leadership expectations. These meetings serve as a forum to review performance metrics, discuss challenges, share feedback, and help guide the strategic direction of services across units.