IBM Security MaaS360

How to achieve SCCM Co-existence with IBM MaaS360 with Watson

By Prasad Balasubramanian posted Wed September 18, 2019 11:52 AM


If you’re an IT Infrastructure & Operations (I&O) manager responsible for managing and securing endpoints such as PCs and Macs using traditional Client Management Tools (CMTs) like Microsoft SCCM, you’re likely highly aware of the following industry trends:

  • Giving employees the flexibility to choose and use any device from anywhere (programs such as BYOD are big drivers for this)
  • Prioritizing secure user access to corporate apps, content, and resources
  • Modern management of popular operating systems (OSs) like Windows 10, macOS & Chrome OS Is a new paradigm where these OSs can be managed using a low touch, no touch techniques using MDM APIs; support an out-of-the-box experience for employees; can be easily kept up to date over-the-air
  • On-premise based, CapEx heavy, high Total Cost of Ownership (TCO) CMTs are taking the back seat to cloud-hosted Unified Endpoint Management (UEM) tools, which are gaining more and more traction due to their ability to view, manage, and secure any endpoint from one place
  • Large enterprises and companies using CMT tools have already begun migrating integrating with and migrating to UEMs; in the next few years, most of these companies will have fully migrated

If you’re among the many organizations considering how and when to migrate from CMT to UEM, IBM MaaS360 with Watson, one of the world’s most widely recognized and utilized UEM tools, provides you the right guidance, features, and functionality to make it happen.

Join our Sept. 19 webinar to learn more from CMT & UEM Co-Existence

As a show of its readiness and qualification to help clients make their momentous shift to modern management, MaaS360 was recently positioned as a Leader in the 2019 Gartner Magic Quadrant for Unified Endpoint Management Tools. In 2019, IBM placed #1 (ahead of every ranked vendor including Microsoft and VMware) for its Completeness of Vision.

MaaS360 is now enabling capabilities to seamlessly migrate from CMTs, starting with the most popularly used, Microsoft SCCM. MaaS360’s bridge to modern management will help you enroll devices, migrate your Group Policy Option (GPO) policies to MDM policies, and migrate SCCM apps and device collections. The combination of these capabilities provides you with a head-start in completely migrating your enterprise to UEM by managing your End User Computing (EUC) devices using a modernized approach.


How does a CMT like SCCM co-exist with a UEM like MaaS360?


According to Gartner, 80% of worker tasks will take place on a mobile device by 2020. By 2022, 30% of company-owned Windows 10 PCs will be managed using UEM tools.

If you’re using SCCM for most EUC device management workflows such as inventory, policies, application distribution, patch & OS management – and want to first get familiarized with the UEM paradigm before actually moving, look no further than SCCM co-existence with MaaS360.

Using SCCM co-existence, you can simultaneously manage Windows 10 devices using your traditional client management approach and MaaS360’s modern management methods. SCCM co-existence can be rolled out to a selected set of devices through an easy-to-use interface, giving I&O professionals a head-start in their modern management migration.


Getting started with SCCM co-exist with MaaS360


Getting started with MaaS360 / SCCM co-existence is simple. The Windows 10 end user devices managed by SCCM are pushed with a Windows application called ‘MaaS360 Onboarding-Agent’. This onboarding agent, once deployed on the devices, enrolls them within MaaS360, immediately bringing them under modern management. This MaaS360 On-boarding agent is a Windows .EXE app and can be distributed right through SCCM application distribution workflow onto to the select list of Windows 10 devices participating in SCCM migration:


Once these devices enroll themselves under MaaS360, they start appearing in the MaaS360 portal as managed devices! Welcome to modern management of EUC devices!

Post enrollment, you can open the MaaS360 portal and go to ‘Devices -> Inventory’ section and view these devices. In addition, this page shows the extensive inventory of these enrolled devices, both collectively and one device at a time. The inventory includes hardware, workplace & endpoint security, app inventory, certs, browser history, installed services etc., just to name a few.



From this moment onwards, all the benefits of modern management are readily available.

The following workflows are possible on these newly enrolled devices, freshly enabled with SCCM co-existence:

  • Publish and distribute Windows 10 apps through a world-class unified app catalog
  • Realtime actions: locate, wipe, send message
  • Integrate with Azure AD to import your userbase
  • Activate identity management configure IAM permissions
  • Facilitate Azure AD-based conditional access management controls
  • Roll out Office 365 apps for Azure AD users
  • Enable MaaS360’s native Secure Browser and configure settings and restrictions
  • Autopilot-based Windows 10 roll out for Azure AD users

Once you’re comfortable with co-existence and you’ve spent enough time on the different workflows that are possible through MaaS360, you will have clarity on which traditional workflows still make sense using SCCM. For example, if you want to roll out custom images to devices before moving to UEM, you can maintain that workflow in SCCM but simultaneously use MaaS360 for other workflows that are more efficiently managed via modern management.

Once co-existence on a set of devices is achieved and found to be working well, the next step in the SCCM/CMT Migration is to migrate GPO policies to MDM. MaaS360 already provides a GPO migration tool suited for this purpose. Migrating GPOs to MDM, followed by app & device collection migration from SCCM to MaaS360 takes you one step closer to completing the full cycle of co-existence & CMT Migration.

Once you’ve onboarded a few devices and tried out the various workflows, you can bring more devices, Organizational Units (OUs), and groups under co-existence and start using MaaS360 workflows as much as possible on these devices. UEM is the way forward and we are determined to help I&O managers migrate smoothly to a cloud-managed enterprise so they may provide a trusted and secure workplace for their employees.


Join our upcoming webinar on September 19th to learn more from the experts! At 1pm ET, join IBM as they discuss how MaaS360 bridges to modern management through:

  • Secure porting of CMT app & device collections (e.g., SCCM)
  • Seamless Windows device enrollment
  • Easy Group Policy Options (GPOs) migration