Lorsque vous configurez la co-gestion (co-management) entre Microsoft Intune et SCCM (Configuration Manager), il est essentiel de comprendre le fonctionnement des capabilities. En effet, ces valeurs numériques permettent de savoir quelles charges de travail (workloads) se gèrent par Intune, SCCM ou les deux.
Contenus
masquer
Qu’est-ce qu’une capability dans le contexte du co-management ?
Les capabilities sont des valeurs entières entre 1 et 255. Elles se calculent dynamiquement en fonction des workloads attribués à Intune ou SCCM.
- Valeur 1 : Tous les workloads se gèrent par SCCM uniquement.
- Valeur 255 : Tous les workloads se gèrent par Intune uniquement.
- Toute valeur intermédiaire représente une configuration hybride, donc une vraie co-gestion.
💡 Si un client a la valeur 1 ou 255, il n’est pas réellement en co-gestion car la gestion est centralisée sur une seule plateforme.
Où trouver la valeur des capabilities ?
Vous pouvez retrouver cette information à plusieurs endroits sur le poste client ou dans la console d’administration :
- Dans la base de registre :
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CCM - Dans la base SQL SCCM (vue :
v_ClientCoManagementState) - Via le fichier log :
CoManagementHandler.log - Via WMI :
root\ccm\cimodels(classe :SMS_ClientCoManagementState) - Dans le panneau de configuration de Configuration Manager
→ Onglet Co-management ou General
Comment se calcule la valeur d’une capability ?
Chaque workload possède une valeur binaire. La somme de ces valeurs permet alors de définir la configuration effective du poste.
| Workload | Valeur |
|---|---|
| Co-management active | 1 |
| Compliance Policies | 2 |
| Resource Access Policies | 4 |
| Device Configuration | 8 |
| Windows Update Policies | 16 |
| Endpoint Protection | 32 |
| Client Apps | 64 |
| Office Click-to-Run Apps | 128 |
Exemple de calcul
Si vous activez la co-gestion et déléguez à Intune les workloads suivants :
- Client Apps → 64
- Windows Update Policies → 16
- Compliance Policies → 2
Alors, la valeur totale des capabilities sera :
1 (activation de la co-gestion)
- 2 (Compliance Policies)
- 16 (Windows Update)
- 64 (Client Apps)
= 83
Cette valeur se stocke localement et se transmet à Intune lors d’une synchronisation. Cela permet à chaque agent de savoir quelles charges de travail appliquer ou ignorer, selon leur attribution.
Que se passe-t-il lors d’un changement de capabilities ?
Lorsqu’un administrateur modifie l’attribution des workloads :
- Le client SCCM fusionne les nouvelles données.
- Une synchronisation immédiate avec Intune se déclenche alors.
- Les nouvelles stratégies Intune s’appliquent ensuite automatiquement.
Exploitation SQL : exemple de requête
Pour retrouver les capacités de co-gestion dans la base SQL de SCCM :
SELECT
COMP.Name0 AS 'Machine Name',
CMGT.Capabilities AS 'CoMgmt Capability Value',
CASE WHEN CMGT.MDMEnrolled = '1' THEN 'Yes' ELSE 'No' END AS 'MDM Enrolled',
CASE WHEN CMGT.ComgmtPolicyPresent = '1' THEN 'Yes' ELSE 'No' END AS 'Policy Present',
CASE WHEN CMGT.HybridAADJoined = '1' THEN 'Yes' ELSE 'No' END AS 'Hybrid AAD Joined'
FROM
v_R_System COMP
LEFT JOIN
v_ClientCoManagementState CMGT ON CMGT.ResourceID = COMP.ResourceID
Capabilities : Tableau de correspondance
| Capabilities | Workload |
|---|---|
| 1 | Co-management Configured |
| 3 | Compliance Policies |
| 5 | Resource access Policies |
| 7 | Resource access Policies |
| Compliance Policies | |
| 9 | Device Configuration |
| 11 | Device Configuration |
| Compliance Policies | |
| 13 | Device Configuration |
| Resource access Policies | |
| 15 | Device Configuration |
| Resource access Policies | |
| Compliance Policies | |
| 17 | Windows Updates Policies |
| 19 | Windows Updates Policies |
| Compliance Policies | |
| 21 | Windows Updates Policies |
| Resource access Policies | |
| 23 | Windows Updates Policies |
| Resource access Policies | |
| Compliance Policies | |
| 25 | Device Configuration |
| Windows Updates Policies | |
| 27 | Device Configuration |
| Windows Updates Policies | |
| Compliance Policies | |
| 29 | Device Configuration |
| Windows Updates Policies | |
| Resource access Policies | |
| 31 | Device Configuration |
| Windows Updates Policies | |
| Resource access Policies | |
| Compliance Policies | |
| 33 | Endpoint Protection |
| 35 | Compliance Policies |
| Endpoint Protection | |
| 37 | Resource access Policies |
| Endpoint Protection | |
| 39 | Resource access Policies |
| Compliance Policies | |
| Endpoint Protection | |
| 41 | Device Configuration |
| Endpoint Protection | |
| 43 | Device Configuration |
| Compliance Policies | |
| Endpoint Protection | |
| 45 | Device Configuration |
| Resource access Policies | |
| Endpoint Protection | |
| 47 | Device Configuration |
| Resource access Policies | |
| Compliance Policies | |
| Endpoint Protection | |
| 49 | Windows Updates Policies |
| Endpoint Protection | |
| 51 | Windows Updates Policies |
| Compliance Policies | |
| Endpoint Protection | |
| 53 | Windows Updates Policies |
| Resource access Policies | |
| Endpoint Protection | |
| 55 | Windows Updates Policies |
| Resource access Policies | |
| Compliance Policies | |
| Endpoint Protection | |
| 57 | Device Configuration |
| Windows Updates Policies | |
| Endpoint Protection | |
| 59 | Device Configuration |
| Windows Updates Policies | |
| Compliance Policies | |
| Endpoint Protection | |
| 61 | Device Configuration |
| Windows Updates Policies | |
| Resource access Policies | |
| Endpoint Protection | |
| 63 | Device Configuration |
| Windows Updates Policies | |
| Resource access Policies | |
| Compliance Policies | |
| Endpoint Protection | |
| 65 | Client Apps |
| 67 | Client Apps |
| Compliance Policies | |
| 69 | Client Apps |
| Resource access Policies | |
| 71 | Client Apps |
| Resource access Policies | |
| Compliance Policies | |
| 73 | Client Apps |
| Device Configuration | |
| 75 | Client Apps |
| Device Configuration | |
| Compliance Policies | |
| 77 | Client Apps |
| Device Configuration | |
| Resource access Policies | |
| 79 | Client Apps |
| Device Configuration | |
| Resource access Policies | |
| Compliance Policies | |
| 81 | Client Apps |
| Windows Updates Policies | |
| 83 | Client Apps |
| Windows Updates Policies | |
| Compliance Policies | |
| 85 | Client Apps |
| Windows Updates Policies | |
| Resource access Policies | |
| 87 | Client Apps |
| Windows Updates Policies | |
| Resource access Policies | |
| Compliance Policies | |
| 89 | Client Apps |
| Device Configuration | |
| Windows Updates Policies | |
| 91 | Client Apps |
| Device Configuration | |
| Windows Updates Policies | |
| Compliance Policies | |
| 93 | Client Apps |
| Device Configuration | |
| Windows Updates Policies | |
| Resource access Policies | |
| 95 | Client Apps |
| Device Configuration | |
| Windows Updates Policies | |
| Resource access Policies | |
| Compliance Policies | |
| 97 | Client Apps |
| Endpoint Protection | |
| 99 | Client Apps |
| Compliance Policies | |
| Endpoint Protection | |
| 101 | Client Apps |
| Resource access Policies | |
| Endpoint Protection | |
| 103 | Client Apps |
| Resource access Policies | |
| Compliance Policies | |
| Endpoint Protection | |
| 105 | Client Apps |
| Device Configuration | |
| Endpoint Protection | |
| 107 | Client Apps |
| Device Configuration | |
| Compliance Policies | |
| Endpoint Protection | |
| 109 | Client Apps |
| Device Configuration | |
| Resource access Policies | |
| Endpoint Protection | |
| 111 | Client Apps |
| Device Configuration | |
| Resource access Policies | |
| Compliance Policies | |
| Endpoint Protection | |
| 113 | Client Apps |
| Windows Updates Policies | |
| Endpoint Protection | |
| 115 | Client Apps |
| Windows Updates Policies | |
| Compliance Policies | |
| Endpoint Protection | |
| 117 | Client Apps |
| Windows Updates Policies | |
| Resource access Policies | |
| Endpoint Protection | |
| 119 | Client Apps |
| Windows Updates Policies | |
| Resource access Policies | |
| Compliance Policies | |
| Endpoint Protection | |
| 121 | Client Apps |
| Device Configuration | |
| Windows Updates Policies | |
| Endpoint Protection | |
| 123 | Client Apps |
| Device Configuration | |
| Windows Updates Policies | |
| Compliance Policies | |
| Endpoint Protection | |
| 125 | Client Apps |
| Device Configuration | |
| Windows Updates Policies | |
| Resource access Policies | |
| Endpoint Protection | |
| 127 | Client Apps |
| Device Configuration | |
| Windows Updates Policies | |
| Resource access Policies | |
| Compliance Policies | |
| Endpoint Protection | |
| 129 | Office Click-to-Run Apps |
| 131 | Office Click-to-Run Apps |
| Compliance Policies | |
| 133 | Office Click-to-Run Apps |
| Resource access Policies | |
| 135 | Office Click-to-Run Apps |
| Resource access Policies | |
| Compliance Policies | |
| 137 | Device Configuration |
| Office Click-to-Run Apps | |
| 139 | Device Configuration |
| Office Click-to-Run Apps | |
| Compliance Policies | |
| 141 | Device Configuration |
| Office Click-to-Run Apps | |
| Resource access Policies | |
| 143 | Device Configuration |
| Office Click-to-Run Apps | |
| Resource access Policies | |
| Compliance Policies | |
| 145 | Office Click-to-Run Apps |
| Windows Updates Policies | |
| 147 | Office Click-to-Run Apps |
| Windows Updates Policies | |
| Compliance Policies | |
| 149 | Office Click-to-Run Apps |
| Windows Updates Policies | |
| Resource access Policies | |
| 151 | Office Click-to-Run Apps |
| Windows Updates Policies | |
| Resource access Policies | |
| Compliance Policies | |
| 153 | Device Configuration |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| 155 | Device Configuration |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| Compliance Policies | |
| 157 | Device Configuration |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| Resource access Policies | |
| 159 | Device Configuration |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| Resource access Policies | |
| Compliance Policies | |
| 161 | Office Click-to-Run Apps |
| Endpoint Protection | |
| 163 | Office Click-to-Run Apps |
| Compliance Policies | |
| Endpoint Protection | |
| 165 | Office Click-to-Run Apps |
| Resource access Policies | |
| Endpoint Protection | |
| 167 | Office Click-to-Run Apps |
| Resource access Policies | |
| Compliance Policies | |
| Endpoint Protection | |
| 169 | Device Configuration |
| Office Click-to-Run Apps | |
| Endpoint Protection | |
| 171 | Device Configuration |
| Office Click-to-Run Apps | |
| Compliance Policies | |
| Endpoint Protection | |
| 173 | Device Configuration |
| Office Click-to-Run Apps | |
| Resource access Policies | |
| Endpoint Protection | |
| 175 | Device Configuration |
| Office Click-to-Run Apps | |
| Resource access Policies | |
| Compliance Policies | |
| Endpoint Protection | |
| 177 | Office Click-to-Run Apps |
| Windows Updates Policies | |
| Endpoint Protection | |
| 179 | Office Click-to-Run Apps |
| Windows Updates Policies | |
| Compliance Policies | |
| Endpoint Protection | |
| 181 | Office Click-to-Run Apps |
| Windows Updates Policies | |
| Resource access Policies | |
| Endpoint Protection | |
| 183 | Office Click-to-Run Apps |
| Windows Updates Policies | |
| Resource access Policies | |
| Compliance Policies | |
| Endpoint Protection | |
| 185 | Device Configuration |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| Endpoint Protection | |
| 187 | Device Configuration |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| Compliance Policies | |
| Endpoint Protection | |
| 189 | Device Configuration |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| Resource access Policies | |
| Endpoint Protection | |
| 191 | Device Configuration |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| Resource access Policies | |
| Compliance Policies | |
| Endpoint Protection | |
| 193 | Client Apps |
| Office Click-to-Run Apps | |
| 195 | Client Apps |
| Office Click-to-Run Apps | |
| Compliance Policies | |
| 197 | Client Apps |
| Office Click-to-Run Apps | |
| Resource access Policies | |
| 199 | Client Apps |
| Office Click-to-Run Apps | |
| Resource access Policies | |
| Compliance Policies | |
| 201 | Client Apps |
| Device Configuration | |
| Office Click-to-Run Apps | |
| 203 | Client Apps |
| Device Configuration | |
| Office Click-to-Run Apps | |
| Compliance Policies | |
| 205 | Client Apps |
| Device Configuration | |
| Office Click-to-Run Apps | |
| Resource access Policies | |
| 207 | Client Apps |
| Device Configuration | |
| Office Click-to-Run Apps | |
| Resource access Policies | |
| Compliance Policies | |
| 209 | Client Apps |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| 211 | Client Apps |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| Compliance Policies | |
| 213 | Client Apps |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| Resource access Policies | |
| 215 | Client Apps |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| Resource access Policies | |
| Compliance Policies | |
| 217 | Client Apps |
| Device Configuration | |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| 219 | Client Apps |
| Device Configuration | |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| Compliance Policies | |
| 221 | Client Apps |
| Device Configuration | |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| Resource access Policies | |
| 223 | Client Apps |
| Device Configuration | |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| Resource access Policies | |
| Compliance Policies | |
| 225 | Client Apps |
| Office Click-to-Run Apps | |
| Endpoint Protection | |
| 227 | Client Apps |
| Office Click-to-Run Apps | |
| Compliance Policies | |
| Endpoint Protection | |
| 229 | Client Apps |
| Office Click-to-Run Apps | |
| Resource access Policies | |
| Endpoint Protection | |
| 231 | Client Apps |
| Office Click-to-Run Apps | |
| Resource access Policies | |
| Compliance Policies | |
| Endpoint Protection | |
| 233 | Client Apps |
| Device Configuration | |
| Office Click-to-Run Apps | |
| Endpoint Protection | |
| 235 | Client Apps |
| Device Configuration | |
| Office Click-to-Run Apps | |
| Compliance Policies | |
| Endpoint Protection | |
| 237 | Client Apps |
| Device Configuration | |
| Office Click-to-Run Apps | |
| Resource access Policies | |
| Endpoint Protection | |
| 239 | Client Apps |
| Device Configuration | |
| Office Click-to-Run Apps | |
| Resource access Policies | |
| Compliance Policies | |
| Endpoint Protection | |
| 241 | Client Apps |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| Endpoint Protection | |
| 243 | Client Apps |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| Compliance Policies | |
| Endpoint Protection | |
| 245 | Client Apps |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| Resource access Policies | |
| Endpoint Protection | |
| 247 | Client Apps |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| Resource access Policies | |
| Compliance Policies | |
| Endpoint Protection | |
| 249 | Client Apps |
| Device Configuration | |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| Endpoint Protection | |
| 251 | Client Apps |
| Device Configuration | |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| Compliance Policies | |
| Endpoint Protection | |
| 253 | Client Apps |
| Device Configuration | |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| Resource access Policies | |
| Endpoint Protection | |
| 255 | Client Apps |
| Device Configuration | |
| Office Click-to-Run Apps | |
| Windows Updates Policies | |
| Resource access Policies | |
| Compliance Policies | |
| Endpoint Protection |
Co-management et Capabilities : Conclusion
Comprendre la logique des capabilities est donc essentiel pour piloter finement le co-management. Elle permet de :
- Savoir quels workloads sont délégués à Intune ou SCCM.
- Diagnostiquer les problèmes de gestion des stratégies.
- Automatiser les vérifications de conformité et les requêtes ciblées.
Avec cette connaissance, vous maîtrisez un levier clé de la transition vers la gestion moderne des postes.
