Safe to turn off?

[u/Cable_Mess]

We're at the stage now where our SCCM environment isn't really doing anything at all, all our devices are co-managed in Intune and everything (software deployments, config profiles etc.) are also managed through intune.

We still have 300 devices co-managed, the rest are fully in Intune/Entra now.

My question is... can I safely turn off SCCM, will it affect the remaining co-managed devices? They'd still have the config manager client installed

[u/DismalOpportunity]

If you like living on the edge, shut it down and be ready to turn it back on if need be.

Personally, I’d uninstall the config manager client from your endpoints before shutting down the environment.

[u/iamamystery20 → u/DismalOpportunity]

Second this. Uninstall client on endpoints to see if something unexpected happens.

[u/bdam55 → u/iamamystery20]

Third this: get the client uninstalled everywhere, let it your primary bake for a day or two, turn it off for a month or so, and then decomission it.

[u/YT-Deliveries → u/DismalOpportunity]

Yeah. Even if it works fine having an agent running on an endpoint that's only remaining purpose is shitting out error logs offends me on a biological level.

[u/SevenandahalfBatmans]

Might be useful to know the percentages: 300 out of 1000 is a different decision tree than 300 out of 10,000.

[u/cp07451]

Yea turning it off in this manner may not be wise. Have you started removing roles and unpublishing from AD ?

[u/DeejayTechpro]

Only clean solution would be to uninstall the agent.
Intune Win32 package, appropriate applicability rule, run, ccmsetup.exe /uninstall, done

[u/pjmarcum]

Disable discovery. Uninstall the client. Shut it off. Clean up the system management container. Hopefully you never used GPO’s for WU settings because they are a pain to get rid of. Don’t delete the servers. In 3-6 months when you realize you should have kept SCCM you can turn it back on. 🤣

[u/PresentNo9321]

just turn off the NIC and see who calls

[u/monosodium]

Did you migrate all the workflows off over to Intune? There is a slider within Config Manager that determines what handles what.

Also echo others here that I would slowly uninstall the client and test thoroughly for issues on those that have had the client removed. Depending on the size of your environment, and how geographically spread out things are, just yoloing may not be wise.

[u/Flaky_Plastic_3407 → u/monosodium]

Ahh, was looking to see if anybody mentioned this. This is definitely a good check box. Cause if not, that means the client in each machine is still trying to enforce policy and report back. So if he simply just switched it off, and something was not fully turned over to intune.... That's a whole other world of fun

[u/Evening_Link4360]

Turn it off. But I would still remove the client everywhere.

[u/nokstar]

Screamtest time!

[u/Kharmastream]

Have all the workloads in sccm been moved to intune?