Problem: You’ve shifted the “Device Configuration” workload in your ConfigMgr site to Intune, and your existing Configuration Baselines are no longer applying, and there’s a lot of them.

Solution: Spend the next two hours clicking away in the console PowerShell of course!

Get-CMBaseline -Fast | Set-CMBaseline -AllowComanagedClients $true

Running the above one-liner will enable all of your existing baselines to be run on co-managed clients even when the workload has been shifted to Intune. For reference, we are setting the following property on each baseline:

Always apply this baseline even for co-managed clients