Problem: You’ve shifted the “Device Configuration” workload in your ConfigMgr site to Intune, and your existing Configuration Baselines are no longer applying, and there’s a lot of them.
Solution: Spend the next two hours clicking away in the console PowerShell of course!
Get-CMBaseline -Fast | Set-CMBaseline -AllowComanagedClients $true
Running the above one-liner will enable all of your existing baselines to be run on co-managed clients even when the workload has been shifted to Intune. For reference, we are setting the following property on each baseline: