We performed a comparison between BigFix and Microsoft Endpoint Configuration Manager based on our users’ reviews in four categories. After reading all of the collected data, you can find our conclusion below.
Comparison Results: Based on the above variables, we would conclude that BigFix slightly edges out Microsoft Endpoint Configuration Manager. Our users find that Microsoft Endpoint Configuration Manager is harder to use and its support is less effective.
"There are so many features, but Windows Autopilot is one of the features that are very valuable for most customers."
"In terms of technical support, you will get an immediate response."
"We can manage and standardize security across your environment, identify problems, receive alerts, and so on. That's its purpose, and that's also why it's so good."
"The most valuable feature for us is the security, including risk analysis and patch management."
"Conditional access helps me control uncontrolled access."
"The key benefit of Intune is its integration with the Microsoft ecosystem."
"We have a BYOD policy, and this solution helps us manage our devices."
"Its direct integration with all the other products that we have from Microsoft is valuable. We're using the E5 license, and we have a whole wealth of different products available. It just makes it easier to have everything from one provider."
"It has improved reliability upon delivery of software and has also helped reduce software expenses. The extensibility of BigFix helps to create custom solutions where we may have considered purchasing something instead."
"BigFix has drastically reduced the maintenance window period to patch and reboot servers."
"The product is less costly when compared to other solutions, and this is a good solid solution for what we have paid."
"We are able to use BigFix through API connections to automate and reduce resources and time. The product's been great for us. It's increased the security posture ten-fold and it's increased our visibility across our endpoints enormously."
"Servers are patched more consistently than they have been previously."
"The most valuable feature for us is the ability to manage TWS, the relevance is really what sets it apart. Also, using it as a software deployment tool is the key for us."
"The most valuable feature is patch management, a must have, even for Linux and iOS."
"The older version of the tools that I use also included the connectivity aspect, and the fact that the tool now has it separate from the collection of usage data makes the deployment of these tools much easier."
"The most valuable feature of Microsoft Endpoint Configuration Manager is the software deployment. Additionally, Microsoft integrates most of the other solutions well with one another."
"Microsoft Configuration Manager is integrated with other Microsoft products."
"The initial setup is straightforward and not too complicated."
"Valuable features include configurations enforcement, compliance data gathering, and deployment of a standardized OS."
"The solution is highly scalable."
"SCCM is a stable solution."
"The technical support is good."
"Provides great insight into the functionalities of the data scope."
"It would be great to see on-premises mailboxes and for the solution to have geofencing capabilities."
"There is room for improvement, particularly in terms of compatibility, extending beyond the well-known major brands."
"More integration with monitoring tools is needed."
"One area for improvement is app deployment. Another is the Windows update rollout. If you're rolling out an object to a device that's offline, Intune stops trying to reach this device after it sits idle for a bit. We are forced to find a workaround that could help manage that."
"The closest Microsoft Intune can be to GPOs, the better. There needs to be more granularity on application deployments. However, they have done better recently with the application deployments."
"Intune lags all of its competitors in terms of report generation."
"Its configuration is fairly complicated. You have to do quite a bit of discovery to be able to deploy it for a customer. You have to ask them a lot of questions. So, its initial deployment is the biggest challenge. They should make it easier to deploy with the use of Wizards or something else. During the deployment stage, there could be profiles for the customers who are particularly wanting to use certain feature sets of Intune."
"Microsoft Intune fails a lot when it comes to device compliance."
"The deployment has room for improvement and can be more streamlined."
"The remote software installation could be better."
"The scalability of the web UI product doesn't scale to the size that we need for our implementation so it needs to expand. I would also like to see the capability to develop on the back of the web UI capability. There are lots of web features and integrations that we could do with web UI that it would be nice to be able to put on top of what's already there, rather than waiting for IBM to develop what we need."
"I would like to see much better web reporting because as it is now, it's convoluted, basic, it's not modern, and there are limitations to it."
"I'd like to see better API integration with BigFix. We have some tremendous API capability inside of CyFIR and the ability to take textual search results, for example, and bring that back into the BigFix dashboard. This would be of extreme interest to us and our customers."
"I'd like to see better integration, with the different applications within BigFix. Instead of sometimes feeling like four or five different applications, they need to be integrated a little better within themselves."
"One aspect that could be improved is the speed of the console. Sometimes it can be slow, which is something that needs to be addressed."
"I'm looking for them to make big web UI improvements."
"One area of improvement is regarding the patching of Office 365 products. We have some difficulties on this side, and it can be improved."
"They need to improve the support for the Mac operating system."
"I would like to see more automation."
"The reports are too busy. They could be simpler. I'm a technician, so I don't care how pretty the reports look. They should be easy to read. I'm designing this for production folks. They need to read the reports quickly when they're patching in the middle of the night."
"Management of Linux devices could be improved."
"The analysis is something that can be integrated. Their report analysis can be improved a little bit due to the fact that most of the time complaints policies are saved by the admins. It's something that we need to look into and search for."
"The deployment process is lengthy and should be quicker to complete."
"SCCM can improve on third-party application support."
More Microsoft Configuration Manager Pricing and Cost Advice →
BigFix is ranked 5th in Configuration Management with 91 reviews while Microsoft Configuration Manager is ranked 2nd in Configuration Management with 78 reviews. BigFix is rated 8.6, while Microsoft Configuration Manager is rated 8.2. The top reviewer of BigFix writes "Very stable and easy to deploy with excellent patch compliance". On the other hand, the top reviewer of Microsoft Configuration Manager writes "Seamless system updates, useful integration, and reliable". BigFix is most compared with Microsoft Windows Server Update Services, Red Hat Ansible Automation Platform, Tanium, ManageEngine Patch Manager Plus and Red Hat Satellite, whereas Microsoft Configuration Manager is most compared with Red Hat Ansible Automation Platform, ManageEngine Endpoint Central, Tanium, AWS Systems Manager and Red Hat Satellite. See our BigFix vs. Microsoft Configuration Manager report.
See our list of best Configuration Management vendors and best Patch Management vendors.
We monitor all Configuration Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
SCCM is very robust but you need more time and people to manage it.
For a company of 200 employees only can use something easier to manage such as PDQ deployment S/W. it's a lot cheaper and easier to manage.
Kumar.
We have 1500 users and even with a reasonable sized support team we find SCCM difficult to manage. I haven't experienced the other solutions, but I suspect you will be better placed with an alternative to SCCM.
Before answering to your needs, we need to understand that there are two distinctive features from SCCM and BigFix.
SCCM since 2020 has stopped its support for Linux Patching, so in its entirety, if you are only using Windows, you might consider SCCM. It still support Mac with basic features, but it depends on your requirements. Again, the operation with SCCM is also not easy at all.
Bigfix on the other side is a solution to manage different types of OS, as we say it distributed environment. Windows, Linux, Mac, etc. Bigfix is mainly used in large companies with more than 1000+ employees. It is not cheap as Bigfix is a robust enterprise solution.
You might want to consider other automated patch management tools such as LANDesk or Managed Engine which has been seen in deployment in smaller enterprises.
Cheers,
Rendy
Hi Ihsan,
Hope you are doing well, As per my experience to deploy SCCM for 200 users is not worth it, you want to be blessed use Quest product KACE System Management Appliance, easy to manage and upgrade (patching/managing end point managing and many more).
https://www.itcentralstation.c...
Thank you.