We performed a comparison between BigFix and Microsoft Endpoint Configuration Manager based on our users’ reviews in four categories. After reading all of the collected data, you can find our conclusion below.
Comparison Results: Based on the above variables, we would conclude that BigFix slightly edges out Microsoft Endpoint Configuration Manager. Our users find that Microsoft Endpoint Configuration Manager is harder to use and its support is less effective.
"It's easy to manage and easy to configure."
"The performance of Microsoft Intune is good."
"Its direct integration with all the other products that we have from Microsoft is valuable. We're using the E5 license, and we have a whole wealth of different products available. It just makes it easier to have everything from one provider."
"Microsoft Endpoint Manager is not expensive overall, especially for small environments."
"I can reach devices or computers over the internet. I don't need to worry about the network connectivity between the offices. I can manage any device. That is the most important part."
"I can see that the patch management process is much improved with the bundled patch management option available in Microsoft Intune compared to the KPI deployment required by the other deployment solutions."
"Conditional access has helped us tailor and enforce our security policies in the mobile space."
"Intune's most valuable features are the device, compliance, and configuration policies."
"It's very straightforward."
"BigFix is a great product. The flexibility of putting together your own relevance and retrieving custom data from any one of your agents is a valuable feature. It is one of my favorite features because if a boss asks me, "How many of these devices do we have?", I can put together a report in two seconds."
"The best feature of BigFix is its multi-platform support."
"The most valuable feature of BigFix is the software deployment."
"Patch management, because it very much improved the patch compliance and has the capability to manage Windows and non-Windows clients."
"The most valuable features are patch management, software installation, and asset management."
"BigFix is incredibly fast and accurate in patching, reporting, and remediation."
"In terms of vulnerability management, it gives tough competition by providing a single management console with multiple benefits."
"It works well for the endpoints for the customer I'm consulting. It has a bunch of knobs, and you can tune it to do lots of things."
"Endpoint Manager is valuable to our organization because it allows us to connect to our enterprise from remote locations securely. The most useful feature is its robustness and scalability. It is highly scalable and flexible, allowing us to use it in various environments. Additionally, we can specialize the policies related to each device group. This ensures that each group has access to the applications they need for their work and non-work hours."
"The solution has a very good set of features."
"The major features of this product are the reporting tools. The most valuable features are package deployment and application deployment. Security management is also good because any vulnerability will be identified, and you can fix it. It's the best tool because you never know what kind of client you will have. For example, you may have your offices in low bandwidth remote areas. But it's achievable because it accommodates the bandwidth that you have available. Microsoft Endpoint Configuration Manager is an excellent reporting tool for your environment. If you want to know the details about the hardware configuration, software configuration, what is causing a problem, or when a new feature update comes in for Windows, even that goes on SCCM itself. A lot of deployment stuff."
"Microsoft Configuration Manager helps with patch management."
"The main, clear valuable feature is updating the latest, patches and updates from Windows. This is the main feature we really utilize a lot."
"Software deployment and WSUS are most valuable."
"It uses detailed descriptions of the workstations, and that is good for me."
"Intune's reporting and logging could be improved. When troubleshooting, it's difficult to collect the logs and determine what's happening. If I want to filter out the compliant devices, I can see it from the logs, but I would like the option to drill down further."
"There is improvement needed in integrating with the installed Office solutions versions, such as Office 2019. The Office 365 integrates without a problem."
"I would like some integration with the Microsoft reporting platform Power BI."
"There can be delays in the deployment of new policies."
"I wanted to check if there is any provision at the Intune level to restrict certain things, such as a website, but unfortunately, that feature is available only in Microsoft Defender. Intune has web filtering capabilities, but they are only useful for protection from malicious websites, whereas we would like to be able to restrict a website. For example, YouTube is a clean website. No one would identify it as a malicious website, but if we want to stop the end-users from going to that website, we have to go for another product, such as Microsoft Defender or another third-party proxy solution. It would be great if this capability is included in Intune."
"Microsoft Intune needs to improve the initial login process."
"Intune doesn't provide much control over Windows servers. It's something we struggle with."
"The configuration and pricing can be improved."
"I would like to see the integration of user security between the different products to be improved. There's separate security for compliance, separate security for web reports, and the console, and you have to manage those things separately."
"BigFix can improve the way machines report back to the console. In the external relay management environment, it has become more of a hybrid environment with most of the machines not being on-site. The need of having public-facing reporting items interconnected is becoming more and more crucial. In general, the reporting could use some enhancement."
"The console interface is not friendly, and requires training before using it in production."
"Sometimes there is a lag time for our users."
"I would like to see a web UI SDK so we could take what is provided currently and be able to build our own customized web UI for particular customers that want to sell service."
"Its pricing should be improved. It is too costly."
"I would like to see improvements in the Web UI program and also a BigFix console for Mac OS."
"License management isn't quite as easy as it should be to deal with the licensing. You need to take the server down to import the new licenses which I find to be annoying."
"There is a reboot issue with the patching. Sometimes, if patching runs into any issue whatsoever, it doesn't reboot but it doesn't tell you it errored out. It just sits there and we don't find out until the next day whether it patched or not. That was a big issue for us. We're working through that. They added some stuff in there now where you can actually tell reboot is pending. But we still need some kind of notification that if something fails or is pending, we know. We shouldn't have to go in and look. They don't have anything for that right now."
"With Microsoft Premier Support, you get what you pay for. There's Third Tier Support that you pay for. If you pay for that, you get excellent support, and if you don't pay for that, then you get the less experienced staff."
"This solution needs to be supported on all Operating systems."
"It would be of benefit if Configuration Manager could be connected/integrated with multiple Microsoft Intune subscriptions rather than just one (the current limit)."
"The reports are too busy. They could be simpler. I'm a technician, so I don't care how pretty the reports look. They should be easy to read. I'm designing this for production folks. They need to read the reports quickly when they're patching in the middle of the night."
"The configuration of Microsoft Endpoint Configuration Manager could be improved, it is a bit complicated."
"Built in PowerShell cmdlets would be a nice feature because managing clients remotely can be a pain without knowing the WMI calls to run."
"The database should be made to be more stable and robust, but not so much the configuration."
More Microsoft Configuration Manager Pricing and Cost Advice →
BigFix is ranked 5th in Configuration Management with 91 reviews while Microsoft Configuration Manager is ranked 2nd in Configuration Management with 78 reviews. BigFix is rated 8.6, while Microsoft Configuration Manager is rated 8.2. The top reviewer of BigFix writes "Very stable and easy to deploy with excellent patch compliance". On the other hand, the top reviewer of Microsoft Configuration Manager writes "Seamless system updates, useful integration, and reliable". BigFix is most compared with Microsoft Windows Server Update Services, Red Hat Ansible Automation Platform, Tanium, ManageEngine Patch Manager Plus and Red Hat Satellite, whereas Microsoft Configuration Manager is most compared with Red Hat Ansible Automation Platform, ManageEngine Endpoint Central, Tanium, AWS Systems Manager and Red Hat Satellite. See our BigFix vs. Microsoft Configuration Manager report.
See our list of best Configuration Management vendors and best Patch Management vendors.
We monitor all Configuration Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
SCCM is very robust but you need more time and people to manage it.
For a company of 200 employees only can use something easier to manage such as PDQ deployment S/W. it's a lot cheaper and easier to manage.
Kumar.
We have 1500 users and even with a reasonable sized support team we find SCCM difficult to manage. I haven't experienced the other solutions, but I suspect you will be better placed with an alternative to SCCM.
Before answering to your needs, we need to understand that there are two distinctive features from SCCM and BigFix.
SCCM since 2020 has stopped its support for Linux Patching, so in its entirety, if you are only using Windows, you might consider SCCM. It still support Mac with basic features, but it depends on your requirements. Again, the operation with SCCM is also not easy at all.
Bigfix on the other side is a solution to manage different types of OS, as we say it distributed environment. Windows, Linux, Mac, etc. Bigfix is mainly used in large companies with more than 1000+ employees. It is not cheap as Bigfix is a robust enterprise solution.
You might want to consider other automated patch management tools such as LANDesk or Managed Engine which has been seen in deployment in smaller enterprises.
Cheers,
Rendy
Hi Ihsan,
Hope you are doing well, As per my experience to deploy SCCM for 200 users is not worth it, you want to be blessed use Quest product KACE System Management Appliance, easy to manage and upgrade (patching/managing end point managing and many more).
https://www.itcentralstation.c...
Thank you.