Microsoft Configuration Manager Reviews

This is a diverse tool so its use case varies. Most people use it for patch management and software distribution, and operating system deployment. It can also be used for policy management and for maintaining a baseline on the computer, depending on the company and its goals. We are consultants and resellers and deploy this solution on the cloud and on-prem. We use Azure for our cloud deployments. I'm a consultant and president and CEO of our company. 

The solution enables significant streamlining and reduces resources from a personnel perspective.

Patching is very effective and reporting is very good. In general, the software distribution and operating system deployment are very good. Most organizations with small support resources leverage it, along with the Azure Autopilot component or the Intune Autopilot component. The customer orders the solution, it's shipped to them, they open it, log on with their Azure credentials and it builds the machine for them as opposed to going to an imaging center, and having a dedicated staff for that particular function. 

I think the asset management component, the TSM piece, could be improved. That would allow them to compete with other products. It's currently very basic and rudimentary because there are no other connectors such as PeopleSoft that you can get.

I've been using this solution for 24 years. 

This is a very mature product so it's very stable. In the 24 years I've been using it, most of the kinks have been worked out. It's all about having a healthy network and a healthy, active directory structure. If those two things are in place, you'll have a really good experience. If not, it will definitely show its head in the SCCM product. 

The scalability is excellent. 

Technical support for SCCM is good. You have to get past the tier one person, but once you get to a dedicated MECM engineer, it's good. The support forums are also helpful. 

If the solution is being deployed by someone with experience, it can be done in about two hours. They're pretty good with hydration kits where you can configure all the prerequisites and all the components, and you're up and running in about two clicks. It's the customer and budget that dictates how complex or how involved a setup is. If they're only leveraging a couple of the core features of the product, it's pretty straightforward, but if they want to use more advanced functions and distribute that out and do low balancing and that sort of thing, it takes a little more time. Generally, clients allow us to integrate for them, we conduct a turnkey training solution, and then they take it over.

Although the solution is not as expensive as Ivanti, the cost is still quite high. Certain licensing arrangements can get you a better deal, but it's still expensive. It's based on a CAL license, so if you have a client on an endpoint, there's going to be a charge. I think it's around $US35 per license per year. It's not too bad. 

If you're new to the solution then it's worthwhile studying the documentation because it's not easy in terms of all the components that make it up such as SQL and so forth. 

I rate the solution nine out of 10. 

First off, to clarify some confusion, Microsoft recently changed the name of a previous on-premises tool called SCCM (Microsoft System Center Configuration Manager) to MECM (Microsoft Endpoint Configuration Manager).

In our company, we originally used SCCM with all our Microsoft products, but after a while, many companies including ours started to move their on-premises devices to the cloud, and MECM, along with Intune on an Azure tenant, became our preferred solution for managing devices that are both on-premises and in the cloud.

I worked with a team to complete the upgrade of our SCCM solution to the current version of MECM, which we now use exclusively to deploy software packages, scripts, updates, and operating systems via task sequences. Then, after buying an Azure AD tenant, we took out a license for Microsoft Intune (now part of MECM), in order to link our use of MECM for managing devices that exist on the internet, such as in the case of teleworkers.

MECM has given us many benefits, but the main benefit is that we no longer have to deploy software manually onto hard drives or with USB flash drives, and instead you can do everything over the network.

Our company is spread over several regions, with the headquarters located in Paris, France, and with two remote locations in Paris and two remote locations in Morocco, where I am based. With MECM, we can deploy distribution points (e.g. file servers) in different areas, such that we can deploy packages from any of the distribution points that are nearest to the intended location.

This is useful because when a device needs a package, it will trace the location of the nearest distribution point from which it can source the package, to speed up the transfers over the internet and not impact the overall bandwidth.

I manage software updates and operating systems for devices, and within seconds, we can remotely deploy a system for, say, 2,000 devices. Not only that, but we can also deploy scripts and create comprehensive compliance rules.

There are several challenges regarding MECM worth mentioning.

With MECM, you can't deploy packages remotely for end users who are working from home, unless you pass them through Intune with an Azure tenant. After initiating a VPN connection, the remote machine will contact Intune in order to retrieve packages, scripts, etc.

Intune is a great solution for managing devices but it is expensive because you also have to buy an Azure service called CMG (Cloud Management Gateway). CMG works as an intermediary between your on-premises MECM server and remote end users, via email authentication, but it can be difficult to integrate with MECM and costly.

There are also some limitations of Intune, such as the inability to deploy operating systems the traditional way via task sequences, making it such that we have to use Autopilot to deploy operating systems. Though, with Intune and Autopilot you can deploy what you have on-premises, including GPO strategies for local endpoints and general endpoint configurations. 

It is important to note that MECM by itself can only manage Microsoft devices, despite how Intune can be used alongside it to manage multiple platforms (e.g. Android / Apple devices).

Finally, there is a steep learning curve when it comes to administration. A lot of experience is needed in terms of troubleshooting, as this is one of the most difficult tasks in MECM. We were seven people in a group and I was the only one that had the patience to do the troubleshooting at times. If we have a problem with a certain feature in MECM, we need to observe the log, reading and analyzing, to discover the problem. 

I have worked with Microsoft Endpoint Configuration Manager for six years.

MECM is stable. However, whenever Microsoft makes changes or updates to the workstation operating system (Windows 10, for example), you also have to adapt your version in the server accordingly. So, in future, if you're going to be deploying Windows 11, you will also need to upgrade your version of Windows in MECM. This means that you are always thinking about which versions of operating systems you have in your workstations as well as which versions you have in MECM.

You have to do such maintenance every six months, where you need to consider the versions of operating systems while upgrading and testing to see if they are compatible with your MECM. On the whole, it ends up being a lot of work.

To improve scalability across on-premises and cloud environments, Microsoft introduced Intune which is a service implemented with MECM in the cloud in order to provide communication with devices in remote locations. So if you need to manage remote devices with MECM, you can do so by buying the Azure tenant service, and attach it to your MECM.

In total, we are using MECM and Intune to configure almost 2,000 devices across the company.

We haven't had many problems that have warranted the use of Microsoft support. Thankfully, there are a lot of people on the internet who are also working with MECM so we have a lot of documentation to work with. If you follow the documentation, you don't need the support of Microsoft.

Before using the original SCCM, we had never used anything similar.

It's not easy to implement MECM at first because you are required to have some experience on how to deploy the database for MECM. At our company we already have people working in the data center who have lots of experience in deploying with VMs and virtualization (e.g. Hyper-V and VMware), but for me, implementing MECM was difficult.

It took us around six months to complete the entire implementation because our company has several remote locations which have to be served by the remote distribution server and distribution point servers, and after implementing each server, you have to test it extensively before you put it into production.

We did the implementation by ourselves. We have staff in different areas who helped deploy MECM, including support staff and data center personnel. For example, one person takes care of the AD server, and another takes care of our use of Intune. Yet another group takes care of the IT, engineering, and system administration, of which three people might be there just to handle the load balancing. It all depends on the requirements at the time.

If you have a small company and you have a simple need to install operating systems remotely, you can install WDS (Windows Deployment Service) on a server, which can help with the task of deploying operating systems and software remotely. But if your company has a lot of applications and devices that need monthly updates, it is better to buy a license for MECM.

I don't have the figures for the licensing because it's another group that manages the accounts and licensing for all the servers, but I believe it's quite expensive. The reason I say it's expensive is because we have a lot of products in our company, especially Microsoft products such as Microsoft Office and Microsoft System Center Orchestrator. 

Along with buying a license for MECM, we also have to buy a service called CMG (Cloud Management Gateway) which is a virtual machine in the cloud with which you can link your MECM to the Azure tenant so as to manage teleworkers. To explain a bit further, the teleworkers' machines communicate with the CMG as a tenant service in Azure, which then communicates with your MECM and on-premises policies, which then communicates back to the teleworker client.

This is a necessary process, but at least it is only a small feature and it is not difficult to add this relationship to your MECM as long as you have people experienced in the Azure tenant service.

MECM is a solution that needs a team that is well-experienced in implementation, administration, troubleshooting, and more, but the reward is worth the effort. My biggest piece of advice is that before you integrate it into your company, make sure you have the required skills.

I would rate MECM an eight out of ten.

We use this solution to apply new group policies.

The solution was particularly helpful for patching the OS, and for the VM in our environment. With 10 branches, we have a huge number of VMs. Using ECM, we can download the new patches one by one, apply and then restore them. It saves us a lot of time. 

The valuable feature is the ability to gain all the data you need. We can collect data and get insight into the functionalities of their scope. As system administrators, we get a summarized report for each site with the installed version of the OS for all PCs in our environment. We know which meet the requirements and which don't. For those that don't, we can mitigate any potential vulnerabilities or threats.

I think managing Linux devices could be improved. It would help our colleagues and other departments like the dev opps, who only use Linux machines to quickly patch their VMs.

I've been using this solution for two years. 

The solution is stable. 

The solution is scalable. 

The technical support could be improved. 

The initial setup is very straightforward. We have six users. 

It's important to keep the database going at all times to avoid any interruption of the service. The implementation must be very well designed because you have to know the scope of your workload and that should be addressed in the action plan before proceeding with the deployment. 

I rate this solution eight out of 10. 

We mostly use Microsoft Endpoint Configuration Manager for patch management and application deployment. We will check and post a critical or supplement patch if there is a vulnerability.

I like Mircosoft's technical support. Microsoft has a few updates, like some of the critical KBs. They are published within the interval time, and in case of an escalation on the client missions, we will raise a ticket with the Microsoft team. They will create a hotfix or a critical update. They will chat with us, and that is one thing I like about Microsoft. Whenever any issues occur at my organization, they will help you out soon as possible within the SLA.

It would be better if automation options were available. For example, in Nexthink or SysTrack, there is an analytical tool. Creating dashboards would be very easy if you implement the same thing in Microsoft. That report will be a daily cost to the customers and good revenue for our organization. The price also could be better.

In the next release, we need to include some features like tables, dashboards, surveys, services, and metrics in the dashboard. Whatever we are implementing will be downloaded by a report. Apart from the report, we will telecast from the dashboard. It's very easy to compare, and it will be easy to telecast to the end-users.

I have been using Microsoft Endpoint Configuration Manager for five years.

Microsoft Endpoint Configuration Manager is a stable solution. There is nothing to worry about. When Microsoft pushes updates or patches, they will be in the W-Sync server. We have some people who will concentrate on Sync's parameters. Apart from that, everything is perfect.

Microsoft Endpoint Configuration Manager is a scalable solution.

From my point of view, I'm just giving 60% to 70% marks to those who support us with these issues. If there are any new issues, they will check in with the corresponding team, which takes some time. If there are issues with a single machine or server, or it affects the whole environment, they will analyze it from their end and provide a hotfix.

On a scale from one to five, I would give Microsoft technical support a four.

Positive

I would tell potential users that for 15,000 or 30,000 machines, you must go with Microsoft Endpoint Configuration Manager as it's the best tool. We can install the clients on all the end-user machines. All the data will be recorded in the Microsoft console itself. There's no need to worry if the patching activities will be hygienic, which will be very useful. 

You can go with another third-party software if you're just a small organization with 50-odd machines. The Microsoft license cost is relatively high, but everything will be perfect, stable, and reliable.

The initial setup is straightforward because Microsoft is always user-friendly. They will share the parameters, like troubleshooting steps and the pre-request. They will send the database knowledge-base document to us. It will be a step-by-step procedure. There won't be any worrying or alarming issues with Microsoft. If we have any problems, we will raise a ticket with Microsoft, and the team from Microsoft will help us. We can implement this solution within two or three hours, depending on the bandwidth speed.

On a scale from one to five, I will give the initial setup a four.

We implemented this solution.

The price could be better.

On a scale from one to ten, I would give Microsoft Endpoint Configuration Manager a nine.

SCCM is used in the insurance and public administration sector. We have various sized customers using it.

We are using the solutions for PC application inventories, patch management for new PC installation, PC reinstallation, and zero-day patching. We're using it to its full capabilities. It's a complete solution in the Microsoft environment.

SCCM has made it easy for our organization to personalize all the distribution schedules and how we want to distribute. It is very easy to manage, and there is a lot of option.

The most valuable feature of SCCM is the application distribution.

SCCM can improve on third-party application support.

The next features are coming through their newer solution Microsoft Intune or Microsoft Endpoint Configuration Manager (MECM).

I have been using Microsoft System Center Configuration Manager (SCCM) for approximately 15 years. 

SCCM is stable.

The scalability of SCCM is good, it can scale a lot. You can manage a very small environment and go up to a couple hundred thousand PCs.

The support we have received from Microsoft was excellent.

I did not use another similar solution to SCCM.

The SCCM deployment difficulty level and time frame are dependent on how large the deployment is. If it is a large company then it can be complex. It can range in time from a couple of hours to a couple of days to a couple of weeks.

SCCM is an old on-premise solution. We're moving through to MECM and that is a cloud-based solution to do similar functionality, such as Intune. SCCM is used at its most. We will not increase the use of SCCM.

We are consultants and we do all of the implementations of SCCM for our customers.

The number of staff we need for maintaining the solution depends don't the size of the company, but usually, we have two to three people.

The ROI has been very good from SCCM.

The price of SCCM depends on the size of the organization. The price is competitive.

I rate the price of SCCM a three out of five.

We did not choose SCCM. It's a solution that evolved, and at one point it changed its name.

My advice to others is to plan ahead and make sure to take into account everything that the solution can do because if you do not understand what the product can do, you will probably buy a lot of software to do what the solution is already doing. Understand all the features and how you will be able to use them.

The next features are coming through Microsoft Intune.

I rate Microsoft System Center Configuration Manager nine out of ten.

We use System Center Configuration Manager (SCCM) to manage workstations and servers in our Windows environment. We are primarily a Windows-only environment, which is what SCCM is designed to manage. It uses WMI underlying technology to ensure that it is compatible with all versions of Windows, from Windows XP to Windows 10. We use it to manage our Windows workstations and Servers. We use SCCM to do many things, like deploy operating systems, deploy applications, configure settings, gather compliance data, enforce software patching and run reports for software installations information.

We do not use it to do Mobile Device Management, though it does have that capability.

It does not manage products outside of Microsoft operating systems, so this product would be for Microsoft-heavy businesses.

Using SCCM allows our team to reimage a computer within an hour and have it ready to deploy to a user in less than a day. If we get a new workstation model, we can easily add drivers to the server and it will be compatible with our image. We can count on images and workstations having a specific configuration and having it enforced. It allows us to spend less time doing manual work and more time helping users. It also gives us good business intelligence through its reporting features.

• Deployment of a standardized operating system
• Application deployment to all domain machines
• Configurations enforcement
  
• Compliance data gathering

Ensuring configuration integrity across the domain is essential for maintaining an environment, so SCCM helps our company enforce a uniform configuration. SCCM’s ability to deploy applications to maintain updates and up-to-date software is also essential. Many vendors will not support end users if we are not on the latest software release, so this allows the IT department to control application versions and deployments. SCCM is also essential in maintaining WSUS updates, as those are a challenge to enforce as well.

SCCM is a pretty great product already. It has benefited greatly from having been around since its original incarnation as Small Business Server 2003. It would be cool if the SCCM client had some PowerShell cmdlets built into it, as managing clients remotely can be a pain without knowing the WMI calls to run remotely. Also, continued development PowerShell integration with the console (which they have already started developing).

Improperly set security settings can lead to console performance issues. SCCM client issues are also inevitable. We recently had to diagnose and fix downloading issues caused by older BranchCache issues with the old client. Otherwise, the client and server are very stable.

No. SCCM has the ability to be as big or as small as needed by the business. It can be used by businesses ranging from single office companies to massive international corporations.

N/A. SCCM is one of the most popular products on the market, so there are LOTS of online help articles for almost any problem you will have. I have never contacted their support because it's expensive, and I am stubborn and like to figure out problems myself.

N/A

The initial setup takes planning and careful consideration. It will also take input from your networking team, as it will take some router configuration to get PXE booting working. The overall design of the SCCM servers needs to be considered as well, as you can't change the big picture structure later. You have to decide if you want only a primary site or if you want a central administration hub with primary sites reporting to it, so it will take planning to setup.

Configuring the groups, collections, boundaries, and server roles takes time as well. It will also take an understanding of the business's needs and will require IT helpdesk input to be most effective.

Configuring applications and settings takes a bit less time once you have the underlying infrastructure setup, but SCCM doesn't really help you discover install commands outside of MSI or APPX packages. To be fair, there's not much they can do, but a technician will need to be aware of that.

I implemented it, so in-house. 

Microsoft has affordable pricing for Small to Medium Businesses, and it comes with many SMB packages already. It is worth investing in these, because the returns in automation and environmental integrity pay back the cost.

N/A

SCCM is a fantastic solution whose use is only limited by your creativity. Since it allows you to use PowerShell or VBScript to configure settings or execute procedures, a technician can make the any system do what they would like, provided they know how to do it programmatically. It can be a bit of a challenge to setup, configure, and maintain, but once you do, it will benefit you greatly. It is a complicated, complex product, so there is a learning curve, but that complexity is intrinsically linked to its ability to be a powerful tool. If setup improperly, SCCM can wipe out entire environments (don’t make an OS a required task sequence to all computers, for instance), but that is difficult to do.

Microsoft Configuration Manager helps with patch management. 

The tool's deployment is difficult. Microsoft needs to improve documentation with videos. 

I have been working with the product for ten years. 

Microsoft Configuration Manager is stable. We have experienced downtime from time to time. 

We use the tool's free license. It is expensive. 

I rate Microsoft Configuration Manager a six out of ten. 

We use Microsoft Configuration Manager for patch management. 

The product has improved time and security. 

Microsoft Configuration Manager is integrated with other Microsoft products. 

The product needs to improve scalability. 

I have been working with the product for three years. 

I rate Microsoft Configuration Manager a nine out of ten. 

I rate the tool's scalability an eight out of ten. 

The tool's deployment is easy. It takes between five to 25 minutes to complete. 

I rate Microsoft Configuration Manager a nine out of ten.