We performed a comparison between BigFix and Microsoft Endpoint Configuration Manager based on our users’ reviews in four categories. After reading all of the collected data, you can find our conclusion below.
Comparison Results: Based on the above variables, we would conclude that BigFix slightly edges out Microsoft Endpoint Configuration Manager. Our users find that Microsoft Endpoint Configuration Manager is harder to use and its support is less effective.
"If you need only to load a specific profile and you don't have deep security functionalities, et cetera, Intune is very nice and good."
"I like the tool's integration with Apple. Anyone who creates an ID in Intune will get an Apple ID."
"I would say the biggest benefit is the single-pane view. There's no jumping around multiple UI's to do your overall management."
"It's normally able to meet 100% expectations of our customers."
"It's easy to deploy a configuration or policy to a system, especially when you don't have Azure AD. Now we are talking to all these small and medium-sized customers who don't necessarily have an on-premise Windows Active Directory. If they have invested in Office 365 Premium, this functionality becomes available to them."
"The most valuable features in Microsoft Intune for me are application deployment, Defender deployment, and asset management."
"The standout features of Intune are its excellent mobile device management and highly effective application management capabilities."
"We have not experienced any bugs or glitches with this solution."
"One of the biggest benefits BigFix has had for our organization is the ease and efficiency to perform many different tasks, across pillars and platforms, all from one pane of glass."
"It is for multiple use cases. A lot of people are looking at it just for security, and that's really endpoint security. The endpoint management part of it in terms of being able to constantly do patching for Windows, Unix, macOS, Cloud, Raspberry, VMware, and all Linux flavors is important, and they are very good at that. They have support for virtually every OS on the market."
"I like the inventory and life cycle management feature."
"It's enabled us to have a highly successful endpoint patching program for the past decade. It's been enormously successful there. It's also become a core part of many of our business processes, from compliance monitoring of endpoints, encryption management, key escrow, and local administrator password escrow. It's built into our inventory. It's very much everywhere."
"It has plugins development options, which are great."
"BigFix technical support is good."
"It has improved reliability upon delivery of software and has also helped reduce software expenses. The extensibility of BigFix helps to create custom solutions where we may have considered purchasing something instead."
"It enables us to patch our systems quickly and within expectations and to increase our volume as needed. It has also helped us compress our patch sites. We used to do it monthly but now we do it weekly."
"I like Mircosoft's technical support. Microsoft has a few updates, like some of the critical KBs. They are published within the interval time, and in case of an escalation on the client missions, we will raise a ticket with the Microsoft team. They will create a hotfix or a critical update. They will chat with us, and that is one thing I like about Microsoft. Whenever any issues occur at my organization, they will help you out soon as possible within the SLA."
"There have to be made some improvement in WSUS and control in other non-Microsoft products updates."
"SCCM does everything from A to Z for a Windows operating system."
"Patching is very effective and reporting is very good."
"It's helped us solve problems surrounding patching, installing, and reporting different patches, etc., on the virtual machines."
"With the SCCM inventory, we found a lot of rogue applications. We were able to identify them, find out who was running them, and either put them on our application list or remove them."
"The scalability to deploy the package."
"It is a very good solution. It has a good interface and is easy to use. On top of that, it is very reliable in terms of distribution as well as getting the report."
"Could benefit from user having more control over devices."
"Reporting could be improved. It needs to be more expensive and robust."
"China blocks Google and Google Play Store, which makes installation challenging. Microsoft Intune is a company software, which has to be installed to the app portal or Microsoft Software Center."
"The current Intune reporting functionality could benefit from some improvements."
"Sometimes, updating a client policy is very difficult. This needs to be improved."
"Reporting and troubleshooting for the application deployment could be better. It's very difficult to understand."
"A new Intune feature allows application packaging, but it incurs additional licensing costs for a significant number of applications."
"Intune could add more Linux security features and more integration with on-prem devices. The application deployments can also be improved."
"I'd like to see better API integration with BigFix. We have some tremendous API capability inside of CyFIR and the ability to take textual search results, for example, and bring that back into the BigFix dashboard. This would be of extreme interest to us and our customers."
"I would like better support on the backend."
"Its pricing should be improved. It is too costly."
"Sometimes there is a lag time for our users."
"The deployment has room for improvement and can be more streamlined."
"In-place and OS upgrades can be improved."
"I would like to see API connectivity, built-in API connectors to the standard toolsets, whether it's for your ServiceNow or your Qualys. More API connectivity to make it easier to integrate to other tools."
"The stability is generally pretty good. The one thing that we came across is the battle between load on endpoints and load on our servers and relays versus how quickly, effectively and reliably actions can be taken. I'd like to not have to take an action on a system while I'm working with someone and then have to say whether something will happen between five seconds or thirty minutes from that point."
"Could do with some cosmetic improvements on the user interface."
"I currently need to increase my compliance level in the patching processes which this solution could improve on."
"As far as load balancing across, they don't have that support yet, so that you can actually build multiple primaries and have it load balance across. They don't have any of that functionality yet. That would be a nice feature, to scale that way."
"The deployment process is lengthy and should be quicker to complete."
"Cloud-based improvements need to be better managed."
"On some hardware, we'd like an easier way to get peripherals attached."
"Its client interface should be more accessible, and the notifications should be more customizable from the console. It should be more user friendly and have some kind of customized notifications so that we can use it on the client side. These are the reasons why we restricted its use only for the server environment and didn't use it on the client side."
"The reports are too busy. They could be simpler. I'm a technician, so I don't care how pretty the reports look. They should be easy to read. I'm designing this for production folks. They need to read the reports quickly when they're patching in the middle of the night."
More Microsoft Configuration Manager Pricing and Cost Advice →
BigFix is ranked 5th in Configuration Management with 91 reviews while Microsoft Configuration Manager is ranked 2nd in Configuration Management with 78 reviews. BigFix is rated 8.6, while Microsoft Configuration Manager is rated 8.2. The top reviewer of BigFix writes "Very stable and easy to deploy with excellent patch compliance". On the other hand, the top reviewer of Microsoft Configuration Manager writes "Seamless system updates, useful integration, and reliable". BigFix is most compared with Microsoft Windows Server Update Services, Red Hat Ansible Automation Platform, Tanium, ManageEngine Patch Manager Plus and Red Hat Satellite, whereas Microsoft Configuration Manager is most compared with Red Hat Ansible Automation Platform, ManageEngine Endpoint Central, Tanium, AWS Systems Manager and Red Hat Satellite. See our BigFix vs. Microsoft Configuration Manager report.
See our list of best Configuration Management vendors and best Patch Management vendors.
We monitor all Configuration Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
SCCM is very robust but you need more time and people to manage it.
For a company of 200 employees only can use something easier to manage such as PDQ deployment S/W. it's a lot cheaper and easier to manage.
Kumar.
We have 1500 users and even with a reasonable sized support team we find SCCM difficult to manage. I haven't experienced the other solutions, but I suspect you will be better placed with an alternative to SCCM.
Before answering to your needs, we need to understand that there are two distinctive features from SCCM and BigFix.
SCCM since 2020 has stopped its support for Linux Patching, so in its entirety, if you are only using Windows, you might consider SCCM. It still support Mac with basic features, but it depends on your requirements. Again, the operation with SCCM is also not easy at all.
Bigfix on the other side is a solution to manage different types of OS, as we say it distributed environment. Windows, Linux, Mac, etc. Bigfix is mainly used in large companies with more than 1000+ employees. It is not cheap as Bigfix is a robust enterprise solution.
You might want to consider other automated patch management tools such as LANDesk or Managed Engine which has been seen in deployment in smaller enterprises.
Cheers,
Rendy
Hi Ihsan,
Hope you are doing well, As per my experience to deploy SCCM for 200 users is not worth it, you want to be blessed use Quest product KACE System Management Appliance, easy to manage and upgrade (patching/managing end point managing and many more).
https://www.itcentralstation.c...
Thank you.