We performed a comparison between BigFix and Microsoft Endpoint Configuration Manager based on our users’ reviews in four categories. After reading all of the collected data, you can find our conclusion below.
Comparison Results: Based on the above variables, we would conclude that BigFix slightly edges out Microsoft Endpoint Configuration Manager. Our users find that Microsoft Endpoint Configuration Manager is harder to use and its support is less effective.
"The biggest thing for us is enforcing logins only from devices that are managed by Intune."
"The Asset Management and Auto Pilot are valuable features."
"Microsoft's cloud comes with a lot of extra features that are free of charge."
"It is very easy to use. It has a very easy interface."
"The most important thing for me is the autopilot feature."
"Agile and easy to deploy MDM solution that covers the maximum number of policies. Stable, scalable, and with knowledgeable technical support."
"It's really easy to access."
"The solution has reduced the risk of security breaches by 30%."
"I’ve found patching to be the most valuable feature of the solution."
"We are able to go from patching thousands of machines by twenty to thirty people to one person."
"The architecture for patching and the 100% correct reporting makes BigFix stand apart from other solutions."
"It is a one-stop tool that allows you to do everything. It supports reporting, vulnerability management, patch management, and configuration. All things can be done in one tool."
"What I like most is that it is a powerful solution."
"DOWNLOADING-PATCHES; It has also helped to reduce network traffic when it comes to downloading patches. By only having to download the patch once to the central location and then utilizing the relay structure to then download the patch to a specific site and then everything gathering at local, it greatly reduces the bandwidth of multiple endpoints."
"It's very straightforward."
"Desktop patching is the most valuable feature, because with servers, we have complete control over them, and we can simply push patches to the servers."
"We are happy with the collaboration of SCCM with Patch My PC, which allows us to do patch work."
"Microsoft Configuration Manager gives different tools in one solution."
"Patching is the main feature because SCCM is made to control the entire environment without manually interpreting. So it is good to use for patching."
"You can remote control or RDP. That has been the most valuable because we can go into one console and can get to anything we want. Instead of going to all these different consoles, we centralized everything."
"The technical support is good."
"Microsoft Endpoint Configuration Manager is valuable in keeping our systems updated. We are able to send updates to all the systems. Additionally, the Intune integration is helpful."
"The most valuable feature of Microsoft Endpoint Configuration Manager is it's incredibly simple to configure and execute changes in bulk, allowing for seamless deployment. With this solution, you can easily track the status of all modifications and send them with ease, making it a comprehensive and efficient solution for any necessary adjustments."
"What's valuable is the basic management of the systems, being able to control who can access the systems."
"It would be great if Intune offered better data protection controls for BYOD Windows PCs."
"There should be more support for macOS. Even though macOS is supported by Intune and Microsoft is working very hard to get more features into Intune to manage macOS, that's one thing they can give a lot more attention to."
"The synchronization could be improved."
"There is room for improvement, particularly in terms of compatibility, extending beyond the well-known major brands."
"Some enrollment features could be improved."
"We only have major classifications for iOS and Android, but there are different brands that have different cycles of updates. If they can fine-tune it to make it more brand-specific, that would be even better."
"Reporting in Microsoft solutions is pathetic. With Intune, I'm getting a free inventory tool, but I don't get a reporting tool. When I go to Intune, I can see one machine's entire data in terms of the hardware and the software running on it, but I cannot generate a report for all the machines in the organization. The reporting is the only feature holding back the functionality that is already there."
"Microsoft Intune is not user-friendly to manage and has room for improvement."
"I want to see a solution for being able to deploy automated software to a Mac running OS X 10.13, something that's going to deal with kernel exceptions and answering prompts for user permissions for data folders and whatnot. They need to really streamline and automate the Mac software deployment."
"The only thing that I don't like about BigFix is that it does not support other devices such as printer firmware, router firmware, and things like that. I will be happy if I can control everything and get everything else in there, even if it is just a line item. They can do some enhancements to the Web UI. I am trying to get customers to be able to manage their environment by using Web UI, and it would be good if we can delete endpoints by using Web UI. We should also be able to generate Excel content or data tables from the Web UI without having to go to the console. It is small stuff, and it drives me crazy that I have to go to another console to do these things."
"Sometimes there is a lag time for our users."
"I'd like to see better integration, with the different applications within BigFix. Instead of sometimes feeling like four or five different applications, they need to be integrated a little better within themselves."
"In order to derive maximum benefit from BigFix, it is essential that we configure all of its features and implement them effectively. If the automation could be improved we would be able to mitigate the risks associated with zero-day threats."
"IBM has not focused on the Web Reports capabilities."
"I would like to see SDK for Web UI included in the next release."
"The BigFix Inventory could have an increased scope regarding the tools that can be detected. It does not cover all the possible software installed in Asset."
"There's no way to say, "I want this maintenance window to be on the second Tuesday of the month." It's strict. This window is this and that's it. You can't fluctuate."
"Cloud-based improvements need to be better managed."
"There is a reboot issue with the patching. Sometimes, if patching runs into any issue whatsoever, it doesn't reboot but it doesn't tell you it errored out. It just sits there and we don't find out until the next day whether it patched or not. That was a big issue for us. We're working through that. They added some stuff in there now where you can actually tell reboot is pending. But we still need some kind of notification that if something fails or is pending, we know. We shouldn't have to go in and look. They don't have anything for that right now."
"It is a bit of an old and outdated product."
"Based on my experience with SCCM 2016, the main, big issue is not having a good user-friendly environment. It needs much better GUI."
"The ability to integrate MDM would be great."
"There is no asset management package included."
"In terms of the monitoring, the timeframe it takes to actually report back on the compliance of a device after it has been patched is a bit too long."
More Microsoft Configuration Manager Pricing and Cost Advice →
BigFix is ranked 5th in Configuration Management with 91 reviews while Microsoft Configuration Manager is ranked 2nd in Configuration Management with 78 reviews. BigFix is rated 8.6, while Microsoft Configuration Manager is rated 8.2. The top reviewer of BigFix writes "Very stable and easy to deploy with excellent patch compliance". On the other hand, the top reviewer of Microsoft Configuration Manager writes "Seamless system updates, useful integration, and reliable". BigFix is most compared with Microsoft Windows Server Update Services, Red Hat Ansible Automation Platform, Tanium, ManageEngine Patch Manager Plus and Red Hat Satellite, whereas Microsoft Configuration Manager is most compared with Red Hat Ansible Automation Platform, ManageEngine Endpoint Central, Tanium, AWS Systems Manager and Red Hat Satellite. See our BigFix vs. Microsoft Configuration Manager report.
See our list of best Configuration Management vendors and best Patch Management vendors.
We monitor all Configuration Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
SCCM is very robust but you need more time and people to manage it.
For a company of 200 employees only can use something easier to manage such as PDQ deployment S/W. it's a lot cheaper and easier to manage.
Kumar.
We have 1500 users and even with a reasonable sized support team we find SCCM difficult to manage. I haven't experienced the other solutions, but I suspect you will be better placed with an alternative to SCCM.
Before answering to your needs, we need to understand that there are two distinctive features from SCCM and BigFix.
SCCM since 2020 has stopped its support for Linux Patching, so in its entirety, if you are only using Windows, you might consider SCCM. It still support Mac with basic features, but it depends on your requirements. Again, the operation with SCCM is also not easy at all.
Bigfix on the other side is a solution to manage different types of OS, as we say it distributed environment. Windows, Linux, Mac, etc. Bigfix is mainly used in large companies with more than 1000+ employees. It is not cheap as Bigfix is a robust enterprise solution.
You might want to consider other automated patch management tools such as LANDesk or Managed Engine which has been seen in deployment in smaller enterprises.
Cheers,
Rendy
Hi Ihsan,
Hope you are doing well, As per my experience to deploy SCCM for 200 users is not worth it, you want to be blessed use Quest product KACE System Management Appliance, easy to manage and upgrade (patching/managing end point managing and many more).
https://www.itcentralstation.c...
Thank you.