Try our new research platform with insights from 80,000+ expert users

AWS Config vs Microsoft Configuration Manager comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 12, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Intune
Sponsored
Ranking in Configuration Management
2nd
Average Rating
8.2
Reviews Sentiment
6.8
Number of Reviews
296
Ranking in other categories
Remote Access (1st), Enterprise Mobility Management (EMM) (1st), Unified Endpoint Management (UEM) (1st), Microsoft Security Suite (1st)
AWS Config
Ranking in Configuration Management
16th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
5
Ranking in other categories
No ranking in other categories
Microsoft Configuration Man...
Ranking in Configuration Management
3rd
Average Rating
8.2
Reviews Sentiment
6.4
Number of Reviews
83
Ranking in other categories
Software Distribution (1st), Server Monitoring (6th), Patch Management (1st)
 

Mindshare comparison

As of August 2025, in the Configuration Management category, the mindshare of Microsoft Intune is 9.9%, up from 9.7% compared to the previous year. The mindshare of AWS Config is 2.1%, up from 0.4% compared to the previous year. The mindshare of Microsoft Configuration Manager is 11.8%, down from 13.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Configuration Management
 

Featured Reviews

AkashKamble - PeerSpot reviewer
Enables management of multiple operating systems with a single license
The best feature is that it's a Microsoft product, so if anything goes wrong, we get quick support for anything required. Remote system functionality allows us to sit anywhere and take control of any device via remote management. We can enhance security for clients' laptops with built-in Microsoft Defender, which is available with the Microsoft Intune license. We use it for reporting purposes through endpoint analytics. When pushing scripting, there are two types available: remediation script and reservation script. Through endpoint analytics, you can push defender policies to clients. It helps with reporting, inventory updates, and monitoring tenant status health.
Dineshkumar Thulasiraman - PeerSpot reviewer
Useful for vulnerability scanning and data encryption
AWS Config's dashboard improved our company's security as it helps with the vulnerability scanning of resources. AWS Config integrates with the existing security infrastructure of our company, and it is an easy process that is not at all complicated. AWS Config is a security product. The tool protects its users' resources and data from unauthorized access, security breaches, and threats. The product helps with data encryption. You can have your data on AWS KMS, which helps with data encryption. For areas like SSL/TLS encryption, the tool offers data protection between AWS services and endpoints. As I need to learn the components of the product, I rate the overall tool a seven out of ten.
MikeNelson2 - PeerSpot reviewer
Deployment recovery works well but requires configuration improvements
While I do not use the product frequently, many issues were due to configuration rather than the product itself. I cannot give an exact recommendation as it is not my area of responsibility. The team that uses it finds it adequate. It is presently good enough for us not to investigate other options. Overall, I rate the product a six out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The interface is user-friendly, and the reporting tool works in real-time."
"It allows our clients to have the confidence to centrally manage policies for security. It helps them in securing the organization from a technology aspect."
"Intune can wipe devices. For example, if a disgruntled employee wants to leak the data on their company phone, Intune can terminate their access and wipe the entire device with a click."
"One of the biggest advantages of Microsoft Intune is that it brings the management of Windows, macOS, iOS, Android, and even Linux under a single pane of glass."
"We use a local Active Directory, but we weren't able to manage all our on-site systems without a solution like Intune, and we needed to deploy software like VPNs and other things. It's seamless now to to this through Intune."
"I like how Intune brings everything into one place. For example, you can set up conditional access to applications and devices inside Intune. I also like the segregation inside the Intune devices. You can segregate them by Windows, iOS, iPadOS, macOS, and Android. You can sort it by platform, so you don't need to go into the devices section."
"Once it is well integrated with the rest of the environment, it makes everything easy."
"Microsoft Intune policies, remote wipe, and using corporate and private profiles are valuable features, but MFA is the most valuable feature as it ensures that the end user is authentic."
"Installing the instances and performing upgrades is smooth and clean."
"The initial setup is super easy, it takes like two minutes. Literally a one-click deployment."
"The scalability is a ten out of ten."
"AWS Config's dashboard improved our company's security as it helps with the vulnerability scanning of resources."
"The solution is scalable and provides over 100 rules."
"The tool protects its users' resources and data from unauthorized access, security breaches, and threats."
"The solution is highly scalable."
"Microsoft Endpoint Configuration Manager is very scalable."
"It does the job and meets our needs. With everybody working remotely these days, we are using this solution to deploy everything. The deployment of PCs is easy."
"The most valuable feature of Microsoft Endpoint Configuration Manager is it's incredibly simple to configure and execute changes in bulk, allowing for seamless deployment. With this solution, you can easily track the status of all modifications and send them with ease, making it a comprehensive and efficient solution for any necessary adjustments."
"It is easy to install, and quick to deploy."
"It saves a lot of money when you can install things automatically and they are installed the exact same way on every computer."
"The most valuable feature of SCCM is the application distribution."
"The most valuable feature of Microsoft Endpoint Configuration Manager is patch management."
 

Cons

"Automatic updating is pretty rough. It doesn't give me as much control as I had in the past."
"There could be some kind of feature that supports a workgroup environment or a separate environment without the Entra ID."
"Integration with Mac devices requires some improvement."
"It should be easier to define policies and comply with those policies."
"I wanted to check if there is any provision at the Intune level to restrict certain things, such as a website, but unfortunately, that feature is available only in Microsoft Defender. Intune has web filtering capabilities, but they are only useful for protection from malicious websites, whereas we would like to be able to restrict a website. For example, YouTube is a clean website. No one would identify it as a malicious website, but if we want to stop the end-users from going to that website, we have to go for another product, such as Microsoft Defender or another third-party proxy solution. It would be great if this capability is included in Intune."
"The granular support for other device types in Microsoft Intune could be improved."
"From an end-user perspective of Microsoft Intune, I haven't experienced any challenges since installation. However, some customers have reported experiencing slowness when using lower versions of the Android system."
"The most important thing is reporting. They should improve their reporting. They should give a free hand to users. In SCCM, I can create my own reports. For example, in SCCM, I can create an inventory report for my PC or for all PCs, but in Intune, we don't have an option to create any report. Microsoft claims that Intune is a successor of SCCM, but SCCM is more powerful than Intune. So, they should develop Intune more and make it equivalent to SCCM. Then, their product will be great in the market."
"There is room for improvement in built-in tools, they are not up to the mark."
"The solution is missing a configuration that can assist us when writing our programming languages."
"Improvements are needed as per customer requirements."
"The reboot process for AWS instances could be improved. Microsoft Azure does not have this problem, so AWS could consider making their instances more robust. You would not need to reboot your instances frequently to replace the hardware and stuff. They can look for a better approach or mechanism to improve in the future. The concern is that you need to plan for the outage when you reboot an instance. You need to have a maintenance window where you can properly reboot the instance without affecting your application. When Amazon announces that you need to reboot an instance and are not ready, this becomes a problem."
"It would be better if reporting were more user-friendly. I would like to see an upgrade in the reporting structure in the next release. At the moment, you have to use an SQL query or configure it to pull reports through the graphical user interface. Their updates could be more regular. I think Mircosoft updates it every six months. They are also moving many things to Intune, and Microsoft decided to move the deployment solution there. I think SCCM is getting old, and Intune is new."
"There should probably be better remote support. They should also continue to improve on patch management, patching, and creating or turning products in software into deployable apps."
"With Microsoft Premier Support, you get what you pay for. There's Third Tier Support that you pay for. If you pay for that, you get excellent support, and if you don't pay for that, then you get the less experienced staff."
"The analysis is something that can be integrated. Their report analysis can be improved a little bit due to the fact that most of the time complaints policies are saved by the admins. It's something that we need to look into and search for."
"SCCM does not scale well, which is one of the reasons we are not going to continue to use it."
"There's no way to say, "I want this maintenance window to be on the second Tuesday of the month." It's strict. This window is this and that's it. You can't fluctuate."
"The tool's deployment can be cumbersome."
"Could do with some cosmetic improvements on the user interface."
 

Pricing and Cost Advice

"My team members bundled it together with their Microsoft solutions, including Microsoft 365 and related products."
"There is a license required to use the solution. If you're core users in Office 365, for example, you have Outlook email and E3 license, this is only email. You have to buy an EMS license to have Microsoft Intune. It is expensive."
"I liked the tool's pricing until P2 came into effect. I am unsure about the current value versus the cost of the new licensing model."
"Pricing depends on the features. Microsoft offers special packages if there are more than 10,000 users, and you may be able to get a reduced rate."
"The pricing needs improvement."
"Cost is not my department, but the product is included in the E5 license that we already pay for every user, so no additional cost is incurred."
"Microsoft Intune has a user-based subscription model. You can go for a monthly or a yearly payment."
"Every customer used to purchase licenses based on their needs."
"It is a very expensive tool. AWS pricing for Config is not fixed and depends on your organization's size and complexity."
"The solution charges us per hour. There's no license."
"The price is competitive and reasonable."
"It comes free with the Microsoft account. We have a yearly agreement, and all products are covered under it."
"The price of Microsoft Endpoint Configuration Manager is expensive."
"We use the tool's free license. It is expensive."
"The license price could be reduced for Microsoft Endpoint Configuration Manager They should make the price more affordable for smaller companies, most companies would be able to use the solution if it was priced better. There are more people on this cloud because you don't have to have either a server room or an on-premise server. You can have one IT person handle this without any local infrastructure."
"There is not a license needed to use the solution."
"Overall, I think it's fine. It's pretty much in-line because there are ways to offset it with the Office 365 licensing."
"Its price is okay because it is part of our licensing."
report
Use our free recommendation engine to learn which Configuration Management solutions are best for your needs.
865,384 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Financial Services Firm
10%
Manufacturing Company
9%
Government
8%
Financial Services Firm
23%
Photography Company
7%
Comms Service Provider
7%
Media Company
6%
Financial Services Firm
12%
Government
11%
Computer Software Company
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

How does Microsoft Intune compare with VMware Workspace One?
Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes ...
What are the pros and cons of Microsoft Intune?
Microsoft Intune is a great configuration management tool and has a lot of good things going for it. Here are some of...
How does Google Cloud Identity compare with Microsoft Intune?
Microsoft Intune offers not only an easy-to-deploy data protection and productivity management solution, but also ...
What do you like most about AWS Config?
The initial setup is super easy, it takes like two minutes. Literally a one-click deployment.
What needs improvement with AWS Config?
Improvements are needed as per customer requirements.
What is your primary use case for AWS Config?
I use the solution in my company to check the vulnerabilities for all the resources, including tools like S3, EC2 Ins...
How does Ansible compare to Microsoft Endpoint Configuration Manager (SCCM)?
Microsoft Endpoint Configuration Manager takes knowledge and research to properly configure. The length of time that ...
How to choose between ManageEngine Desktop Central and Microsoft Endpoint Configuration Manager (formerly SCCM)?
ManageEngine Desktop Central is very easy to set up, is scalable, stable, and also has very good patch management. Wh...
What do you like most about SCCM?
One of the standout features of SCCM is its application management capabilities. It allows us to create packages effi...
 

Also Known As

Intune, MS Intune, Microsoft Endpoint Manager
No data available
Microsoft Endpoint Configuration Manager, System Center Configuration Manager (SCCM ), Microsoft SMS
 

Overview

 

Sample Customers

Mitchells and Buzzers, Callaway
Flatiron, Prezi, iZettle, British Gas, Burt, Autodesk, FanDuel
Bank Alfalah Ltd., Wªrth Handelsges.m.b.H, Dimension Data, Japan Business Systems, St. Lucie County Public Schools, MISC Berhad
Find out what your peers are saying about AWS Config vs. Microsoft Configuration Manager and other solutions. Updated: July 2025.
865,384 professionals have used our research since 2012.