Try our new research platform with insights from 80,000+ expert users

AWS Config vs Microsoft Configuration Manager comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 15, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Intune
Sponsored
Ranking in Configuration Management
2nd
Average Rating
8.2
Reviews Sentiment
7.2
Number of Reviews
277
Ranking in other categories
Remote Access (1st), Enterprise Mobility Management (EMM) (1st), Unified Endpoint Management (UEM) (1st), Microsoft Security Suite (1st)
AWS Config
Ranking in Configuration Management
16th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
5
Ranking in other categories
No ranking in other categories
Microsoft Configuration Man...
Ranking in Configuration Management
4th
Average Rating
8.2
Reviews Sentiment
7.2
Number of Reviews
81
Ranking in other categories
Server Monitoring (7th), Patch Management (1st)
 

Mindshare comparison

As of July 2025, in the Configuration Management category, the mindshare of Microsoft Intune is 10.2%, up from 9.7% compared to the previous year. The mindshare of AWS Config is 2.2%, up from 0.5% compared to the previous year. The mindshare of Microsoft Configuration Manager is 11.9%, down from 13.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Configuration Management
 

Featured Reviews

Joseph Merusi - PeerSpot reviewer
Everything has worked better since we started using it
Sometimes the syncing is inconsistent. I'm confident that the devices are checking in every eight hours, but sometimes the devices aren't picking up the settings as quickly as I would expect. Some features haven't been updated in a while, and Microsoft doesn't seem interested in developing them. Unless you talk to an engineer, you don't know whether there will be an update. There are communication issues, so you might start working with a feature without knowing if it will be deprecated six months from now. Some reporting areas still need development. For example, I noticed that the reporting for driver updates is still confusing.
Dineshkumar Thulasiraman - PeerSpot reviewer
Useful for vulnerability scanning and data encryption
AWS Config's dashboard improved our company's security as it helps with the vulnerability scanning of resources. AWS Config integrates with the existing security infrastructure of our company, and it is an easy process that is not at all complicated. AWS Config is a security product. The tool protects its users' resources and data from unauthorized access, security breaches, and threats. The product helps with data encryption. You can have your data on AWS KMS, which helps with data encryption. For areas like SSL/TLS encryption, the tool offers data protection between AWS services and endpoints. As I need to learn the components of the product, I rate the overall tool a seven out of ten.
MikeNelson2 - PeerSpot reviewer
Deployment recovery works well but requires configuration improvements
While I do not use the product frequently, many issues were due to configuration rather than the product itself. I cannot give an exact recommendation as it is not my area of responsibility. The team that uses it finds it adequate. It is presently good enough for us not to investigate other options. Overall, I rate the product a six out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"For Windows services, there are multiple options within Intune to modernize it to be more internet-facing and dynamic."
"I find Microsoft Intune valuable primarily for its Windows management capabilities, along with its Android Enterprise and Apple device management for mobile devices."
"When managing a large number of devices in an organization, it becomes easy to handle them on one platform using Microsoft Intune."
"Intune's unified endpoint management platform is invaluable."
"Windows Autopatch is the most valuable because it removes the burden of patch management."
"The device profiling which uses the official Outlook email enabled us to control the screenshot feature and prevent copying outside of the organization's application."
"The tool's most valuable feature is Autopilot."
"Intune is valuable for managing various endpoints and integrating with the Azure cloud, which is essential for our organization."
"Installing the instances and performing upgrades is smooth and clean."
"The tool protects its users' resources and data from unauthorized access, security breaches, and threats."
"The solution is scalable and provides over 100 rules."
"AWS Config's dashboard improved our company's security as it helps with the vulnerability scanning of resources."
"The scalability is a ten out of ten."
"The initial setup is super easy, it takes like two minutes. Literally a one-click deployment."
"The most valuable feature of Microsoft Endpoint Configuration Manager is the software deployment. Additionally, Microsoft integrates most of the other solutions well with one another."
"It lets you know what your infrastructure is like and what state you are in."
"It uses detailed descriptions of the workstations, and that is good for me."
"Patching is very effective and reporting is very good."
"Valuable features include configurations enforcement, compliance data gathering, and deployment of a standardized OS."
"The scalability to deploy the package."
"It does the job and meets our needs. With everybody working remotely these days, we are using this solution to deploy everything. The deployment of PCs is easy."
"There is a faster time to rollout. If we get a new PC, it can be ready for productivity right away."
 

Cons

"It's the granularity: 'Is your firewall on? Is BitLocker on?' It's not amazing granularity. But I've looked into other products, like Duo, and they're all similar."
"We had an APNS certificate set to expire last week. We tried to renew it two days before it expired. We logged in to the APNS portal but could not find that certificate. We didn't know where it went. All the iOS devices stopped working. We contacted the Apple and Microsoft teams, and each blamed the other. This is something that Microsoft should take care of. Last week, we had so many escalations from high-profile users who couldn't access corporate data on their devices."
"Reporting in Microsoft solutions is pathetic. With Intune, I'm getting a free inventory tool, but I don't get a reporting tool. When I go to Intune, I can see one machine's entire data in terms of the hardware and the software running on it, but I cannot generate a report for all the machines in the organization. The reporting is the only feature holding back the functionality that is already there."
"The initial setup is a little bit complex."
"There should be more predictability in the release cycle. We don't feel we have any control over when new updates come out, and whether there are changes to the backend functionality or to the user interface. Updates just happen."
"I would like to see Intune improve its handling of hybrid domain joins."
"It's only good for a Microsoft environment."
"A feature I would want to see added in Microsoft Intune is the ability to manage other non-Microsoft devices."
"There is room for improvement in built-in tools, they are not up to the mark."
"Improvements are needed as per customer requirements."
"The reboot process for AWS instances could be improved. Microsoft Azure does not have this problem, so AWS could consider making their instances more robust. You would not need to reboot your instances frequently to replace the hardware and stuff. They can look for a better approach or mechanism to improve in the future. The concern is that you need to plan for the outage when you reboot an instance. You need to have a maintenance window where you can properly reboot the instance without affecting your application. When Amazon announces that you need to reboot an instance and are not ready, this becomes a problem."
"The solution is missing a configuration that can assist us when writing our programming languages."
"The solution should incorporate AI. It should also incorporate real-time capabilities. If we could get real-time information about challenges or issues, it would allow us to take immediate action. For example, with the recent outage caused by the Windows issue, having a real-time warning system could have helped us avoid or reduce the downtime we experienced."
"We'd like the solution to make it easier to manage remote users."
"They should improve their anti-malware policies like the SCEP policies. For instance, you can't have different policies for different servers, there is only one policy in all the servers, and everything is covered under that. For example, say you want to scan one group of servers on Saturday, and then you want to scan another group of servers on Sunday, you can't do that. You have to scan all your servers, a regular scan or a full scan, on the same day and at the same time. That's definitely one thing they need to resolve. In the next release, it would actually be nice if they included Apple products. It will also help if you can use Intune again. Their compliance reporting feature could also be better. They can maybe work a bit on that for patching now. It would be better if SCCM came with the functions of Right Click Tools built-in. If SCCM would have all those functions already built-in, we won't have to go and spend $5,000, just as an add-in from another company to get those functions."
"I want the system to provide some dependency relations. I would also like to see the relationship between different machines."
"The tool's deployment is difficult. Microsoft needs to improve documentation with videos."
"They need to improve the support for the Mac operating system."
"The operations could be faster and you need some patience with this tool."
"The tool's deployment is complex and depends on the architecture you want to implement."
 

Pricing and Cost Advice

"Most of our clients come to us with licensing already in place. On average, it costs $6 per device per month to add Intune to an Office 365 subscription, but I am not sure."
"If you're subscribing to Premium or E3, there are no additional costs for Intune, it's included."
"Intune is available as an individual product, but it also comes with Office 365 Premium or an Enterprise license, and the price varies for each version."
"We don't pay for Intune because it is bundled with the premium subscription to Office 365. It includes Intune and Defender. I don't have to buy two extra products to manage my enterprise."
"It is reasonable for the features it has."
"We work with the subscription rather than a server license. I think it's economical this way because we don't have to have a server license for that, and I think that works in our favor."
"Consider the Microsoft Enterprise Mobility Suite rather than choosing specific sub-components, e.g. only Microsoft Intune."
"Our Office 365 Business Premium license, including Office 365 and Intune Management, offers excellent value."
"It is a very expensive tool. AWS pricing for Config is not fixed and depends on your organization's size and complexity."
"The solution charges us per hour. There's no license."
"The solution is expensive. Microsoft Configuration Manager would likely be considered high-priced for small businesses because they may not fully utilize all of its features and capabilities."
"SCCM comes with its own version of SQL Server. If you use that SQL Server with SCCM and don't use it for another applications than you get an SQL Server for free."
"The price could be better."
"For enterprises, there is an annual license required to use this solution. The price of the solution could be cheaper. However, this is mostly because of the exchange rate from the dollar to the Nigerian currency."
"The price model is different for every client."
"We use the tool's free license. It is expensive."
"Pricing and licensing are a downside of SCCM. It's expensive. I'd have to confirm this, but I think they changed the licensing to core-based instead of socket-based. It's not cheap, because you have to buy the software, you have to buy SQL. Another thing we learned from talking to Microsoft is that they provide you a license for SQL if you run it on the same box as the primary server. If you run it outside that box, you have to buy SQL. Microsoft does recommend you running it on the same box because of performance. But then, in order to run SQL, SCCM, and everything on the same box, you better have some resources. It's an expensive solution. There's no doubt about it."
"There is an annual license needed to use the solution."
report
Use our free recommendation engine to learn which Configuration Management solutions are best for your needs.
860,168 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Financial Services Firm
9%
Educational Organization
9%
Manufacturing Company
8%
Financial Services Firm
25%
Photography Company
7%
Comms Service Provider
7%
Healthcare Company
7%
Financial Services Firm
12%
Computer Software Company
10%
Government
10%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

How does Microsoft Intune compare with VMware Workspace One?
Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes ...
What are the pros and cons of Microsoft Intune?
Microsoft Intune is a great configuration management tool and has a lot of good things going for it. Here are some of...
How does Google Cloud Identity compare with Microsoft Intune?
Microsoft Intune offers not only an easy-to-deploy data protection and productivity management solution, but also ...
What do you like most about AWS Config?
The initial setup is super easy, it takes like two minutes. Literally a one-click deployment.
What needs improvement with AWS Config?
Improvements are needed as per customer requirements.
What is your primary use case for AWS Config?
I use the solution in my company to check the vulnerabilities for all the resources, including tools like S3, EC2 Ins...
How does Ansible compare to Microsoft Endpoint Configuration Manager (SCCM)?
Microsoft Endpoint Configuration Manager takes knowledge and research to properly configure. The length of time that ...
How to choose between ManageEngine Desktop Central and Microsoft Endpoint Configuration Manager (formerly SCCM)?
ManageEngine Desktop Central is very easy to set up, is scalable, stable, and also has very good patch management. Wh...
What do you like most about SCCM?
One of the standout features of SCCM is its application management capabilities. It allows us to create packages effi...
 

Also Known As

Intune, MS Intune, Microsoft Endpoint Manager
No data available
Microsoft Endpoint Configuration Manager, System Center Configuration Manager (SCCM )
 

Overview

 

Sample Customers

Mitchells and Buzzers, Callaway
Flatiron, Prezi, iZettle, British Gas, Burt, Autodesk, FanDuel
Bank Alfalah Ltd., Wªrth Handelsges.m.b.H, Dimension Data, Japan Business Systems, St. Lucie County Public Schools, MISC Berhad
Find out what your peers are saying about AWS Config vs. Microsoft Configuration Manager and other solutions. Updated: June 2025.
860,168 professionals have used our research since 2012.