Try our new research platform with insights from 80,000+ expert users

AWS Config vs Microsoft Configuration Manager comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 22, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Intune
Sponsored
Ranking in Configuration Management
2nd
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
334
Ranking in other categories
Remote Access (2nd), Enterprise Mobility Management (EMM) (1st), Unified Endpoint Management (UEM) (1st), Microsoft Security Suite (1st)
AWS Config
Ranking in Configuration Management
18th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
5
Ranking in other categories
No ranking in other categories
Microsoft Configuration Man...
Ranking in Configuration Management
3rd
Average Rating
8.2
Reviews Sentiment
6.6
Number of Reviews
86
Ranking in other categories
Software Distribution (1st), Server Monitoring (6th), Patch Management (2nd)
 

Mindshare comparison

As of March 2026, in the Configuration Management category, the mindshare of Microsoft Intune is 6.9%, down from 10.1% compared to the previous year. The mindshare of AWS Config is 2.3%, up from 1.5% compared to the previous year. The mindshare of Microsoft Configuration Manager is 8.8%, down from 13.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Configuration Management Mindshare Distribution
ProductMindshare (%)
Microsoft Intune6.9%
Microsoft Configuration Manager8.8%
AWS Config2.3%
Other82.0%
Configuration Management
 

Featured Reviews

AkashKamble - PeerSpot reviewer
Sr MacOS specialist engineer at Cyber24
Enables management of multiple operating systems with a single license
The best feature is that it's a Microsoft product, so if anything goes wrong, we get quick support for anything required. Remote system functionality allows us to sit anywhere and take control of any device via remote management. We can enhance security for clients' laptops with built-in Microsoft Defender, which is available with the Microsoft Intune license. We use it for reporting purposes through endpoint analytics. When pushing scripting, there are two types available: remediation script and reservation script. Through endpoint analytics, you can push defender policies to clients. It helps with reporting, inventory updates, and monitoring tenant status health.
Dineshkumar Thulasiraman - PeerSpot reviewer
Cloud Engineer at cloudifyops
Useful for vulnerability scanning and data encryption
AWS Config's dashboard improved our company's security as it helps with the vulnerability scanning of resources. AWS Config integrates with the existing security infrastructure of our company, and it is an easy process that is not at all complicated. AWS Config is a security product. The tool protects its users' resources and data from unauthorized access, security breaches, and threats. The product helps with data encryption. You can have your data on AWS KMS, which helps with data encryption. For areas like SSL/TLS encryption, the tool offers data protection between AWS services and endpoints. As I need to learn the components of the product, I rate the overall tool a seven out of ten.
NS
Senior System Engineer at a tech services company with 10,001+ employees
Centralized endpoint control has streamlined deployments and improved security compliance
In my experience, the best features of Microsoft Configuration Manager are software deployments and updates, OSD, hardware and software inventory, compliance and configuration baseline, reporting and monitoring, and integration with Intune hybrid management. These features make endpoint management efficient and scalable. The feature I rely on the most day-to-day is software deployment and patch management. It keeps endpoints updated and secure with minimal manual effort. Inventory and compliance monitoring are also important, but daily deployments are critical. Microsoft Configuration Manager has had a significant positive impact on our organization in several ways: improved efficiency, enhanced security and compliance, standardization, scalability, and visibility reporting. Overall, Microsoft Configuration Manager has helped us save time, reduce risk, improve operational efficiency, and maintain strong control over our endpoints. One of the biggest impacts Microsoft Configuration Manager has had on efficiency is the reduced manual work for software deployment and patching. For example, deploying a new application or security updates to hundreds or thousands of devices previously required several days of manual effort, including running scripts, checking devices individually, and validating installation. With Microsoft Configuration Manager, these tasks are automated and managed, allowing deployments to complete in hours rather than days. We also have automated reporting for deployment success and compliance which saved the IT team significant time that used to be spent gathering and reconciling inventory data from multiple tools.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I appreciate how easy it is to deploy certificates to end users to get control over their device with Microsoft Intune; that's what Microsoft Intune is known for, and that's what we use them for."
"When a user receives the machine, sets it up, and turns it on, it connects to the domain and begins installing software, becoming ready within approximately half an hour, which represents a significant time savings for IT departments."
"Within Intune, managing policies and having a consistent way to manage devices is valuable."
"Compliance and the policies that can be set are the most valuable features."
"I have seen a return on investment right from the start of the tool's usage."
"The user experience is good; we could work and deploy many controls through Microsoft Intune."
"The most valuable features in Microsoft Intune for me are application deployment, Defender deployment, and asset management."
"The most useful features in Microsoft Intune are the policy enforcement and conditional access."
"The solution is scalable and provides over 100 rules."
"The scalability is a ten out of ten."
"AWS Config's dashboard improved our company's security as it helps with the vulnerability scanning of resources."
"Installing the instances and performing upgrades is smooth and clean."
"The initial setup is super easy, it takes like two minutes. Literally a one-click deployment."
"The tool protects its users' resources and data from unauthorized access, security breaches, and threats."
"The major features of this product are the reporting tools. The most valuable features are package deployment and application deployment. Security management is also good because any vulnerability will be identified, and you can fix it. It's the best tool because you never know what kind of client you will have. For example, you may have your offices in low bandwidth remote areas. But it's achievable because it accommodates the bandwidth that you have available. Microsoft Endpoint Configuration Manager is an excellent reporting tool for your environment. If you want to know the details about the hardware configuration, software configuration, what is causing a problem, or when a new feature update comes in for Windows, even that goes on SCCM itself. A lot of deployment stuff."
"The tool's most valuable features are easy patch management and software deployment."
"It is a good choice for deployment that performs very well."
"This solution helps us by automating the patching of our system."
"I find the product valuable for deployment recovery and it has done much more than that."
"The solution doesn't require any maintenance from our end because it is a cloud-based solution and Microsoft takes care of everything."
"By putting this solution in place and ensuring that the latest security patches are installed, you are no longer vulnerable to this virus and your computer operates at an optimal speed, so you maintain security and the best performance of your systems."
"The product is very stable compared to older versions."
 

Cons

"We would like to see support for Chrome and/or devices for Chromebooks."
"Sometimes, it takes time to synchronize the policies between the portal and the devices, you don't have a way to estimate how long it will take to deploy. You have some kind of gray area, where it can deploy in 30 minutes or three days."
"Areas for improvement in Intune include expanding support beyond Samsung devices to accommodate other Android manufacturers like Redmi and Motorola."
"Automatic updating is pretty rough. It doesn't give me as much control as I had in the past."
"The reports that are generated aren't so great. They don't give a lot of meaning so far, but that could be down to user knowledge than the actual reporting side of things. I'm not a big user of it, but I was a bigger user of MaaS360, and we used to be able to run weekly and monthly reports. In the case of any deviations. we'd get a warning immediately. That's not so easy to do or to get in place for Intune. This could be just a user issue, but when I compare both, that's the only thing that's lacking for me."
"Intune could be improved by organizing different solutions, like Defender and Sentinel, into a single package. This would allow us to focus on security while Microsoft manages other areas. Having a unified solution would drive better management of various sectors. Although the Intune user experience is good, we should continue enhancing it."
"Microsoft Intune could improve by being more user-friendly and having it geared toward device management. The graphic interface is not very good."
"Onboarding of endpoint devices is not straightforward. The onboarding process was a little heavier than I thought it would be. That's the key improvement area. Obviously, the more control you have over the devices, the better it is."
"Improvements are needed as per customer requirements."
"The solution is missing a configuration that can assist us when writing our programming languages."
"There is room for improvement in built-in tools, they are not up to the mark."
"The reboot process for AWS instances could be improved. Microsoft Azure does not have this problem, so AWS could consider making their instances more robust. You would not need to reboot your instances frequently to replace the hardware and stuff. They can look for a better approach or mechanism to improve in the future. The concern is that you need to plan for the outage when you reboot an instance. You need to have a maintenance window where you can properly reboot the instance without affecting your application. When Amazon announces that you need to reboot an instance and are not ready, this becomes a problem."
"I would like to see more automation."
"In terms of the monitoring, the timeframe it takes to actually report back on the compliance of a device after it has been patched is a bit too long."
"The setup was complex and I faced a lot of problems initially because I was new to the solution."
"This solution needs to be supported on all Operating systems."
"Marketing: Our management doesn't understand that there is a piece of software which helps them automate and manage the entire network, as far as operating systems on computers."
"It would be better if automation options were available. For example, in Nexthink or SysTrack, there is an analytical tool. Creating dashboards would be very easy if you implement the same thing in Microsoft. That report will be a daily cost to the customers and good revenue for our organization. The price also could be better. In the next release, we need to include some features like tables, dashboards, surveys, services, and metrics in the dashboard. Whatever we are implementing will be downloaded by a report. Apart from the report, we will telecast from the dashboard. It's very easy to compare, and it will be easy to telecast to the end-users."
"Its dashboard can be improved and made a little bit better."
"This solution should be simpler, and more consistent across modules/sections."
 

Pricing and Cost Advice

"No one can compete with Microsoft when it comes to price, and the features it is offering."
"They have categorized the licenses according to the size of the business. So, if it's a smaller organization, we can choose the license accordingly. If it's a big organization, then we can choose accordingly. Everything is clearly mentioned, and we can decide. It's suitable for all kinds of infrastructure, and that's very goo"
"The purchase of the product was handled by someone else."
"Generally, we get favorable discounts, so it's not too bad. Obviously, we're looking at decreasing those wherever we can to bring value back to the public purse because it's all charity based. It's all publicly funded."
"Microsoft Intune is available for individual purchase at a low per-device cost."
"The pricing is inherently reasonable, as Microsoft leverages market insights to maintain the total cost of ownership at around ninety to ninety-five percent of what would be incurred in an on-premise scenario."
"Its price is in the medium range. It is acceptable because you're paying for the features. I am not aware of any additional costs."
"It's affordable. In comparison to the competitors, the price depends on what features you need from Intune, but it's affordable. There are no hidden costs, but there are some features that go for a premium price. Those are the add-ons for which you have to pay extra."
"The solution charges us per hour. There's no license."
"It is a very expensive tool. AWS pricing for Config is not fixed and depends on your organization's size and complexity."
"SCCM comes with its own version of SQL Server. If you use that SQL Server with SCCM and don't use it for another applications than you get an SQL Server for free."
"Microsoft provides a steep price for their enterprise products, but they offer very competitive pricing for their legacy customers."
"There is not a license needed to use the solution."
"Overall, I think it's fine. It's pretty much in-line because there are ways to offset it with the Office 365 licensing."
"We have a support license from Microsoft Endpoint Configuration Manager and the overall price of the solution is reasonable."
"Presently, I am using a free trial version."
"The price could be better."
"Its licensing is quite complicated because we are getting the license not only for SCCM but for the full Microsoft package. We don't need to pay for a separate license. We need to have one license that includes everything we need, such as Windows, Microsoft 365, SCCM, encryption, and so on. So, we don't have a specific price for it. Perhaps, it is good that it includes the full suite of licensing of Microsoft. It is expensive, but we are getting a lot of features."
report
Use our free recommendation engine to learn which Configuration Management solutions are best for your needs.
884,933 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
10%
Computer Software Company
10%
Financial Services Firm
9%
Government
8%
Financial Services Firm
20%
Comms Service Provider
11%
Photography Company
6%
Manufacturing Company
6%
Financial Services Firm
11%
Government
10%
Computer Software Company
7%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business124
Midsize Enterprise53
Large Enterprise168
No data available
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise13
Large Enterprise66
 

Questions from the Community

How does Microsoft Intune compare with VMware Workspace One?
Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes ...
What are the pros and cons of Microsoft Intune?
Microsoft Intune is a great configuration management tool and has a lot of good things going for it. Here are some of...
How does Google Cloud Identity compare with Microsoft Intune?
Microsoft Intune offers not only an easy-to-deploy data protection and productivity management solution, but also ...
What needs improvement with AWS Config?
Improvements are needed as per customer requirements.
What is your primary use case for AWS Config?
I use the solution in my company to check the vulnerabilities for all the resources, including tools like S3, EC2 Ins...
What advice do you have for others considering AWS Config?
AWS Config's dashboard improved our company's security as it helps with the vulnerability scanning of resources. AWS ...
How does Ansible compare to Microsoft Endpoint Configuration Manager (SCCM)?
Microsoft Endpoint Configuration Manager takes knowledge and research to properly configure. The length of time that ...
How to choose between ManageEngine Desktop Central and Microsoft Endpoint Configuration Manager (formerly SCCM)?
ManageEngine Desktop Central is very easy to set up, is scalable, stable, and also has very good patch management. Wh...
What do you like most about SCCM?
One of the standout features of SCCM is its application management capabilities. It allows us to create packages effi...
 

Also Known As

Intune, MS Intune, Microsoft Endpoint Manager
No data available
Microsoft Endpoint Configuration Manager, System Center Configuration Manager (SCCM ), Microsoft SMS
 

Overview

 

Sample Customers

Mitchells and Buzzers, Callaway
Flatiron, Prezi, iZettle, British Gas, Burt, Autodesk, FanDuel
Bank Alfalah Ltd., Wªrth Handelsges.m.b.H, Dimension Data, Japan Business Systems, St. Lucie County Public Schools, MISC Berhad
Find out what your peers are saying about AWS Config vs. Microsoft Configuration Manager and other solutions. Updated: March 2026.
884,933 professionals have used our research since 2012.