BigFix vs Chef vs Microsoft Configuration Manager comparison

You must select at least 2 products to compare!
Microsoft Logo
6,020 views|4,184 comparisons
HCL Logo
8,211 views|4,764 comparisons
Chef Logo
Read 18 Chef reviews
1,323 views|912 comparisons
Comparison Buyer's Guide
Executive Summary

We performed a comparison between BigFix, Chef, and Microsoft Configuration Manager based on real PeerSpot user reviews.

Find out what your peers are saying about Red Hat, Microsoft, HCL and others in Configuration Management.
To learn more, read our detailed Configuration Management Report (Updated: November 2023).
745,775 professionals have used our research since 2012.
Featured Review
"The ability to switch between Affinity and non-Affinity enrollment is great.""I can see that the patch management process is much improved with the bundled patch management option available in Microsoft Intune compared to the KPI deployment required by the other deployment solutions.""The ability to wipe data from and reset devices is one of the most important and valuable features. If a device is reported stolen, we can freeze it or wipe the data from it, preventing data leakage.""The initial setup is not complex.""It is a very stable and scalable cloud-only solution.""We use a local Active Directory, but we weren't able to manage all our on-site systems without a solution like Intune, and we needed to deploy software like VPNs and other things. It's seamless now to to this through Intune.""The solution is easy to use and it has good performance.""The device profiling which uses the official Outlook email enabled us to control the screenshot feature and prevent copying outside of the organization's application."

More Microsoft Intune Pros →

"The most valuable feature of BigFix is the reporting tool and patching Windows.""It is for multiple use cases. A lot of people are looking at it just for security, and that's really endpoint security. The endpoint management part of it in terms of being able to constantly do patching for Windows, Unix, macOS, Cloud, Raspberry, VMware, and all Linux flavors is important, and they are very good at that. They have support for virtually every OS on the market.""The technical support for BigFix is really amazing.""I’ve found patching to be the most valuable feature of the solution.""The most valuable features are patch management, software installation, and asset management.""The most valuable and essential features of BigFix are all of them, they are needed when serving the purpose of the desktop operation framework. We cannot run operations without patching or without having an appropriate mechanism for deploying software, et cetera. The features all serve their purpose for our use case.""Almost every feature is wonderful in BigFix. It is very stable, and we can rely on it. It is an awesome tool.""The patch management and the BigFix Inventory have been the most valuable features."

More BigFix Pros →

"The product is useful for automating processes.""The most valuable feature is its easy configuration management, optimization abilities, complete infrastructure and application automation, and its superiority over other similar tools.""Chef is a great tool for an automation person who wants to do configuration management with infrastructure as a code.""Chef can be scaled as needed. The Chef server itself can scale but it depends on the available resources. You can upgrade specific resources to meet the demand. Similarly, with clients, you can add as many clients as you need. Again, this depends on the server resources. If the server has enough resources, it can handle the number of servers required to manage the infrastructure. Chef can be scaled to meet the needs of the infrastructure being managed.""Stable and scalable configuration management and automation tool. Installing it is easy. Its most valuable feature is its compliance, e.g. it's very good."

More Chef Pros →

"The most valuable feature of Microsoft Endpoint Configuration Manager is patch management.""Microsoft Endpoint Configuration Manager is very scalable.""The product is very stable compared to older versions.""The most valuable feature of Microsoft Endpoint Configuration Manager is the availability of being able to manage the Microsoft estate. It handles many areas, such as asset management and tracking.""The most valuable feature of SCCM is the application distribution.""The cloud account management is a valuable feature.""Patching is very effective and reporting is very good.""Provides great insight into the functionalities of the data scope."

More Microsoft Configuration Manager Pros →

"The UI also needs improvements because it is complex for end-users. We have had feedback from a few users in our organization who found the UI is not feasible for tracking and analyzing all the processes and monitoring all the devices.""Integration with Mac devices requires some improvement.""I'd suggest adding more features for macOS in Intune. There should be more functionality for managing macOS. There should be a better capability for pushing things down on macOS. Currently, Intune is not capable of managing macOS at the same level as Windows.""In terms of what can be improved, I am looking for better enhancements regarding Apple management, not only on the mobile device, but also on the laptop.""The solution could be improved by the opportunity to connect third-party application databases, such as Chocolatey or another setup store, to Intune.""There should be more support for macOS. Even though macOS is supported by Intune and Microsoft is working very hard to get more features into Intune to manage macOS, that's one thing they can give a lot more attention to.""Deploying an app can be a complex process due to dependencies.""The reporting is subpar. That's the only issue we have with Intune. We use another solution for that purpose."

More Microsoft Intune Cons →

"The deployment has room for improvement and can be more streamlined.""The main shortcoming of BigFix was integration with vulnerability management. If you had a vulnerability in your software and BigFix on the endpoint, you needed integration with Qualys, Tenable, or another vulnerability management solution to fix that. It was like, "Okay, we can identify issues, and get that information back from the endpoint, but what are we doing about it?"""One aspect that could be improved is the speed of the console. Sometimes it can be slow, which is something that needs to be addressed.""It can be improved speed-wise. They can make it a little bit light. If you do any query for servers in bulk, it can take some time. Similarly, creating a job can take some time.""The product should become cloud-based. Also, the peer nesting ability of the product is a little backward.""The solution could improve by adding support drivers for different systems and equipment. When you have a lot of different computers if they could fix how to install any updates, firmware, or drivers for different systems or servers it would be good.""The BigFix Inventory could have an increased scope regarding the tools that can be detected. It does not cover all the possible software installed in Asset.""The solution should have some kind of a local caching methodology, where the patches can be taken locally into a localized relay server, and from there, the patch can be applied, so that there is not much usage of the network required."

More BigFix Cons →

"In the future, Chef could develop a docker container or docker images.""Support and pricing for Chef could be improved.""Chef could get better by being more widely available, adapting to different needs, and providing better documentation.""It is an old technology.""The solution could improve in managing role-based access. This would be helpful."

More Chef Cons →

"It needs to be able to load faster during deployment.""The solution can be improved by speeding up the synchronizing of the policies on the devices.""The configuration of Microsoft Endpoint Configuration Manager could be improved, it is a bit complicated.""The reports are too busy. They could be simpler. I'm a technician, so I don't care how pretty the reports look. They should be easy to read. I'm designing this for production folks. They need to read the reports quickly when they're patching in the middle of the night.""On some hardware, we'd like an easier way to get peripherals attached.""Regarding this, I'd like to mention the agent situation. When the agent on an end-user device is not functioning correctly, it can be quite problematic. It would be highly beneficial if there were a self-healing mechanism in place. Essentially, if the agent becomes corrupted or encounters issues, it should be able to rectify itself autonomously. This is particularly critical because, in order to utilize a tool like MECM (assuming you're referring to Microsoft System Center Configuration Manager), we need to deploy agents, known as AsMs, on all the devices we use, such as Windows 10 or Windows Server. Sometimes, when we deploy configurations or updates, they don't apply properly due to agent issues. This issue has been present since we began using MECM around 23 years ago. Unfortunately, there is currently no built-in mechanism for the agent to detect its own problems and initiate self-repair. Microsoft doesn’t have any feature to scan vulnerabilities and hence, they could include those.""I'm looking for a single solution for all discovery needs. It fulfills about 40% of the requirements, and I'd like to see the other 60% so that I don't have to keep doing this.""The availability of technical support could improve."

More Microsoft Configuration Manager Cons →

Pricing and Cost Advice
  • "Every customer used to purchase licenses based on their needs."
  • "Previously the price was $4 per month per user. Now it's $2.25 per user per month."
  • "It is not a cheap solution. The price for a device when you start using it at a large scale can be improved. It is covered under our enterprise agreement. We pay once a year. I am not aware of any additional costs."
  • "The price is very reasonable."
  • "This cost is approximately $30 USD per user per month."
  • "Microsoft's licensing is more flexible and adaptive than its competitors."
  • "It's reasonable. They're not giving it away, but it's reasonable."
  • "The licensing is on a yearly basis."
  • More Microsoft Intune Pricing and Cost Advice →

  • "We have a subscription-based contract with BigFix."
  • "The price of BigFix is better than the solutions. You are able to pay monthly or annually. There are not any hidden costs with BigFix. There is an additional cost for the SQL database."
  • "Its price is very reasonable."
  • "The price of BigFix could be lower. However, I am always seeking a lower price."
  • "There's not much big cost. We only have to pay the agents' cost for the server, and for the systems."
  • "The cost is slightly high."
  • "The price of the solution is high. There are not any additional fees from the standard license."
  • "It might be about $23 a client."
  • More BigFix Pricing and Cost Advice →

  • "Pricing for Chef is high."
  • "Chef is priced based on the number of nodes."
  • More Chef Pricing and Cost Advice →

  • "As far as I know, it is an annual operating expense license."
  • "The license price could be reduced for Microsoft Endpoint Configuration Manager They should make the price more affordable for smaller companies, most companies would be able to use the solution if it was priced better. There are more people on this cloud because you don't have to have either a server room or an on-premise server. You can have one IT person handle this without any local infrastructure."
  • "The price of Microsoft Endpoint Configuration Manager is expensive."
  • "There is not a license needed to use the solution."
  • "We have a support license from Microsoft Endpoint Configuration Manager and the overall price of the solution is reasonable."
  • "The price of SCCM depends on the size of the organization. The price is competitive."
  • "The solution operates on a licensing model that can be expensive."
  • "Along with buying a license for MECM, we also have to buy a service called CMG (Cloud Management Gateway) which is a virtual machine in the cloud with which you can link your MECM to the Azure tenant so as to manage teleworkers."
  • More Microsoft Configuration Manager Pricing and Cost Advice →

    Use our free recommendation engine to learn which Configuration Management solutions are best for your needs.
    745,775 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes it… more »
    Top Answer:Microsoft Intune is a great configuration management tool and has a lot of good things going for it. Here are some of… more »
    Top Answer: Microsoft Intune offers not only an easy-to-deploy data protection and productivity management solution, but also… more »
    Top Answer:I’ve found patching to be the most valuable feature of the solution.
    Top Answer:From a technical standpoint, it's strong in security and flexibility, but it requires a lot of customization. It's not… more »
    Top Answer:The product should become cloud-based. Also, the peer nesting ability of the product is a little backward. It has a Peer… more »
    Top Answer:The most valuable feature is its easy configuration management, optimization abilities, complete infrastructure and… more »
    Top Answer:Pricing for Chef can be relatively high for some customers but, if we consider the benefits it provides, we can say that… more »
    Top Answer:In terms of improvement, Chef could get better by being more widely available, adapting to different needs, and… more »
    Top Answer:Microsoft Endpoint Configuration Manager takes knowledge and research to properly configure. The length of time that the… more »
    Top Answer:ManageEngine Desktop Central is very easy to set up, is scalable, stable, and also has very good patch management. What… more »
    Top Answer:The cloud account management is a valuable feature.
    Jenkins logo
    Compared 16% of the time.
    Microsoft Azure DevOps logo
    Compared 13% of the time.
    SaltStack logo
    Compared 9% of the time.
    AWS Systems Manager logo
    Compared 9% of the time.
    Puppet Enterprise logo
    Compared 5% of the time.
    Also Known As
    Intune, MS Intune, Microsoft Endpoint Manager
    Tivoli Endpoint Manager
    Microsoft Endpoint Configuration Manager, System Center Configuration Manager (SCCM )
    Learn More

    Microsoft Intune is a comprehensive cloud-based service that allows you to remotely manage mobile devices and mobile applications without worrying about the security of your organization’s data. Device and app management can be used on company-owned devices as well as personal devices.

    In an increasingly mobile workforce, Microsoft Intune keeps your sensitive data safe while on the move. Microsoft Intune makes it possible for your team members to work anywhere using their mobile devices. Microsoft Intune provides both the flexibility and the control needed for securing all your data on the cloud, no matter where the device with the data is located.

    Microsoft Intune Device Management Key Features

    With Microsoft Intune Device Management you can:

    • Ensure devices and apps are compliant with your security requirements.
    • Rapidly deploy and authenticate apps on all company devices.
    • Remotely access devices to troubleshoot issues or to remove data from them.
    • Generate reports for all devices in the system.
    • Monitor the way users access and share information to protect company information.
    • Set rules and configure settings on personal and organization-owned devices to access data and networks.
    • Create user groups and device groups, allowing you to rapidly access many users and devices simultaneously.

    Mobile Application Management

    Mobile application management in Intune is designed to protect your organization’s data at the application level.

    With Microsoft Intune Application Management you can:

    • Configure apps to run with specific settings enabled.
    • Update existing apps that are already on the device.
    • See reports on which apps are used and monitor their usage.
    • Selectively wipe organization data from apps.
    • Add mobile apps to user groups and devices.

    As part of Microsoft's Enterprise Mobility + Security (EMS) suite, Intune integrates with Microsoft Entra ID for access control and with Azure Information Protection for data protection. It also integrates with Microsoft 365 Applications.

    Reviews from Real Users

    Microsoft Intune stands out among its competitors for a number of reasons. Two major ones are its ability to secure all devices under its management and the flexibility that the solution offers its users.

    A computing services manager notes, "Its security is most valuable. It gives us a way to secure devices, not only those that are steady. We do have a few tablets and other devices, and it is a way for us to secure these devices and manage them. We know they're out there and what's their status. We can manage their life cycle and verify that they're updated properly."

    The head of IT engineering at a financial services company writes, "The one feature we find most useful is the Mobile Application Manager. There are two types: we have the complete MDM and the Mobile Application Manager (MAM). We don't give our users phones, it is their own personal phone, and we need to allow them to have access to the company details on their phone. We need to create a balance between their own personal data and the company data. We deploy the Mobile Application Manager for them so that we won't be able to interfere with their own personal data."

    HCL BigFix is a powerful patch management tool that enables organizations to simply control their patch management operations. It is designed so that IT security and operations teams can collaborate in the most effective way possible. Users that employ BigFix can find and fix issues with their endpoints faster than those that employ its competitors. It comes with thousands of security checks that can be deployed quickly and easily. These enable users to safeguard themselves from a wide variety of digital threats.

    HCL BigFix Benefits

    Some of the ways that organizations can benefit by choosing to deploy HCL BigFix include:

    • Total visibility and simplified control. BigFix provides users with total system visibility while simultaneously enabling administrators to easily manage their networks. It enables organizations to run all of their patch management operations from a single user interface. This UI contains all of BigFix’s system controls. It also contains all of an organization’s network data. Users will never have to search for the features or information that they need as everything is centrally located.
    • Maximum benefit for reduced overhead. BigFix enables businesses to integrate with more than 100 different operating systems. Users can utilize the operating system of their choice without multiplying their overhead costs. They can keep costs down while still achieving their goals. 
    • Flexibility. BigFix is highly flexible. Users can integrate it with the top vulnerability management solutions on the market. This enables users to maximize their protective coverage and minimize the amount of time that they have to spend resolving issues. 

    BigFix Features

    • BigFix Insights. The BigFix insights feature gives users access to a powerful deep analysis tool. This tool enables organizations to gather data from all of their endpoints and compile them into reports that can aid administrators in their work. It can centralize an organization’s data and also enable it to import data from other sources so that it can make more informed decisions.
    • Task automation. BigFix has the ability to automate rudimentary tasks so that users can focus on tasks that require a greater level of attention. This can include tasks such as event remediation and data collection. This feature enables users to focus their attention on other more critical tasks.
    • Data loss prevention tool. This tool enables users to prevent critical data from being leaked or leaking accidentally. It creates policies that limit or prevent sensitive data from being transmitted. It also enforces the privacy protocols that are already in place. Organizations can leverage this tool to bolster the security protecting their data from malicious actors.
    • Web reputation tool. This tool proactively protects networks from malicious websites. It scans for potentially dangerous websites and opens a blocking page when one is detected. Users are also given the ability to set proxy server credentials for the system to recognize and authenticate. Users can use this to ensure that suspicious websites are unable to infect their networks.
    • Centralized UI. BigFix comes with a built-in UI that centralizes all of the solution’s features so that they can be accessed from a single location. It enables administrators to target specific portions of the network when issues arise without requiring them to take actions that will affect the entire network.

    Reviews from Real Users

    HCL BigFix is a highly effective solution that stands out when compared to most of its competitors. Two major advantages it offers are its auto-patching capability and its user-friendly tools.

    Santhosh K., the chief executive officer of Catnip Infotech Private Limited, writes, “The second valuable feature is, BigFix also has an auto patch updating feature, where the latest patches, and what is required for my system are automatically downloaded and kept ready for me. The solution applies the patch and notifies me after applying the patch. BigFix also gives me a ping saying that I should reset my system within a certain period of time, while the patch is being applied. Let's say, the patch is being applied and if there's an issue, the solution can revoke the applied patch, and revert back to the old state.”

    Benedikt S., an application administrator, says, “It's very straightforward. The usability is very close to everyday technical tools that you use as a systems administrator. So it's quite user-friendly.”

    Chef, is the leader in DevOps, driving collaboration through code to automate infrastructure, security, compliance and applications. Chef provides a single path to production making it faster and safer to add value to applications and meet the demands of the customer. Deployed broadly in production by the Global 5000 and used by more than half of the Fortune 500, Chef develops 100 percent of its software as open source under the Apache 2.0 license with no restrictions on its use. Chef Enterprise Automation Stack™, a commercial distribution, is developed solely from that open source code and unifies security, compliance, infrastructure and application automation with observability. Chef provides an unequaled developer experience for the Coded Enterprise by enabling users to express infrastructure, security policies and the application lifecycle as code, modernizing development, packaging and delivery of any application to any platform. For more information, visit and follow @chef.

    Microsoft Configuration Manager helps IT manage PCs and servers, keeping software up-to-date, setting configuration and security policies, and monitoring system status while giving employees access to corporate applications on the devices that they choose. When Configuration Manager is integrated with Microsoft Intune, you can manage corporate-connected PCs and Macs along with cloud-based mobile devices running Windows, iOS, and Android, all from a single management console.

    New features of Configuration Manager, such as the support of Windows 10 in-place upgrade, co-management with Microsoft Intune, Windows 10 and Microsoft 365 Apps for enterprise Servicing Dashboard, integration with Windows Update for Business, and more make deploying and managing Windows easier than ever before.

    Learn more about Microsoft Intune
    Learn more about BigFix
    Learn more about Chef
    Learn more about Microsoft Configuration Manager
    Sample Customers
    Mitchells and Buzzers, Callaway
    US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation
    Facebook, Standard Bank, GE Capital, Nordstrom, Optum, Barclays, IGN, General Motors, Scholastic, Riot Games, NCR, Gap
    Bank Alfalah Ltd., Wªrth Handelsges.m.b.H, Dimension Data, Japan Business Systems, St. Lucie County Public Schools, MISC Berhad
    Top Industries
    Computer Software Company19%
    Financial Services Firm17%
    Comms Service Provider11%
    Healthcare Company5%
    Educational Organization23%
    Computer Software Company13%
    Financial Services Firm6%
    Computer Software Company16%
    Manufacturing Company10%
    Educational Organization42%
    Financial Services Firm8%
    Computer Software Company8%
    Computer Software Company30%
    Comms Service Provider20%
    Transportation Company10%
    Manufacturing Company10%
    Financial Services Firm20%
    Computer Software Company13%
    Manufacturing Company8%
    Computer Software Company17%
    Financial Services Firm14%
    Manufacturing Company14%
    Insurance Company10%
    Computer Software Company12%
    Financial Services Firm10%
    Manufacturing Company7%
    Company Size
    Small Business35%
    Midsize Enterprise12%
    Large Enterprise53%
    Small Business20%
    Midsize Enterprise33%
    Large Enterprise47%
    Small Business24%
    Midsize Enterprise11%
    Large Enterprise65%
    Small Business11%
    Midsize Enterprise47%
    Large Enterprise42%
    Small Business10%
    Midsize Enterprise30%
    Large Enterprise60%
    Small Business18%
    Midsize Enterprise12%
    Large Enterprise70%
    Small Business19%
    Midsize Enterprise14%
    Large Enterprise67%
    Small Business19%
    Midsize Enterprise15%
    Large Enterprise67%
    Buyer's Guide
    Configuration Management
    November 2023
    Find out what your peers are saying about Red Hat, Microsoft, HCL and others in Configuration Management. Updated: November 2023.
    745,775 professionals have used our research since 2012.