Try our new research platform with insights from 80,000+ expert users

Ivanti Security Controls vs Microsoft Configuration Manager comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 16, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Ivanti Security Controls
Ranking in Patch Management
13th
Average Rating
8.6
Reviews Sentiment
6.5
Number of Reviews
4
Ranking in other categories
No ranking in other categories
Microsoft Configuration Man...
Ranking in Patch Management
2nd
Average Rating
8.2
Reviews Sentiment
6.4
Number of Reviews
85
Ranking in other categories
Software Distribution (1st), Server Monitoring (6th), Configuration Management (3rd)
 

Mindshare comparison

As of February 2026, in the Patch Management category, the mindshare of Ivanti Security Controls is 2.6%, down from 2.7% compared to the previous year. The mindshare of Microsoft Configuration Manager is 8.1%, down from 15.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Patch Management Market Share Distribution
ProductMarket Share (%)
Microsoft Configuration Manager8.1%
Ivanti Security Controls2.6%
Other89.3%
Patch Management
 

Featured Reviews

Chethan R - PeerSpot reviewer
Windows Security Patching Operation III (Cyber Operations) at CBTS
Has reduced hardware strain through agentless patching and improved asset visibility
This solution does not have capability of managing applications. It is only used for asset management and patch management. Regarding analytics for Ivanti Security Controls, it does not have extensive capabilities. It is a basic tool from Ivanti for scanning and deploying. It does not have analytics features such as EDR or security tools available in the market. It only has capability to check missing patches, find them, and deploy them. When it comes to reports, compliance reports or similar types of reports are not user-friendly. Expertise is required for handling these aspects. The asset management in Ivanti Security Controls needs more visibility. Additionally, it can be improved to handle in-house applications, which currently cannot be installed. It can only handle existing applications, unlike Ivanti's Endpoint Manager. It should have additional features in this area that need improvement.
JunedBedrekar - PeerSpot reviewer
Expert at a tech vendor with 10,001+ employees
Have effectively deployed patches and applications while integrating with cloud solutions
The features I find most valuable in Microsoft Configuration Manager are replication and scripting. If I want to get a fetch report for anything, such as hardware-related issues or group policy-related issues, I need to fetch the report by using SCCM's scripting language and remediation part. The inventory collection features of Microsoft Configuration Manager are good because we always prefer the inventory. We do it by using the script language. We use remote management capabilities in Microsoft Configuration Manager. Remote management capabilities are useful if the user is not providing access; we can use the backend users to update the group policy and sync the devices. These are the main features we require.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Ivanti Security Controls is an agentless tool which means we do not need to install any agent on the server or endpoint, and through agentless capabilities, it can install software, install patches, and control over the server, including asset management."
"Technical support is helpful and responsive."
"Ivanti Security Controls is a better solution than SCCM."
"What has been most valuable is the ability to manage, restore and install upgrades and applications. We scan PCs and server and receive results."
"Software deployment and WSUS are most valuable."
"I like its ease of use. It does what you need it to do, and it's a one-stop-shop for the company and for all your deployments. If you incorporate Intune into it, you can have both. You can bring your own devices and corporate devices, and everything runs out of SCCM and Intune."
"I like Mircosoft's technical support. Microsoft has a few updates, like some of the critical KBs. They are published within the interval time, and in case of an escalation on the client missions, we will raise a ticket with the Microsoft team. They will create a hotfix or a critical update. They will chat with us, and that is one thing I like about Microsoft. Whenever any issues occur at my organization, they will help you out soon as possible within the SLA."
"Microsoft Configuration Manager helps with patch management."
"It lets you know what your infrastructure is like and what state you are in."
"Microsoft Configuration Manager gives different tools in one solution."
"This solution helps us by automating the patching of our system."
"The most valuable feature of Microsoft Endpoint Configuration Manager is patch management."
 

Cons

"It should be more scalable."
"When it comes to reports, compliance reports or similar types of reports are not user-friendly. Expertise is required for handling these aspects."
"For the Windows upgrade, the errors we experience are not clear. We see a time out error but do not know the reason. We would like to know the root cause."
"Ivanti Security Controls is a powerful product, but it has quite a steep learning curve."
"The assets have reached their end-of-life, and patching them is a complex and laborious task. It would be highly advantageous if there were an integrated solution that provided distinct options for each end-of-life asset, streamlining the process and facilitating comprehension."
"The ability to integrate MDM would be great."
"On some hardware, we'd like an easier way to get peripherals attached."
"The reports are too busy. They could be simpler. I'm a technician, so I don't care how pretty the reports look. They should be easy to read. I'm designing this for production folks. They need to read the reports quickly when they're patching in the middle of the night."
"I want the system to provide some dependency relations. I would also like to see the relationship between different machines."
"Initial setup was complex. There's a lot that goes into it."
"It would be better if reporting were more user-friendly. I would like to see an upgrade in the reporting structure in the next release. At the moment, you have to use an SQL query or configure it to pull reports through the graphical user interface. Their updates could be more regular. I think Mircosoft updates it every six months. They are also moving many things to Intune, and Microsoft decided to move the deployment solution there. I think SCCM is getting old, and Intune is new."
"With Microsoft Premier Support, you get what you pay for. There's Third Tier Support that you pay for. If you pay for that, you get excellent support, and if you don't pay for that, then you get the less experienced staff."
 

Pricing and Cost Advice

Information not available
"It comes free with the Microsoft account. We have a yearly agreement, and all products are covered under it."
"There is an annual license needed to use the solution."
"I would rate the cost as eight out of ten."
"The price is competitive and reasonable."
"I rate the price of Microsoft Endpoint Configuration Manager an eight out of ten."
"Pricing and licensing are a downside of SCCM. It's expensive. I'd have to confirm this, but I think they changed the licensing to core-based instead of socket-based. It's not cheap, because you have to buy the software, you have to buy SQL. Another thing we learned from talking to Microsoft is that they provide you a license for SQL if you run it on the same box as the primary server. If you run it outside that box, you have to buy SQL. Microsoft does recommend you running it on the same box because of performance. But then, in order to run SQL, SCCM, and everything on the same box, you better have some resources. It's an expensive solution. There's no doubt about it."
"Along with buying a license for MECM, we also have to buy a service called CMG (Cloud Management Gateway) which is a virtual machine in the cloud with which you can link your MECM to the Azure tenant so as to manage teleworkers."
"Its price is okay because it is part of our licensing."
report
Use our free recommendation engine to learn which Patch Management solutions are best for your needs.
882,207 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
18%
Outsourcing Company
12%
Financial Services Firm
9%
Government
9%
Financial Services Firm
11%
Government
10%
Computer Software Company
7%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise13
Large Enterprise64
 

Questions from the Community

What needs improvement with Ivanti Security Controls?
Ivanti Security Controls is a powerful product, but it has quite a steep learning curve. There is quite a lot to learn, though it proves to be very powerful if you put in the time to learn how to u...
What is your primary use case for Ivanti Security Controls?
We are using Ivanti Security Controls for deploying Windows updates to Windows servers.
What advice do you have for others considering Ivanti Security Controls?
I am currently working with Ivanti Security Controls as a customer. I think Ivanti Security Controls is an effective product for this purpose. I would give tech support for Ivanti Security Controls...
How does Ansible compare to Microsoft Endpoint Configuration Manager (SCCM)?
Microsoft Endpoint Configuration Manager takes knowledge and research to properly configure. The length of time that the set up will take depends on the kind of technical architecture that your org...
How to choose between ManageEngine Desktop Central and Microsoft Endpoint Configuration Manager (formerly SCCM)?
ManageEngine Desktop Central is very easy to set up, is scalable, stable, and also has very good patch management. What I like most about ManageEngine is that I can log on to every PC very easily a...
What do you like most about SCCM?
One of the standout features of SCCM is its application management capabilities. It allows us to create packages efficiently and deploy them to specific groups within our network. This streamlined ...
 

Also Known As

No data available
Microsoft Endpoint Configuration Manager, System Center Configuration Manager (SCCM ), Microsoft SMS
 

Overview

 

Sample Customers

Information Not Available
Bank Alfalah Ltd., Wªrth Handelsges.m.b.H, Dimension Data, Japan Business Systems, St. Lucie County Public Schools, MISC Berhad
Find out what your peers are saying about Ivanti Security Controls vs. Microsoft Configuration Manager and other solutions. Updated: February 2026.
882,207 professionals have used our research since 2012.