No more typing reviews! Try our Samantha, our new voice AI agent.

Kandji vs Microsoft Enterprise Mobility + Security comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Intune
Sponsored
Ranking in Enterprise Mobility Management (EMM)
1st
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
377
Ranking in other categories
Configuration Management (1st), Remote Access (2nd), Unified Endpoint Management (UEM) (1st), Microsoft Security Suite (1st)
Kandji
Ranking in Enterprise Mobility Management (EMM)
3rd
Average Rating
8.8
Reviews Sentiment
6.6
Number of Reviews
19
Ranking in other categories
Vulnerability Management (18th), Mobile Device Management (MDM) (3rd), Endpoint Detection and Response (EDR) (13th)
Microsoft Enterprise Mobili...
Ranking in Enterprise Mobility Management (EMM)
14th
Average Rating
8.2
Reviews Sentiment
6.4
Number of Reviews
13
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2026, in the Enterprise Mobility Management (EMM) category, the mindshare of Microsoft Intune is 21.1%, down from 32.0% compared to the previous year. The mindshare of Kandji is 1.4%, up from 1.3% compared to the previous year. The mindshare of Microsoft Enterprise Mobility + Security is 1.9%, up from 0.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Enterprise Mobility Management (EMM) Mindshare Distribution
ProductMindshare (%)
Microsoft Intune21.1%
Kandji1.4%
Microsoft Enterprise Mobility + Security1.9%
Other75.6%
Enterprise Mobility Management (EMM)
 

Featured Reviews

HA
Senior Business Development Executive at Digitaltrack
Centralized device management has automated onboarding and improves remote security compliance
One thing I feel Microsoft Intune could improve is troubleshooting visibility. In many cases, when a policy or application deployment fails, the error messages are a bit generic. So, admins still spend time checking logs manually or testing on devices one by one. Compared to the simplicity of deployment, troubleshooting sometimes feels less mature. I also think reporting and real-time monitoring could be stronger. The dashboard gives useful information, but in large environments, many teams still depend on additional tools or scripts for deeper reporting and analytics. If I had to focus on one area first, I would probably choose troubleshooting and reporting. Deployment through Microsoft Intune is generally straightforward, but when something fails, identifying the exact root cause can still take more time than expected. Error messages are sometimes too generic, and admins often have to dig through logs, sync status, or multiple portals to understand what actually happened. I think user experience and policy management could also improve further. Microsoft Intune has become much better over the years, but sometimes the admin portal still feels fragmented because certain configurations open in different sections or redirect to older interfaces. For new admins, especially, it can take time to understand where everything is located. Another thing is policy conflict handling. In larger organizations, multiple device policies, compliance rules, and configuration profiles can overlap. When conflicts happen, the visibility is not always very clear, so admins spend time figuring out which policy actually won or caused the issue.
CD
SysAdmin at a recreational facilities/services company with 11-50 employees
Strong security structure has supported fast Mac and iOS administration with minimal IT effort
One area for improvement for Kandji would be having a bigger suite of applications. I noticed that some of the niche apps our data software firm needs were not in the regular library. We were able to use the custom app feature to create those apps ourselves, but I would love it if Kandji could expand the library. I also wish Kandji could lock down different ports on MacBooks based on which ones we wanted to shut down, and I hope there is an easier way to sandbox people's bring your own device devices because when we're doing SOC 2, it really wants us to sandbox things so that if someone were to take a device that is not ours, we could delete just our data off there and not theirs. An improvement needed for Kandji would be the ability to remote into devices. I would appreciate something that is really reliable for that without having to buy third-party software.
Robert Veprek - PeerSpot reviewer
Consultant for Licensing and Sales at AutoCont CZ a. s.
Have experienced inconsistent support while maintaining strong outcomes in complex projects
My biggest advantage with Microsoft Enterprise Mobility + Security is that I have really deep knowledge about Microsoft licenses, allowing me to offer our customers some non-usual configurations or special offers because I have experience working in Microsoft and many contacts, helping us to provide the best conditions for long-time contracts. The installation of Microsoft Enterprise Mobility + Security is quite easy. Azure Active Directory Premium helps to manage user access and security; it's the basis of our communication and our project, as it's essential for all security for our customers. Features within Microsoft Intune such as MDM and MAM help to protect data in general. Intune is a general tool for mobility management and device and user management.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I appreciate how easy it is to deploy certificates to end users to get control over their device with Microsoft Intune; that's what Microsoft Intune is known for, and that's what we use them for."
"I like how Intune deploys the policies and makes them customizable. You can deploy it through Intune and forget about it."
"The most valuable feature of Intune is the ability to reset a lost device and remove all the data."
"I like Intune's ability to manage roles, maintenance tasks, compliance settings, and patch development for all endpoints."
"The main value of Microsoft Intune is better asset management from a security perspective, ensuring that the security baseline is enforced on all devices, including mobile devices."
"Intune saves time, and it is very easy to use. It allows us to manage applications completely."
"Microsoft Intune has transformed my organization; we are managing to scale the Intune deployment across all our regions efficiently, and it works perfectly for our needs."
"We have definitely seen a good return on investment, as it has saved a good amount of time in device setup and support, reducing manual effort by around forty to fifty percent and also fewer on-site interventions since most issues are handled remotely."
"Kandji has positively impacted my organization because many things happen through Kandji, especially on the laptops and desktops at the infrastructure workspace level."
"The customer support is the best I have ever seen."
"Kandji has positively impacted my organization by allowing us to better assist and it allows for a better user experience, a better kind of fleet management."
"The customer support at Kandji is phenomenal and is the best I have experienced from any vendor."
"Kandji has positively impacted our organization by making it easy to manage all of our MacBook devices and applications."
"Kandji has positively impacted my organization because it is very user-friendly, and among the multiple MDM solutions I have used, such as JumpCloud and Intune, Kandji stands out as one of the best for Mac devices."
"It's a very easy plug-and-play solution where you can just enroll the devices and choose the features you want."
"Everything is now compliant and controlled, and we know where each device is, with all updates pushed and managed and licenses that they do not require."
"Microsoft Enterprise Mobility + Security is a basic part of all of our projects because it's a very important basis for any customer wanting to set up Microsoft technology, as they need to manage all users and devices on a security basis."
"Microsoft Mobility and EMS include Intune for Mobility, which provides mobile device management and mobile application management. With mobile device management, you can control the entire device in an organization."
"A good feature that is present is MAM or Mobile Application Management. We can deploy this feature on the device, which is not managed by the organization. If I apply some security configuration on a personal device, the user would be really disappointed. What we do instead is that we give all access to the applications related to corporate and ask the users to use the application. We secure the application by putting the security features on the applications and not on the users' devices. This way, the users are happy, and we also meet our company's compliance standards. Then, everyone is happy."
"Basically, the solution ensures that computers are safe and secure."
"I am very happy with it currently."
"The most valuable feature is it's a collaboration tool that we can dump all things in at the same time, and we don't have to go to different locations to search for documents that we want to share among 40 people."
"The product is a unified solution and you don't require to purchase tools from different vendors. The system analyzes behavior and activity and takes steps for protection."
"The product is centralized and we can use it for security purposes."
 

Cons

"Intune's third-party patch management could be better. It should be easier for the average system admin to keep non-Microsoft applications updated."
"The main disadvantage seen today is regarding Linux clients. We have a lot of development resources that have Linux on their clients, and we can't manage them on the same platform, as we do with other clients such as macOS and Windows. So, it should have support for Linux clients. It should also have better support for macOS."
"The policies we had in SCCM and AD offered features that are missing from Microsoft Intune."
"Intune has no remote control function for mobile phones to solve issues remotely for users."
"Intune could be enhanced by automating application upgrades, similar to how it automates operating system upgrades."
"There are some areas of improvement for Microsoft Intune, including faster policy sync so changes can apply quicker, a simpler interface, better reporting with more details and clear insight, improved troubleshooting, clearer error messages and logs, and stronger support for macOS and Linux, alongside better cross-platform features."
"We need the capabilities of the Cloud Management Gateway (CMG) to be enhanced through Intune instead of Azure."
"The user interface should be more user-friendly, as it can sometimes be challenging to navigate. Microsoft often relocates features, making it difficult to consistently find what I need."
"The Windows part needs a lot of work."
"One area for improvement for Kandji would be having a bigger suite of applications."
"Kandji should give open customization."
"There are certain limitations with blueprints where each machine can only have one or must have a blueprint, which is frustrating since certain machines may not need to have a blueprint straight away for testing."
"One way Kandji can be improved is through pricing, as other market providers comparatively have a lower price."
"While I do not have anything specific to add about the features, I do think there is a lack of flexibility in Kandji."
"Kandji can definitely be improved by the complexity. I feel we cannot necessarily tweak the Blueprints in the ways that we need to or there are just complex one-off situations where we need more customization and more ability to run custom scripts."
"In Kandji, I see a drawback related to the remote wipe function."
"Its performance needs enhancement."
"Microsoft's feature management is based on licenses. Microsoft follows ethical licensing and hence do not restrict the use of it."
"They should improve dedicated solutions because they offer everything, but you always end up missing something."
"The technical support from Microsoft could be better."
"There are certain shortcomings in the licensing model of the product where improvements are required."
"Microsoft Enterprise Mobility + Security is expensive."
"We did the deployment with the help of Microsoft's consultants. But sometimes, we found it difficult to educate the application developers to integrate."
"Technical support could be improved. Sometimes they use a third party that's not so knowledgeable in the product and that can slow down things a bit."
 

Pricing and Cost Advice

"Microsoft Intune's costliness stems from licensing fees and the overhead associated with its management, user experience, and device remediation."
"I recently got to know that the AD P1 license is compulsory to use Intune Autopilot, which was surprising for me. Earlier, this was not the case. It is the wrong thing to do. We now need to purchase AD P1 licenses for us and for our customers. I would rate it a seven out of ten for pricing."
"It's reasonable. They're not giving it away, but it's reasonable."
"Intune's pricing is competitive. For example, the license of Blackberry's Enterprise Mobility Suite was costly, but Intune is affordable. It is included as an additional feature when you buy security enhancements for your organization. For example, let's say I have fifty users in my organization and all of them are using Microsoft cloud services, like Teams, Office 365, and OneDrive."
"I would rate the price a four out of ten with ten being the most expensive."
"The purchase of the product was handled by someone else."
"There is a cost benefit of using Microsoft Intune because of the packaging with other Microsoft products."
"For Microsoft 365 E5 clients, cost is not an issue as this product is one of the benefits."
"Users have to pay a yearly licensing fee for Kandji, which is expensive."
"We have to pay 10 dollars per user. I would rate the tool's pricing a six out of ten."
"I would rate pricing at eight out of ten. It is a bit higher because of the security features that Microsoft provides."
"The increase in the prices of the product might not be the actual problem, but things become complex with some new plans that were introduced by Microsoft recently."
"The solution is cost-effective."
report
Use our free recommendation engine to learn which Enterprise Mobility Management (EMM) solutions are best for your needs.
909,725 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
10%
Manufacturing Company
9%
Computer Software Company
8%
Outsourcing Company
7%
Comms Service Provider
13%
Financial Services Firm
11%
Outsourcing Company
10%
Computer Software Company
7%
Pharma/Biotech Company
13%
Computer Software Company
9%
Outsourcing Company
8%
Construction Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business192
Midsize Enterprise62
Large Enterprise186
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise5
Large Enterprise7
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise1
Large Enterprise5
 

Questions from the Community

How does Microsoft Intune compare with VMware Workspace One?
Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes ...
What are the pros and cons of Microsoft Intune?
Microsoft Intune is a great configuration management tool and has a lot of good things going for it. Here are some of...
How does Google Cloud Identity compare with Microsoft Intune?
Microsoft Intune offers not only an easy-to-deploy data protection and productivity management solution, but also ...
What is your experience regarding pricing and costs for Kandji?
My experience with pricing, setup cost, and licensing is that we are using nearly 100 machines in Kandji, which comes...
What needs improvement with Kandji?
One thing I have noticed is that Kandji is mainly for Mac devices. We cannot manage Windows devices on Kandji. This i...
What is your primary use case for Kandji?
Kandji, which is now called Hero, is used for mobile device management. We use it to manage Mac devices, Apple device...
What needs improvement with Microsoft Enterprise Mobility + Security?
The technical support from Microsoft could be better. Because there are many changes in Microsoft, and most support c...
What is your primary use case for Microsoft Enterprise Mobility + Security?
I have been selling Microsoft Enterprise Mobility + Security for more than 10 years.
What advice do you have for others considering Microsoft Enterprise Mobility + Security?
Microsoft Enterprise Mobility + Security is a basic part of all of our projects because it's a very important basis f...
 

Also Known As

Intune, MS Intune, Microsoft Endpoint Manager
No data available
Enterprise Mobility + Security E3, Enterprise Mobility + Security E5, MS Enterprise Mobility + Security
 

Overview

 

Sample Customers

Mitchells and Buzzers, Callaway
Information Not Available
Mars, Whole Foods, Land O'Lakes, Dow
Find out what your peers are saying about Kandji vs. Microsoft Enterprise Mobility + Security and other solutions. Updated: August 2026.
909,725 professionals have used our research since 2012.