No more typing reviews! Try our Samantha, our new voice AI agent.

Kandji vs Samsung Knox comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Intune
Sponsored
Ranking in Enterprise Mobility Management (EMM)
1st
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
377
Ranking in other categories
Configuration Management (1st), Remote Access (2nd), Unified Endpoint Management (UEM) (1st), Microsoft Security Suite (1st)
Kandji
Ranking in Enterprise Mobility Management (EMM)
3rd
Average Rating
8.8
Reviews Sentiment
6.6
Number of Reviews
19
Ranking in other categories
Vulnerability Management (18th), Mobile Device Management (MDM) (3rd), Endpoint Detection and Response (EDR) (13th)
Samsung Knox
Ranking in Enterprise Mobility Management (EMM)
7th
Average Rating
8.2
Reviews Sentiment
4.7
Number of Reviews
10
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2026, in the Enterprise Mobility Management (EMM) category, the mindshare of Microsoft Intune is 21.1%, down from 32.0% compared to the previous year. The mindshare of Kandji is 1.4%, up from 1.3% compared to the previous year. The mindshare of Samsung Knox is 3.8%, down from 5.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Enterprise Mobility Management (EMM) Mindshare Distribution
ProductMindshare (%)
Microsoft Intune21.1%
Kandji1.4%
Samsung Knox3.8%
Other73.7%
Enterprise Mobility Management (EMM)
 

Featured Reviews

HA
Senior Business Development Executive at Digitaltrack
Centralized device management has automated onboarding and improves remote security compliance
One thing I feel Microsoft Intune could improve is troubleshooting visibility. In many cases, when a policy or application deployment fails, the error messages are a bit generic. So, admins still spend time checking logs manually or testing on devices one by one. Compared to the simplicity of deployment, troubleshooting sometimes feels less mature. I also think reporting and real-time monitoring could be stronger. The dashboard gives useful information, but in large environments, many teams still depend on additional tools or scripts for deeper reporting and analytics. If I had to focus on one area first, I would probably choose troubleshooting and reporting. Deployment through Microsoft Intune is generally straightforward, but when something fails, identifying the exact root cause can still take more time than expected. Error messages are sometimes too generic, and admins often have to dig through logs, sync status, or multiple portals to understand what actually happened. I think user experience and policy management could also improve further. Microsoft Intune has become much better over the years, but sometimes the admin portal still feels fragmented because certain configurations open in different sections or redirect to older interfaces. For new admins, especially, it can take time to understand where everything is located. Another thing is policy conflict handling. In larger organizations, multiple device policies, compliance rules, and configuration profiles can overlap. When conflicts happen, the visibility is not always very clear, so admins spend time figuring out which policy actually won or caused the issue.
CD
SysAdmin at a recreational facilities/services company with 11-50 employees
Strong security structure has supported fast Mac and iOS administration with minimal IT effort
One area for improvement for Kandji would be having a bigger suite of applications. I noticed that some of the niche apps our data software firm needs were not in the regular library. We were able to use the custom app feature to create those apps ourselves, but I would love it if Kandji could expand the library. I also wish Kandji could lock down different ports on MacBooks based on which ones we wanted to shut down, and I hope there is an easier way to sandbox people's bring your own device devices because when we're doing SOC 2, it really wants us to sandbox things so that if someone were to take a device that is not ours, we could delete just our data off there and not theirs. An improvement needed for Kandji would be the ability to remote into devices. I would appreciate something that is really reliable for that without having to buy third-party software.
TS
Ensures enterprise-level security with seamless updates and integration
The key benefits of Samsung Knox include its secure and user-friendly nature straight out of the box, giving enterprise customers security assurance. A specific feature, Knox E-FOTA One, allows forced firmware updates over the air without end-user intervention, which can be scheduled to occur during off-hours. Additionally, the Knox Secure Folder sandboxes both personal and work data, ensuring corporate data does not mix with personal data. The integration capabilities allow for seamless integration with the customer's MDM product set, providing access to the Knox Suite ecosystem. These features allow compliance with industry regulations, crucial as enterprises move toward a cloud-based, zero-trust security model.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Dynamic groups allow us to set conditions for automatic membership, eliminating the need for user intervention or manual review and ensuring a seamless workflow."
"From a solution perspective, I always recommend that you go for it."
"Autopilot is the most valuable feature."
"The most valuable aspect of the product is data loss prevention, which is really a benefit of the platform in general."
"We are transforming our flat network by adopting different cloud solutions, and our own applications are hosted in the cloud. Intune ensures our security throughout our entire cloud-based system, improving our security posture."
"A valuable feature is user enrollment, where users can enroll their devices in their organizations themselves."
"The biggest thing for us is enforcing logins only from devices that are managed by Intune."
"I can reach devices or computers over the internet. I don't need to worry about the network connectivity between the offices. I can manage any device. That is the most important part."
"Everything is now compliant and controlled, and we know where each device is, with all updates pushed and managed and licenses that they do not require."
"Kandji has positively impacted my organization by providing remote and quick support."
"Kandji has positively impacted my organization because it helps us be more secure and enforce compliance."
"Kandji has positively impacted our organization by making it so we feel confident in our security structure, and we feel confident that we can pass SOC 2 every year because we know that Kandji is doing what it says it's doing."
"Kandji has positively impacted my organization by allowing us to better assist and it allows for a better user experience, a better kind of fleet management."
"The customer support is the best I have ever seen."
"After switching to Kandji, we have seen a return on investment, specifically in human resource savings."
"Kandji has positively impacted my organization by increasing our security, reducing our resolution times, and ensuring that all employees who work from home have their computers working from day one."
"Samsung Knox functions as a UEM (User Endpoint Management); for IT professionals, certain features help save time, and we enable IT professionals and technical teams of organizations by training them, handling deployments, and assisting with troubleshooting when needed."
"The most valuable feature of Samsung Knox is the endpoint protection it offers. Users have the ability to perform a factory reset without the need for a hard reset, which is very beneficial."
"It's a very good product that any organization can use to help manage their devices."
"Samsung Knox has very seamless integration capabilities for deployment; we easily upload devices through the KME, Samsung Knox Mobile Enrollment."
"Samsung Knox is essential because you can centrally manage all your devices, including Android devices, iPhones, and Windows devices, in one platform at an affordable price, improving your security with GPOs and different policies, which is crucial in these times when we need to secure all communications, software, and various components against hackers."
"One portal for all the features and the remote support capability in Samsung Knox is highly valued. The enterprise editions and the free Knox Suite licenses for one year are also beneficial."
"Samsung Knox has good support for data protection, especially when using devices for profile installations, firmware updates, or configuration suites, as they are all data protected with a double layer of protection using our own MDM server alongside Samsung Knox services."
"Based on my experience and understanding, Samsung Knox is quite good, user-friendly, and top-notch."
 

Cons

"I personally work in a Samsung Android environment and there's a lot more feature support in other EMMs."
"The biggest challenge is that the admin portal can feel complex, especially for administrators who are new to the platform."
"The security aspect could be more effective. We are using other applications to manage network devices and groups, so if Microsoft Intune could improve in this area, especially on a network level, it would be a real advantage."
"There is room for improvement in integration and security as well."
"A new Intune feature allows application packaging, but it incurs additional licensing costs for a significant number of applications."
"There is no catalog for mobile access management (MAM) security."
"Integration with Mac devices requires some improvement."
"When you have a pressing issue, there is a lack of response. I believe Microsoft support needs to work on the response aspect."
"While I do not have anything specific to add about the features, I do think there is a lack of flexibility in Kandji."
"Kandji can definitely be improved by the complexity. I feel we cannot necessarily tweak the Blueprints in the ways that we need to or there are just complex one-off situations where we need more customization and more ability to run custom scripts."
"There are certain limitations with blueprints where each machine can only have one or must have a blueprint, which is frustrating since certain machines may not need to have a blueprint straight away for testing."
"One thing I think could be improved is what happens when a user gets locked out."
"I think Kandji could be improved with a better UI."
"In Kandji, I see a drawback related to the remote wipe function."
"One area for improvement for Kandji would be having a bigger suite of applications."
"One way Kandji can be improved is through pricing, as other market providers comparatively have a lower price."
"Features like private DNS would be very useful if pushed through Knox Manage."
"The main drawback is that they need to expand this product beyond Samsung devices to include every device."
"The primary disadvantage is that it's not totally integrated with the Microsoft environment."
"Profile customization needs improvement. Samsung Knox currently has some intelligence features, but there are limitations in this console."
"Improvements could be made for features such as data services, which do not work properly with devices not manufactured by Samsung, although they do function well with Samsung devices."
"Samsung Knox needs to expand customer features across all devices, not just Samsung devices."
"We face challenges with the application launcher when testing firmware versions, especially for kiosk mode."
"We faced multiple issues when pushing configuration profiles and policies through Samsung Knox. The students were cracking the entire system."
 

Pricing and Cost Advice

"Microsoft Intune has a user-based subscription model. You can go for a monthly or a yearly payment."
"It is expensive. The cost depends on the license that we choose."
"Microsoft Intune's costliness stems from licensing fees and the overhead associated with its management, user experience, and device remediation."
"While Microsoft charges for actual usage, it lacks discount options."
"It's affordable. In comparison to the competitors, the price depends on what features you need from Intune, but it's affordable. There are no hidden costs, but there are some features that go for a premium price. Those are the add-ons for which you have to pay extra."
"While I can't provide insights from a business perspective, it's worth noting that the pricing may differ significantly, and the discount we received might not be reflective of standard business rates."
"Every customer used to purchase licenses based on their needs."
"I liked the tool's pricing until P2 came into effect. I am unsure about the current value versus the cost of the new licensing model."
"Users have to pay a yearly licensing fee for Kandji, which is expensive."
Information not available
report
Use our free recommendation engine to learn which Enterprise Mobility Management (EMM) solutions are best for your needs.
909,725 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
10%
Manufacturing Company
9%
Computer Software Company
8%
Outsourcing Company
7%
Comms Service Provider
12%
Financial Services Firm
11%
Outsourcing Company
10%
Computer Software Company
7%
Comms Service Provider
11%
Manufacturing Company
10%
Financial Services Firm
8%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business192
Midsize Enterprise62
Large Enterprise186
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise5
Large Enterprise7
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise1
Large Enterprise3
 

Questions from the Community

How does Microsoft Intune compare with VMware Workspace One?
Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes ...
What are the pros and cons of Microsoft Intune?
Microsoft Intune is a great configuration management tool and has a lot of good things going for it. Here are some of...
How does Google Cloud Identity compare with Microsoft Intune?
Microsoft Intune offers not only an easy-to-deploy data protection and productivity management solution, but also ...
What is your experience regarding pricing and costs for Kandji?
My experience with pricing, setup cost, and licensing is that we are using nearly 100 machines in Kandji, which comes...
What needs improvement with Kandji?
One thing I have noticed is that Kandji is mainly for Mac devices. We cannot manage Windows devices on Kandji. This i...
What is your primary use case for Kandji?
Kandji, which is now called Hero, is used for mobile device management. We use it to manage Mac devices, Apple device...
What is your experience regarding pricing and costs for Samsung Knox?
Regarding pricing, setup cost is crucial in our region. Companies buy Samsung Knox for both security and efficiency p...
What needs improvement with Samsung Knox?
I would appreciate improved management capabilities for iPhones. Currently, there are some possibilities, but they ar...
What is your primary use case for Samsung Knox?
I use this solution for my clients, for different businesses such as transport, editorials, hospitals, and ambulances...
 

Also Known As

Intune, MS Intune, Microsoft Endpoint Manager
No data available
No data available
 

Overview

 

Sample Customers

Mitchells and Buzzers, Callaway
Information Not Available
Information Not Available
Find out what your peers are saying about Kandji vs. Samsung Knox and other solutions. Updated: August 2026.
909,725 professionals have used our research since 2012.