No more typing reviews! Try our Samantha, our new voice AI agent.

Kandji vs Samsung Knox comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Intune
Sponsored
Ranking in Enterprise Mobility Management (EMM)
1st
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
378
Ranking in other categories
Configuration Management (1st), Remote Access (2nd), Unified Endpoint Management (UEM) (1st), Microsoft Security Suite (1st)
Kandji
Ranking in Enterprise Mobility Management (EMM)
5th
Average Rating
8.8
Reviews Sentiment
6.6
Number of Reviews
19
Ranking in other categories
Vulnerability Management (19th), Mobile Device Management (MDM) (3rd), Endpoint Detection and Response (EDR) (13th)
Samsung Knox
Ranking in Enterprise Mobility Management (EMM)
7th
Average Rating
8.2
Reviews Sentiment
4.7
Number of Reviews
10
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of July 2026, in the Enterprise Mobility Management (EMM) category, the mindshare of Microsoft Intune is 22.1%, down from 33.2% compared to the previous year. The mindshare of Kandji is 1.5%, down from 1.5% compared to the previous year. The mindshare of Samsung Knox is 4.2%, down from 5.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Enterprise Mobility Management (EMM) Mindshare Distribution
ProductMindshare (%)
Microsoft Intune22.1%
Kandji1.5%
Samsung Knox4.2%
Other72.2%
Enterprise Mobility Management (EMM)
 

Featured Reviews

OluwashileAdeniyi - PeerSpot reviewer
Senior Infrastructure Security Engineer at a outsourcing company with 51-200 employees
Centralized endpoint security has improved and supports hybrid work and BYOD policies
Regarding what I dislike about Microsoft Intune and its downsides, I would say that more Mac controls are needed because we have limited Mac and Linux control. When comparing controls and policies between Windows, Mac, and Linux, Windows has almost everything you can think of, while Mac and Linux have limited types of control. You cannot implement certain things on Mac and Linux that you can on Windows. The limited controls are a major issue. Additionally, if Microsoft could find a way to embed servers into Microsoft Intune, that would be beneficial. Microsoft Intune is not really designed for servers or Windows servers. It is more tailored towards Windows 11 and Windows 10 operating systems. Windows servers are not fully supported. Enterprise organizations usually have both servers and endpoints, which are users' workstations. For servers, most people look for other solutions such as SCCM, which is Configuration Manager. However, SCCM is what Microsoft Intune is trying to replace. Both SCCM and Microsoft Intune belong to Microsoft. Microsoft is trying to transition organizations into Microsoft Intune, the native cloud solution. However, because this update is still in process, servers are not fully compatible with Microsoft Intune and cannot be managed by it. The current policy that has emerged from issues with clients is what they call co-management, which is relatively new, and I do not know if adoption is significant. Many legacy or older customers who have been using these products for decades still have SCCM. When it is time for them to manage their Windows devices, they use what is called cloud attach. Cloud attach is a term whereby your SCCM is connected to your Microsoft Intune. Most people do not know about it, but I have deployed it for several organizations. Cloud attach and co-management work together so that your device is in SCCM, but some policies are pushed from Microsoft Intune. It is like two different solutions working hand in hand. That is what they call co-management. Microsoft Intune does not bring all of your endpoint and security management tools into one place, which is the goal and how it should be. However, as I mentioned, servers are not included. If we talk about end users, Microsoft Intune does bring all your devices together. In a typical enterprise environment, you have end users with workstations, laptops, company-issued phones, and bring your own devices. You can create policies for all of these. However, for the backend, your servers do not have much coverage. Servers are not really covered by Microsoft Intune in that way.
CD
SysAdmin at a recreational facilities/services company with 11-50 employees
Strong security structure has supported fast Mac and iOS administration with minimal IT effort
One area for improvement for Kandji would be having a bigger suite of applications. I noticed that some of the niche apps our data software firm needs were not in the regular library. We were able to use the custom app feature to create those apps ourselves, but I would love it if Kandji could expand the library. I also wish Kandji could lock down different ports on MacBooks based on which ones we wanted to shut down, and I hope there is an easier way to sandbox people's bring your own device devices because when we're doing SOC 2, it really wants us to sandbox things so that if someone were to take a device that is not ours, we could delete just our data off there and not theirs. An improvement needed for Kandji would be the ability to remote into devices. I would appreciate something that is really reliable for that without having to buy third-party software.
Mohammed-Azam - PeerSpot reviewer
Technical Consultant at Stefanini North America and APAC
Streamline enrollment with seamless security and integration while technical support improves
Integration is required first. Samsung Knox needs to be configured initially. Once configured for the first time, the process becomes simplified. For example, in our client's case, they ship Samsung Galaxy devices directly to employees. When the end user receives the device, they simply open the box and attempt to enroll by entering their username and password. No additional steps are required beyond that. There are very few questions asked. Once authentication is completed, the user can proceed without selecting many options. The system directly logs in, and the user receives apps pushed by the console. It is also integrated from the MDM. Certain apps are pushed to employees for their use. This ensures the work profile remains secure.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Microsoft Intune does a great job of helping protect our environment."
"Microsoft Intune has definitely reduced management burdens."
"I find Microsoft Intune valuable primarily for its Windows management capabilities, along with its Android Enterprise and Apple device management for mobile devices."
"The solution is fully integrated with the Microsoft platform and the Autopilot feature, which is a unique feature."
"The solution has reduced the risk of security breaches by 30%."
"If you are looking for an MDM provider specifically for user and device certificate enrollment for your BYOD use cases or corporate devices, I believe Microsoft Intune could be one of the best solutions available."
"For our customer, it meant no on-premise systems configuration infrastructure or identity management services were required."
"The most valuable feature is Intune's ability to push out updates for the security and antivirus. I also like Intune's copilot and the ability to automate processes. For example, if you have 5,000 employees who are issued new PCs and you need to set them up with everything they need."
"I highly recommend Kandji to others looking into using it since I have not seen any game-breaking issues; it is highly reliable, scalable, improves security, and reduces the time individuals need to spend on system configuration for security updates."
"After switching to Kandji, we have seen a return on investment, specifically in human resource savings."
"After deploying Kandji, I see a return on investment because the IT workload is reduced due to automated and faster employee onboarding, and we also have fewer support tickets because we do not have to manually install the software as employees can use Kandji Self Service and install the software on their own."
"Kandji has positively impacted my organization because it is very user-friendly, and among the multiple MDM solutions I have used, such as JumpCloud and Intune, Kandji stands out as one of the best for Mac devices."
"Kandji has positively impacted my organization by providing remote and quick support."
"Kandji has positively impacted my organization by simplifying the management of the Apple fleet."
"Kandji has positively impacted my organization because it was very easy to implement and manage all of our devices, especially when we manage with the ISO and SOC 2 certifications that we need for our organization."
"Kandji has positively impacted my organization by allowing us to better assist and it allows for a better user experience, a better kind of fleet management."
"Based on my experience and understanding, Samsung Knox is quite good, user-friendly, and top-notch."
"One portal for all the features and the remote support capability in Samsung Knox is highly valued. The enterprise editions and the free Knox Suite licenses for one year are also beneficial."
"Samsung Knox has very seamless integration capabilities for deployment; we easily upload devices through the KME, Samsung Knox Mobile Enrollment."
"Samsung Knox is doing excellent work with its current offerings."
"The most valuable feature of Samsung Knox is the endpoint protection it offers. Users have the ability to perform a factory reset without the need for a hard reset, which is very beneficial."
"Overall, I would rate the solution as a 10."
"It's a very good product that any organization can use to help manage their devices."
"Samsung Knox is essential because you can centrally manage all your devices, including Android devices, iPhones, and Windows devices, in one platform at an affordable price, improving your security with GPOs and different policies, which is crucial in these times when we need to secure all communications, software, and various components against hackers."
 

Cons

"I wish Microsoft would keep up with their documentation. They make changes so quickly to these platforms that they do not update the documentation properly in a timely manner."
"Intune has some limitations when it comes to application updates for third-party applications. You can schedule an update, but when it's a package setup, you need to supercede and replace it each time."
"What frustrates me the most is just waiting and tapping my fingers, uncertain about whether my changes will take effect."
"The downsides of Microsoft Intune include the fact that the interface can sometimes be complex for new administrators."
"The synchronization could be improved."
"The interface is easy, but it is not user-friendly when evaluating the overall user experience of Microsoft Intune."
"I, as such, do not have any specific inputs or needs. However, there is always room for improvement when it comes to scalability."
"Intune has no remote control function for mobile phones to solve issues remotely for users."
"There are certain limitations with blueprints where each machine can only have one or must have a blueprint, which is frustrating since certain machines may not need to have a blueprint straight away for testing."
"I think Kandji could be improved with a better UI."
"Kandji can definitely be improved by the complexity. I feel we cannot necessarily tweak the Blueprints in the ways that we need to or there are just complex one-off situations where we need more customization and more ability to run custom scripts."
"I rated Kandji an eight because the laptop needs to be connected to Wi-Fi to erase it."
"The Windows part needs a lot of work."
"One area for improvement for Kandji would be having a bigger suite of applications."
"One thing I think could be improved is what happens when a user gets locked out."
"One thing I have noticed is that Kandji is mainly for Mac devices."
"Samsung Knox needs to expand customer features across all devices, not just Samsung devices."
"We faced multiple issues when pushing configuration profiles and policies through Samsung Knox. The students were cracking the entire system."
"Improvements could be made for features such as data services, which do not work properly with devices not manufactured by Samsung, although they do function well with Samsung devices."
"The primary disadvantage is that it's not totally integrated with the Microsoft environment."
"Profile customization needs improvement. Samsung Knox currently has some intelligence features, but there are limitations in this console."
"Features like private DNS would be very useful if pushed through Knox Manage."
"The main drawback is that they need to expand this product beyond Samsung devices to include every device."
"We face challenges with the application launcher when testing firmware versions, especially for kiosk mode."
 

Pricing and Cost Advice

"Intune is inexpensive. It also comes bundled in some Office 365 licenses, so you can choose to purchase it separately or as a package."
"We don't get Intune as a separate module. Most of the time, we use it within an enterprise agreement like E3 or E5. Those licenses are at a good price, but what is annoying is that every single year they go higher."
"Intune is included with our F3 and E5 licenses."
"Intune is moderately expensive. You can get the license bundled with Office 365 E3 or E5 licenses. The E5s are a bit expensive, but you get some cheaper solutions with Intune."
"We work in the charity sector, so a lot of our clients get Microsoft Premium licenses or Business Premium for free. They get ten licenses free, and a lot of our clients do not have more than ten staff members. They are getting the tool for free, so its cost is not an issue."
"I would rate the price a four out of ten with ten being the most expensive."
"There are licenses required for this solution. We enable licenses on the devices we need to manage."
"It is cheap, but as compared to Google, it is costly. Google is cheaper, but quality-wise, Microsoft Intune is better."
"Users have to pay a yearly licensing fee for Kandji, which is expensive."
Information not available
report
Use our free recommendation engine to learn which Enterprise Mobility Management (EMM) solutions are best for your needs.
902,988 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
10%
Manufacturing Company
10%
Computer Software Company
8%
Government
7%
Financial Services Firm
12%
Comms Service Provider
10%
Outsourcing Company
8%
Computer Software Company
7%
Comms Service Provider
10%
Manufacturing Company
10%
Financial Services Firm
8%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business190
Midsize Enterprise65
Large Enterprise185
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise5
Large Enterprise7
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise1
Large Enterprise3
 

Questions from the Community

How does Microsoft Intune compare with VMware Workspace One?
Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes ...
What are the pros and cons of Microsoft Intune?
Microsoft Intune is a great configuration management tool and has a lot of good things going for it. Here are some of...
How does Google Cloud Identity compare with Microsoft Intune?
Microsoft Intune offers not only an easy-to-deploy data protection and productivity management solution, but also ...
What is your experience regarding pricing and costs for Kandji?
My experience with pricing, setup cost, and licensing is that we are using nearly 100 machines in Kandji, which comes...
What needs improvement with Kandji?
Kandji can definitely be improved by the complexity. I feel we cannot necessarily tweak the Blueprints in the ways th...
What is your primary use case for Kandji?
My main use case for Kandji is MDM management, so managing our Macs and iOS devices in a corporate enterprise environ...
What is your experience regarding pricing and costs for Samsung Knox?
Regarding pricing, setup cost is crucial in our region. Companies buy Samsung Knox for both security and efficiency p...
What needs improvement with Samsung Knox?
I would appreciate improved management capabilities for iPhones. Currently, there are some possibilities, but they ar...
What is your primary use case for Samsung Knox?
I use this solution for my clients, for different businesses such as transport, editorials, hospitals, and ambulances...
 

Also Known As

Intune, MS Intune, Microsoft Endpoint Manager
No data available
No data available
 

Overview

 

Sample Customers

Mitchells and Buzzers, Callaway
Information Not Available
Information Not Available
Find out what your peers are saying about Kandji vs. Samsung Knox and other solutions. Updated: June 2026.
902,988 professionals have used our research since 2012.