No more typing reviews! Try our Samantha, our new voice AI agent.

Kandji vs Samsung Knox comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Intune
Sponsored
Ranking in Enterprise Mobility Management (EMM)
1st
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
377
Ranking in other categories
Configuration Management (1st), Remote Access (2nd), Unified Endpoint Management (UEM) (1st), Microsoft Security Suite (1st)
Kandji
Ranking in Enterprise Mobility Management (EMM)
3rd
Average Rating
8.8
Reviews Sentiment
6.6
Number of Reviews
19
Ranking in other categories
Vulnerability Management (18th), Mobile Device Management (MDM) (3rd), Endpoint Detection and Response (EDR) (13th)
Samsung Knox
Ranking in Enterprise Mobility Management (EMM)
7th
Average Rating
8.2
Reviews Sentiment
4.7
Number of Reviews
10
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2026, in the Enterprise Mobility Management (EMM) category, the mindshare of Microsoft Intune is 21.1%, down from 32.0% compared to the previous year. The mindshare of Kandji is 1.4%, up from 1.3% compared to the previous year. The mindshare of Samsung Knox is 3.8%, down from 5.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Enterprise Mobility Management (EMM) Mindshare Distribution
ProductMindshare (%)
Microsoft Intune21.1%
Kandji1.4%
Samsung Knox3.8%
Other73.7%
Enterprise Mobility Management (EMM)
 

Featured Reviews

HA
Senior Business Development Executive at Digitaltrack
Centralized device management has automated onboarding and improves remote security compliance
One thing I feel Microsoft Intune could improve is troubleshooting visibility. In many cases, when a policy or application deployment fails, the error messages are a bit generic. So, admins still spend time checking logs manually or testing on devices one by one. Compared to the simplicity of deployment, troubleshooting sometimes feels less mature. I also think reporting and real-time monitoring could be stronger. The dashboard gives useful information, but in large environments, many teams still depend on additional tools or scripts for deeper reporting and analytics. If I had to focus on one area first, I would probably choose troubleshooting and reporting. Deployment through Microsoft Intune is generally straightforward, but when something fails, identifying the exact root cause can still take more time than expected. Error messages are sometimes too generic, and admins often have to dig through logs, sync status, or multiple portals to understand what actually happened. I think user experience and policy management could also improve further. Microsoft Intune has become much better over the years, but sometimes the admin portal still feels fragmented because certain configurations open in different sections or redirect to older interfaces. For new admins, especially, it can take time to understand where everything is located. Another thing is policy conflict handling. In larger organizations, multiple device policies, compliance rules, and configuration profiles can overlap. When conflicts happen, the visibility is not always very clear, so admins spend time figuring out which policy actually won or caused the issue.
CD
SysAdmin at a recreational facilities/services company with 11-50 employees
Strong security structure has supported fast Mac and iOS administration with minimal IT effort
One area for improvement for Kandji would be having a bigger suite of applications. I noticed that some of the niche apps our data software firm needs were not in the regular library. We were able to use the custom app feature to create those apps ourselves, but I would love it if Kandji could expand the library. I also wish Kandji could lock down different ports on MacBooks based on which ones we wanted to shut down, and I hope there is an easier way to sandbox people's bring your own device devices because when we're doing SOC 2, it really wants us to sandbox things so that if someone were to take a device that is not ours, we could delete just our data off there and not theirs. An improvement needed for Kandji would be the ability to remote into devices. I would appreciate something that is really reliable for that without having to buy third-party software.
TS
Ensures enterprise-level security with seamless updates and integration
The key benefits of Samsung Knox include its secure and user-friendly nature straight out of the box, giving enterprise customers security assurance. A specific feature, Knox E-FOTA One, allows forced firmware updates over the air without end-user intervention, which can be scheduled to occur during off-hours. Additionally, the Knox Secure Folder sandboxes both personal and work data, ensuring corporate data does not mix with personal data. The integration capabilities allow for seamless integration with the customer's MDM product set, providing access to the Knox Suite ecosystem. These features allow compliance with industry regulations, crucial as enterprises move toward a cloud-based, zero-trust security model.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is the policy CSPs."
"The compliance and configuration policies in Microsoft Intune are the most valuable features, saving significant time compared to manual implementation."
"We have one MDM that works with Windows, iOS, and Android."
"The solution has reduced the risk of security breaches by 30%."
"If the product works, remote access will be a benefit. To this point we have not had reason to have confidence in achieving that access."
"The automatic patch management feature in the Intune Suite is helpful."
"It's not working perfectly, but Microsoft's Autopilot offers great visibility into automated deployment solutions."
"Intune provides full visibility into all active mobile device users. If their devices are noncompliant with our security policies, I have the flexibility to update them remotely."
"The customer support at Kandji is phenomenal and is the best I have experienced from any vendor."
"It's a very easy plug-and-play solution where you can just enroll the devices and choose the features you want."
"Kandji has positively impacted my organization because it was very easy to implement and manage all of our devices, especially when we manage with the ISO and SOC 2 certifications that we need for our organization."
"Kandji has positively impacted my organization because many things happen through Kandji, especially on the laptops and desktops at the infrastructure workspace level."
"After switching to Kandji, we have seen a return on investment, specifically in human resource savings."
"Kandji has positively impacted my organization because it is very user-friendly, and among the multiple MDM solutions I have used, such as JumpCloud and Intune, Kandji stands out as one of the best for Mac devices."
"Kandji has positively impacted our organization by making it easy to manage all of our MacBook devices and applications."
"Kandji has positively impacted my organization by simplifying the management of the Apple fleet."
"Samsung Knox is essential because you can centrally manage all your devices, including Android devices, iPhones, and Windows devices, in one platform at an affordable price, improving your security with GPOs and different policies, which is crucial in these times when we need to secure all communications, software, and various components against hackers."
"Based on my experience and understanding, Samsung Knox is quite good, user-friendly, and top-notch."
"It's a very good product that any organization can use to help manage their devices."
"One portal for all the features and the remote support capability in Samsung Knox is highly valued. The enterprise editions and the free Knox Suite licenses for one year are also beneficial."
"Samsung Knox is doing excellent work with its current offerings."
"The most valuable feature of Samsung Knox is the endpoint protection it offers. Users have the ability to perform a factory reset without the need for a hard reset, which is very beneficial."
"Samsung Knox functions as a UEM (User Endpoint Management); for IT professionals, certain features help save time, and we enable IT professionals and technical teams of organizations by training them, handling deployments, and assisting with troubleshooting when needed."
"Samsung Knox has very seamless integration capabilities for deployment; we easily upload devices through the KME, Samsung Knox Mobile Enrollment."
 

Cons

"The support is not particularly good. Sometimes when you open a case with Microsoft, you end up resolving the issue by yourself."
"We are not satisfied with technical support. Some improvements might be required."
"The backend of Microsoft Intune needs to be improved. We have seen a little bit of delay as compared to other MDM solutions. That needs to be improved. A little bit more granularity should also be added"
"Microsoft Intune has a latency response time issue. The latency has room for improvement."
"For an existing customer who has an SCCM, it would need to be upgraded to an MECM first before I can introduce Microsoft Intune."
"Microsoft Intune can be improved with a more intuitive admin interface, faster policy synchronization, better troubleshooting and reporting capabilities, especially for complex and hybrid environments, along with more granular control and simplified management for advanced configurations."
"Intune's third-party patch management could be better. It should be easier for the average system admin to keep non-Microsoft applications updated."
"The current Intune reporting functionality could benefit from some improvements."
"While I do not have anything specific to add about the features, I do think there is a lack of flexibility in Kandji."
"In Kandji, I see a drawback related to the remote wipe function."
"I rated Kandji an eight because the laptop needs to be connected to Wi-Fi to erase it."
"While it might be on the expensive side compared to Jamf Pro, it is closer in pricing to other MDMs such as Microsoft Intune, which comes with the EMS E3 license, making it potentially pricey for startups, yet a good cost for established enterprises."
"Kandji can definitely be improved by the complexity. I feel we cannot necessarily tweak the Blueprints in the ways that we need to or there are just complex one-off situations where we need more customization and more ability to run custom scripts."
"One thing I have noticed is that Kandji is mainly for Mac devices."
"The Windows part needs a lot of work."
"There are certain limitations with blueprints where each machine can only have one or must have a blueprint, which is frustrating since certain machines may not need to have a blueprint straight away for testing."
"Samsung Knox needs to expand customer features across all devices, not just Samsung devices."
"The main drawback is that they need to expand this product beyond Samsung devices to include every device."
"Improvements could be made for features such as data services, which do not work properly with devices not manufactured by Samsung, although they do function well with Samsung devices."
"Profile customization needs improvement. Samsung Knox currently has some intelligence features, but there are limitations in this console."
"We face challenges with the application launcher when testing firmware versions, especially for kiosk mode."
"We faced multiple issues when pushing configuration profiles and policies through Samsung Knox. The students were cracking the entire system."
"Features like private DNS would be very useful if pushed through Knox Manage."
"The primary disadvantage is that it's not totally integrated with the Microsoft environment."
 

Pricing and Cost Advice

"We are partners, so we receive some discount. However, from the customer's perspective, Microsoft Intune's pricing is competitive with non-Microsoft technology, and the price is good compared to other market competitors."
"It comes with the E5 plan. We bought the E5 plan from Microsoft."
"Microsoft Intune is reasonably priced for large organizations that already have Microsoft Enterprise licenses, but it is less affordable for smaller businesses."
"With one user base license, we can use Intune for up to five devices. However, with Soti MobiControl, each license is tied to a single device, meaning one license is dedicated to one device only."
"The product is expensive."
"Consider the Microsoft Enterprise Mobility Suite rather than choosing specific sub-components, e.g. only Microsoft Intune."
"Our enterprise agreement includes Microsoft Intune at no additional cost."
"The Intune license model is costly."
"Users have to pay a yearly licensing fee for Kandji, which is expensive."
Information not available
report
Use our free recommendation engine to learn which Enterprise Mobility Management (EMM) solutions are best for your needs.
909,725 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
10%
Manufacturing Company
9%
Computer Software Company
8%
Outsourcing Company
7%
Comms Service Provider
13%
Financial Services Firm
11%
Outsourcing Company
10%
Computer Software Company
7%
Comms Service Provider
11%
Manufacturing Company
10%
Financial Services Firm
8%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business192
Midsize Enterprise62
Large Enterprise186
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise5
Large Enterprise7
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise1
Large Enterprise3
 

Questions from the Community

How does Microsoft Intune compare with VMware Workspace One?
Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes ...
What are the pros and cons of Microsoft Intune?
Microsoft Intune is a great configuration management tool and has a lot of good things going for it. Here are some of...
How does Google Cloud Identity compare with Microsoft Intune?
Microsoft Intune offers not only an easy-to-deploy data protection and productivity management solution, but also ...
What is your experience regarding pricing and costs for Kandji?
My experience with pricing, setup cost, and licensing is that we are using nearly 100 machines in Kandji, which comes...
What needs improvement with Kandji?
One thing I have noticed is that Kandji is mainly for Mac devices. We cannot manage Windows devices on Kandji. This i...
What is your primary use case for Kandji?
Kandji, which is now called Hero, is used for mobile device management. We use it to manage Mac devices, Apple device...
What is your experience regarding pricing and costs for Samsung Knox?
Regarding pricing, setup cost is crucial in our region. Companies buy Samsung Knox for both security and efficiency p...
What needs improvement with Samsung Knox?
I would appreciate improved management capabilities for iPhones. Currently, there are some possibilities, but they ar...
What is your primary use case for Samsung Knox?
I use this solution for my clients, for different businesses such as transport, editorials, hospitals, and ambulances...
 

Also Known As

Intune, MS Intune, Microsoft Endpoint Manager
No data available
No data available
 

Overview

 

Sample Customers

Mitchells and Buzzers, Callaway
Information Not Available
Information Not Available
Find out what your peers are saying about Kandji vs. Samsung Knox and other solutions. Updated: August 2026.
909,725 professionals have used our research since 2012.