We performed a comparison between BigFix and Microsoft Endpoint Configuration Manager based on our users’ reviews in four categories. After reading all of the collected data, you can find our conclusion below.
Comparison Results: Based on the above variables, we would conclude that BigFix slightly edges out Microsoft Endpoint Configuration Manager. Our users find that Microsoft Endpoint Configuration Manager is harder to use and its support is less effective.
"Configuration profiles, remediation, scripts, and auto-pilot features are very good."
"Mobile device management is most valuable."
"It is quite policy-enabled, so you can build pretty much any policy to manage remote endpoints."
"The initial setup is not overly complex or difficult."
"One of the most valuable aspects of Microsoft Intune is its seamless integration with Azure Active Directory, offering capabilities akin to Group Policy Objects."
"...Intune itself integrates with that entire Microsoft ecosystem. As an individual product itself, it's okay. It holds up. But when you start saying "I've bought this as part of a wider solution, as a company we are going Microsoft throughout," then it makes more sense to have Microsoft Intune... so you have that single dashboard."
"I like the tool's integration with Apple. Anyone who creates an ID in Intune will get an Apple ID."
"The ability to block and erase remote devices is valuable to us, especially when those devices are lost."
"It allows for visibility into the OT, the industrial environments, that didn't exist before which is a big piece and has benefited my organization. Second, the speed at which people can patch is night and day versus SCCM scan or another similar solution."
"Before we had BigFix, we had problems with some malware. BigFix allows us to immediately patch all instances of endpoints that were vulnerable to antivirus and initiate scans. That's key."
"It's very straightforward."
"DOWNLOADING-PATCHES; It has also helped to reduce network traffic when it comes to downloading patches. By only having to download the patch once to the central location and then utilizing the relay structure to then download the patch to a specific site and then everything gathering at local, it greatly reduces the bandwidth of multiple endpoints."
"The most valuable point is when you deploy an application, you have to make sure that the application has been deployed to all computers and that is working perfectly. This solution works well at deployments."
"The most valuable feature for us is the ability to manage TWS, the relevance is really what sets it apart. Also, using it as a software deployment tool is the key for us."
"The older version of the tools that I use also included the connectivity aspect, and the fact that the tool now has it separate from the collection of usage data makes the deployment of these tools much easier."
"We found the implementation partner to be very supportive in terms of explaining and training the in-house resources and deploying the solution."
"The cloud account management is a valuable feature."
"It's helped us solve problems surrounding patching, installing, and reporting different patches, etc., on the virtual machines."
"With the right administrator, application deployment can do wonders."
"Software deployment and WSUS are most valuable."
"The product is useful for patch management."
"Microsoft Configuration Manager gives different tools in one solution."
"The most valuable feature of this solution is its ability to deploy patches to nearly all applications."
"The solution is user-friendly and easy to learn."
"Technical support is not that great."
"The reports that are generated aren't so great. They don't give a lot of meaning so far, but that could be down to user knowledge than the actual reporting side of things. I'm not a big user of it, but I was a bigger user of MaaS360, and we used to be able to run weekly and monthly reports. In the case of any deviations. we'd get a warning immediately. That's not so easy to do or to get in place for Intune. This could be just a user issue, but when I compare both, that's the only thing that's lacking for me."
"Reporting needs improvement."
"One big problem with Microsoft is that they're changing the names of the products quite often, or they're quite consistently doing so. Intune is now Endpoint administration. Constantly switching the user interface or the administrative interface makes it quite hard to keep pace. If you are on a two-week holiday and you come back and look at the same screen you have looked at for the last couple of months, it looks different, which is annoying. Changing things around all the time doesn't make it easy."
"The product needs to upgrade itself when the server is overloaded."
"It should be easier to define policies and comply with those policies."
"More integration with monitoring tools is needed."
"Microsoft needs to enhance device-level security, as sometimes when using Microsoft Intune, the device's operating system becomes stuck and requires a full uninstall to remove the Intune bug."
"The remote software installation could be better."
"I would like to see more custom content."
"I'd like to see better API integration with BigFix. We have some tremendous API capability inside of CyFIR and the ability to take textual search results, for example, and bring that back into the BigFix dashboard. This would be of extreme interest to us and our customers."
"We would like to see a different license plan, e.g. to include features from lifecycle with Patch Management, as an example."
"The tool should be more friendly in terms of Web UI and should be having better vulnerability scanning mechanisms so a third-party application is not required to fulfill that aspect."
"I would request them to build a robots, or an easier way for integration with the other tools, like ITSM tools."
"They don't have a proper mobile device management capability. They're working on it, however, that's the one thing that needs improvement so that you can have full unified endpoint management."
"I would like to see for it to be a little easier for new users to be able to learn and create relevant statements. In my opinion, that's the hardest part for bringing on new people that haven't had BigFix experience. Being able to have easier ways to build relevance in ActionScript would be the biggest improvement I'd like to see."
"It would be better if automation options were available. For example, in Nexthink or SysTrack, there is an analytical tool. Creating dashboards would be very easy if you implement the same thing in Microsoft. That report will be a daily cost to the customers and good revenue for our organization. The price also could be better. In the next release, we need to include some features like tables, dashboards, surveys, services, and metrics in the dashboard. Whatever we are implementing will be downloaded by a report. Apart from the report, we will telecast from the dashboard. It's very easy to compare, and it will be easy to telecast to the end-users."
"The main room for improvement is the on-screen display. I think it would be good if some improvements were made."
"They need to improve the support for the Mac operating system."
"The availability of technical support could improve."
"The solution is on-premises. The cloud version of the product, if a person needs to be on the cloud, would be InTune, which already exists as an option. SCCM doesn't need to offer cloud features for this reason."
"This solution should be simpler, and more consistent across modules/sections."
"I would like to see more automation."
"This solution needs to be supported on all Operating systems."
More Microsoft Configuration Manager Pricing and Cost Advice →
BigFix is ranked 5th in Configuration Management with 91 reviews while Microsoft Configuration Manager is ranked 2nd in Configuration Management with 78 reviews. BigFix is rated 8.6, while Microsoft Configuration Manager is rated 8.2. The top reviewer of BigFix writes "Very stable and easy to deploy with excellent patch compliance". On the other hand, the top reviewer of Microsoft Configuration Manager writes "Seamless system updates, useful integration, and reliable". BigFix is most compared with Microsoft Windows Server Update Services, Red Hat Ansible Automation Platform, Tanium, ManageEngine Patch Manager Plus and Red Hat Satellite, whereas Microsoft Configuration Manager is most compared with Red Hat Ansible Automation Platform, ManageEngine Endpoint Central, Tanium, AWS Systems Manager and Red Hat Satellite. See our BigFix vs. Microsoft Configuration Manager report.
See our list of best Configuration Management vendors and best Patch Management vendors.
We monitor all Configuration Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
SCCM is very robust but you need more time and people to manage it.
For a company of 200 employees only can use something easier to manage such as PDQ deployment S/W. it's a lot cheaper and easier to manage.
Kumar.
We have 1500 users and even with a reasonable sized support team we find SCCM difficult to manage. I haven't experienced the other solutions, but I suspect you will be better placed with an alternative to SCCM.
Before answering to your needs, we need to understand that there are two distinctive features from SCCM and BigFix.
SCCM since 2020 has stopped its support for Linux Patching, so in its entirety, if you are only using Windows, you might consider SCCM. It still support Mac with basic features, but it depends on your requirements. Again, the operation with SCCM is also not easy at all.
Bigfix on the other side is a solution to manage different types of OS, as we say it distributed environment. Windows, Linux, Mac, etc. Bigfix is mainly used in large companies with more than 1000+ employees. It is not cheap as Bigfix is a robust enterprise solution.
You might want to consider other automated patch management tools such as LANDesk or Managed Engine which has been seen in deployment in smaller enterprises.
Cheers,
Rendy
Hi Ihsan,
Hope you are doing well, As per my experience to deploy SCCM for 200 users is not worth it, you want to be blessed use Quest product KACE System Management Appliance, easy to manage and upgrade (patching/managing end point managing and many more).
https://www.itcentralstation.c...
Thank you.