We performed a comparison between Microsoft Configuration Manager and Microsoft Windows Server Update Services based on real PeerSpot user reviews.
Find out in this report how the two Patch Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The most valuable feature of Microsoft Endpoint Configuration Manager is the software deployment. Additionally, Microsoft integrates most of the other solutions well with one another."
"The most valuable features are Remote Connect, SUP, Cloud functionality, Report, Query, and third-party patching."
"Patching is the main feature because SCCM is made to control the entire environment without manually interpreting. So it is good to use for patching."
"We are happy with the collaboration of SCCM with Patch My PC, which allows us to do patch work."
"Patching is very effective and reporting is very good."
"It saves a lot of money when you can install things automatically and they are installed the exact same way on every computer."
"You can remote control or RDP. That has been the most valuable because we can go into one console and can get to anything we want. Instead of going to all these different consoles, we centralized everything."
"I have found the solution to be scalable. We have around 50,000 users using the solution."
"The reporting capabilities that help maintain compliance and security are good."
"Once we configure it and it keeps updating the patches, all I need to do is filter out which patches are required or not."
"The most valuable feature is its ability to identify which updates are needed on a particular machine."
"I like that we could evaluate every client and compare some weaknesses and vulnerability exploits in Microsoft Windows Server Update Services. This is a useful way to test applications against an attacker attempting to exploit the operating system."
"The product provides a valuable Single Sign-On (SSO) integration feature within our IES environment, particularly with the IT directory and server systems."
"PowerShell is a valuable feature."
"This solution is stable."
"The most valuable features are that it is included with Windows, and it can be driven by Group Policy Objects (GPOs)."
"Some of the capabilities aren't fully developed yet. It's an ongoing work in progress. I think they are making some steps in the right direction as far as managing workstations centrally, like Intune."
"It would be better if reporting were more user-friendly. I would like to see an upgrade in the reporting structure in the next release. At the moment, you have to use an SQL query or configure it to pull reports through the graphical user interface. Their updates could be more regular. I think Mircosoft updates it every six months. They are also moving many things to Intune, and Microsoft decided to move the deployment solution there. I think SCCM is getting old, and Intune is new."
"SCCM should strive to enhance the accuracy of its reporting functions in order to avoid any issues with incorrect or inaccurate data."
"Regarding this, I'd like to mention the agent situation. When the agent on an end-user device is not functioning correctly, it can be quite problematic. It would be highly beneficial if there were a self-healing mechanism in place. Essentially, if the agent becomes corrupted or encounters issues, it should be able to rectify itself autonomously. This is particularly critical because, in order to utilize a tool like MECM (assuming you're referring to Microsoft System Center Configuration Manager), we need to deploy agents, known as AsMs, on all the devices we use, such as Windows 10 or Windows Server. Sometimes, when we deploy configurations or updates, they don't apply properly due to agent issues. This issue has been present since we began using MECM around 23 years ago. Unfortunately, there is currently no built-in mechanism for the agent to detect its own problems and initiate self-repair. Microsoft doesn’t have any feature to scan vulnerabilities and hence, they could include those."
"The assets have reached their end-of-life, and patching them is a complex and laborious task. It would be highly advantageous if there were an integrated solution that provided distinct options for each end-of-life asset, streamlining the process and facilitating comprehension."
"The ability to integrate MDM would be great."
"The cost of the product can be improved."
"Troubleshooting in general needs improvement. There's just a ton of logs to go through, and so finding the error log that corresponds with that you're doing can sometimes be difficult."
"Job management and control is an area that is in need of improvement."
"Some issues with scalability in larger organizations."
"A few bugs need to be figured out for the security side."
"One area for potential improvement involves the administrative portal, where numerous options, including asset management and patch management, are integrated."
"The old backup files created by this solution use up a lot of storage, and this needs to be improved."
"The platform’s dashboard and reporting features need enhancement."
"In the next release, I would like them to provide better connectivity. They must improve the connectivity between the WSS with Microsoft or the client."
"The ability to have more fine control within this solution is very important. It is not available for the solution in its current state."
More Microsoft Configuration Manager Pricing and Cost Advice →
More Microsoft Windows Server Update Services Pricing and Cost Advice →
Microsoft Configuration Manager is ranked 1st in Patch Management with 78 reviews while Microsoft Windows Server Update Services is ranked 3rd in Patch Management with 38 reviews. Microsoft Configuration Manager is rated 8.2, while Microsoft Windows Server Update Services is rated 8.0. The top reviewer of Microsoft Configuration Manager writes "Seamless system updates, useful integration, and reliable". On the other hand, the top reviewer of Microsoft Windows Server Update Services writes "Lets us manage all our organization's updates from a single management console". Microsoft Configuration Manager is most compared with Red Hat Ansible Automation Platform, ManageEngine Endpoint Central, Microsoft Intune, BigFix and Tanium, whereas Microsoft Windows Server Update Services is most compared with BigFix, ManageEngine Patch Manager Plus, Quest KACE Systems Management, Ivanti Neurons Patch for Intune and GFI LanGuard. See our Microsoft Configuration Manager vs. Microsoft Windows Server Update Services report.
See our list of best Patch Management vendors.
We monitor all Patch Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.