Try our new research platform with insights from 80,000+ expert users

AWS Config vs BigFix comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 16, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Intune
Sponsored
Ranking in Configuration Management
2nd
Average Rating
8.2
Reviews Sentiment
6.8
Number of Reviews
305
Ranking in other categories
Remote Access (2nd), Enterprise Mobility Management (EMM) (1st), Unified Endpoint Management (UEM) (1st), Microsoft Security Suite (1st)
AWS Config
Ranking in Configuration Management
16th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
5
Ranking in other categories
No ranking in other categories
BigFix
Ranking in Configuration Management
9th
Average Rating
8.6
Reviews Sentiment
6.6
Number of Reviews
98
Ranking in other categories
Endpoint Protection Platform (EPP) (35th), Patch Management (5th), Unified Endpoint Management (UEM) (9th)
 

Mindshare comparison

As of December 2025, in the Configuration Management category, the mindshare of Microsoft Intune is 8.7%, down from 10.1% compared to the previous year. The mindshare of AWS Config is 2.4%, up from 0.9% compared to the previous year. The mindshare of BigFix is 7.3%, down from 9.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Configuration Management Market Share Distribution
ProductMarket Share (%)
Microsoft Intune8.7%
BigFix7.3%
AWS Config2.4%
Other81.6%
Configuration Management
 

Featured Reviews

AkashKamble - PeerSpot reviewer
Sr MacOS specialist engineer at Cyber24
Enables management of multiple operating systems with a single license
The best feature is that it's a Microsoft product, so if anything goes wrong, we get quick support for anything required. Remote system functionality allows us to sit anywhere and take control of any device via remote management. We can enhance security for clients' laptops with built-in Microsoft Defender, which is available with the Microsoft Intune license. We use it for reporting purposes through endpoint analytics. When pushing scripting, there are two types available: remediation script and reservation script. Through endpoint analytics, you can push defender policies to clients. It helps with reporting, inventory updates, and monitoring tenant status health.
Dineshkumar Thulasiraman - PeerSpot reviewer
Cloud Engineer at cloudifyops
Useful for vulnerability scanning and data encryption
AWS Config's dashboard improved our company's security as it helps with the vulnerability scanning of resources. AWS Config integrates with the existing security infrastructure of our company, and it is an easy process that is not at all complicated. AWS Config is a security product. The tool protects its users' resources and data from unauthorized access, security breaches, and threats. The product helps with data encryption. You can have your data on AWS KMS, which helps with data encryption. For areas like SSL/TLS encryption, the tool offers data protection between AWS services and endpoints. As I need to learn the components of the product, I rate the overall tool a seven out of ten.
JC
Technical Director at SYSTEX
Comprehensive client management and software distribution made efficient
Implementing a business solution with BigFix has some issues, primarily concerning the time required for distribution to clients if there are too many. Building a management console is quick and simple, taking only one to two hours for setup. However, a demo or trial may take over a week or two for completion.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It allows our clients to have the confidence to centrally manage policies for security. It helps them in securing the organization from a technology aspect."
"We like Intune's Autopilot functionality, which enables one-touch deployment. Dynamic grouping is another feature we find valuable working in academia. We have people in buckets based on their roles in the university, such as faculty, staff, alum, or grad. Sometimes, they will fit into multiple places, and dynamic grouping helps with that."
"The automatic patching is the most valuable feature of Intune."
"It supports end-users who tend to lock their devices quite frequently. Its conditional access policy helps us keep the users logged into their devices."
"The user experience of Microsoft Intune is quite good because there's not much disturbance in the background; it's just running in the background."
"I appreciate how easy it is to deploy certificates to end users to get control over their device with Microsoft Intune; that's what Microsoft Intune is known for, and that's what we use them for."
"The most valuable feature of Intune is the central dashboard for compliance and policy management."
"I mainly use Microsoft Intune analytics for taking that data that exists and bringing it into Power BI dashboards to make it visible to our clients, showing them all the operating systems in their environment and where the latest patches are, and then from there creating plans."
"The initial setup is super easy, it takes like two minutes. Literally a one-click deployment."
"The solution is scalable and provides over 100 rules."
"The tool protects its users' resources and data from unauthorized access, security breaches, and threats."
"AWS Config's dashboard improved our company's security as it helps with the vulnerability scanning of resources."
"The scalability is a ten out of ten."
"Installing the instances and performing upgrades is smooth and clean."
"I would advise someone considering this product to go for it. It's easy to use, cheaper than the value, and there is tons and tons of support from the BigFix community. With almost every challenge we have someone who has encountered it, and you will have a solution right away."
"It allows for visibility into the OT, the industrial environments, that didn't exist before which is a big piece and has benefited my organization. Second, the speed at which people can patch is night and day versus SCCM scan or another similar solution."
"The most valuable features are patch management, software installation, and asset management."
"We rely on BigFix as part of our consulting engagements. It's more efficient from a visibility and discovery standpoint on the initial phase, the consulting engagement. It also increases our efficiencies on the remediation phase of our engagements."
"The tool's most valuable features are patching and integration with vulnerability scanners."
"The most valuable feature of BigFix is the software deployment."
"DOWNLOADING-PATCHES; It has also helped to reduce network traffic when it comes to downloading patches. By only having to download the patch once to the central location and then utilizing the relay structure to then download the patch to a specific site and then everything gathering at local, it greatly reduces the bandwidth of multiple endpoints."
"It is a one-stop tool that allows you to do everything. It supports reporting, vulnerability management, patch management, and configuration. All things can be done in one tool."
 

Cons

"The reporting and cost have room for improvement."
"There is improvement needed in integrating with the installed Office solutions versions, such as Office 2019. The Office 365 integrates without a problem."
"We are facing issues with Apple products. With macOS and iOS, there are some difficulties with the updates because we cannot get full control of Apple products. In the case of Windows, it is fine, but in the case of Apple, we have some difficulties. We cannot control everything through Intune."
"We are currently unable to control aspects of group policy from Teams like we can for GPO. They are still not part of Intune. Microsoft is adding this, but it's currently in preview, and few GPO features have been added to the product."
"From an end-user perspective of Microsoft Intune, I haven't experienced any challenges since installation. However, some customers have reported experiencing slowness when using lower versions of the Android system."
"The installation could be improved to be simplified."
"When pushing anything from Microsoft Intune, the sync timing is 48 hours. While sometimes it takes 5 to 10 minutes, the official period given by Microsoft is within 48 hours, which can be time-consuming for policies, applications, or patches."
"Microsoft Intune could enhance its patch management for various devices, ensuring regular updates and tracking of device privileges."
"There is room for improvement in built-in tools, they are not up to the mark."
"Improvements are needed as per customer requirements."
"The solution is missing a configuration that can assist us when writing our programming languages."
"The reboot process for AWS instances could be improved. Microsoft Azure does not have this problem, so AWS could consider making their instances more robust. You would not need to reboot your instances frequently to replace the hardware and stuff. They can look for a better approach or mechanism to improve in the future. The concern is that you need to plan for the outage when you reboot an instance. You need to have a maintenance window where you can properly reboot the instance without affecting your application. When Amazon announces that you need to reboot an instance and are not ready, this becomes a problem."
"The new EDR (Endpoint Detection and Response) feature, Detect, is new and still needs a few updates."
"Relay selection and availability needs improvement as an incorrect relay selected can cause network chokes."
"For improvements, it would be good if BigFix supported more databases. Currently, it only supports DB2 and Microsoft SQL. Adding support for other databases like Oracle would be beneficial."
"Around the scalability concern, I would like to see the ability to run teamed, clustered, or hierarchical root servers, in order to provide a more robust, high availability system. The single monolithic root server model does somewhat bother me."
"I would like to see more integration with external data."
"BigFix could improve its asset management capabilities to discover assets, including hardware."
"We would like to see a different license plan, e.g. to include features from lifecycle with Patch Management, as an example."
"I want to see a solution for being able to deploy automated software to a Mac running OS X 10.13, something that's going to deal with kernel exceptions and answering prompts for user permissions for data folders and whatnot. They need to really streamline and automate the Mac software deployment."
 

Pricing and Cost Advice

"We don't pay for Intune because it is bundled with the premium subscription to Office 365. It includes Intune and Defender. I don't have to buy two extra products to manage my enterprise."
"The Intune license model is costly."
"All security solutions worldwide are expensive. Microsoft has allowed a small scale of features within Microsoft Intune for cost-efficient solutions. If you want the full suite, you need to invest more to gain better security features."
"There is a license required to use the solution. If you're core users in Office 365, for example, you have Outlook email and E3 license, this is only email. You have to buy an EMS license to have Microsoft Intune. It is expensive."
"For organizations that are a Microsoft shop, the pricing is compelling."
"There is a license needed to use the solution and we are on an annual license."
"Intune's pricing is reasonable considering its benefits and the high costs it helps avoid."
"Pricing can be improved."
"It is a very expensive tool. AWS pricing for Config is not fixed and depends on your organization's size and complexity."
"The solution charges us per hour. There's no license."
"We have a subscription-based contract with BigFix."
"The product is less costly when compared to other solutions, and this is a good solid solution for what we have paid."
"The price is very fair."
"You get what we call the Platform Edition, which you get for free. The patch service is maybe $0.50 per workstation per month. Then there's the basic server cost, which is about $1.50 per server per month. You also get into Lifecycle which does power management, OSD remote control, and those types of things, and that might be about 10 times the price - which works out to about $13 per server and, maybe $5 per workstation per month."
"So, the pricing is slightly more expensive than the others. I have to keep buying licenses every time I add a new device."
"The tool's price continues to go up. The cost per endpoint can vary, ranging from approximately 30 to 80 dollars per year. Compared to other products, pricing is in the middle. You need to buy an additional database license, but most users already have it."
"The license is subscription-based."
"On a scale from one to ten, where one is expensive and ten is cheap, I rate the solution's pricing one out of ten."
report
Use our free recommendation engine to learn which Configuration Management solutions are best for your needs.
879,371 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Manufacturing Company
10%
Financial Services Firm
9%
Government
8%
Financial Services Firm
22%
Comms Service Provider
8%
Photography Company
6%
Manufacturing Company
6%
Financial Services Firm
15%
Manufacturing Company
9%
Government
9%
Computer Software Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business117
Midsize Enterprise46
Large Enterprise152
No data available
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise12
Large Enterprise66
 

Questions from the Community

How does Microsoft Intune compare with VMware Workspace One?
Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes ...
What are the pros and cons of Microsoft Intune?
Microsoft Intune is a great configuration management tool and has a lot of good things going for it. Here are some of...
How does Google Cloud Identity compare with Microsoft Intune?
Microsoft Intune offers not only an easy-to-deploy data protection and productivity management solution, but also ...
What do you like most about AWS Config?
The initial setup is super easy, it takes like two minutes. Literally a one-click deployment.
What needs improvement with AWS Config?
Improvements are needed as per customer requirements.
What is your primary use case for AWS Config?
I use the solution in my company to check the vulnerabilities for all the resources, including tools like S3, EC2 Ins...
What do you like most about BigFix?
The most valuable features of the solution are Windows patching and the hardware and software inventory.
What is your experience regarding pricing and costs for BigFix?
The pricing is pretty good and now follows a subscription model similar to other major software solutions, making it ...
What needs improvement with BigFix?
The reporting still needs improvement since customers want specific reporting, such as N-1 month patching reports. In...
 

Also Known As

Intune, MS Intune, Microsoft Endpoint Manager
No data available
Tivoli Endpoint Manager
 

Overview

 

Sample Customers

Mitchells and Buzzers, Callaway
Flatiron, Prezi, iZettle, British Gas, Burt, Autodesk, FanDuel
US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation
Find out what your peers are saying about AWS Config vs. BigFix and other solutions. Updated: December 2025.
879,371 professionals have used our research since 2012.