Try our new research platform with insights from 80,000+ expert users

BigFix vs Quest KACE Systems Management Appliance (SMA) comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 15, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Intune
Sponsored
Ranking in Unified Endpoint Management (UEM)
1st
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
279
Ranking in other categories
Configuration Management (2nd), Remote Access (1st), Enterprise Mobility Management (EMM) (1st), Microsoft Security Suite (1st)
BigFix
Ranking in Unified Endpoint Management (UEM)
4th
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
97
Ranking in other categories
Configuration Management (6th), Endpoint Protection Platform (EPP) (23rd), Patch Management (2nd)
Quest KACE Systems Manageme...
Ranking in Unified Endpoint Management (UEM)
8th
Average Rating
8.8
Reviews Sentiment
6.8
Number of Reviews
39
Ranking in other categories
Client Desktop Management (3rd), Endpoint Compliance (8th), Remote Monitoring and Management (RMM) (12th), Patch Management (10th)
 

Featured Reviews

AkashKamble - PeerSpot reviewer
Enables management of multiple operating systems with a single license
The best feature is that it's a Microsoft product, so if anything goes wrong, we get quick support for anything required. Remote system functionality allows us to sit anywhere and take control of any device via remote management. We can enhance security for clients' laptops with built-in Microsoft Defender, which is available with the Microsoft Intune license. We use it for reporting purposes through endpoint analytics. When pushing scripting, there are two types available: remediation script and reservation script. Through endpoint analytics, you can push defender policies to clients. It helps with reporting, inventory updates, and monitoring tenant status health.
Bella Yakoby - PeerSpot reviewer
Offers third-party patching feature, good scalability, and enhance endpoint management capabilities
From the perspective of the team that's handling the environment, it's not so user-friendly compared to other solutions, the competitors. We hire new teams from time to time, and they are complaining, look, although BigFix is very robust and cross-platform, it's not so fun to work with. The user interface for the technical teams is not so advanced. It's not so intuitive compared to SCCM, compared to ManageEngine. And this is the fact that they have, with the teams, because they have the rejection. The look and feel of the system are old-fashioned. For new employees, it's less easy to find someone I don't need to educate on how to work with BigFix. Although it's easy, it's not as intuitive as the other solutions, and the functionality of the other solutions is less advanced. Let's summarize: The user interface has to be changed from the perspective of the teams that are managing the product. It's old school.
Scott Tweed - PeerSpot reviewer
Low maintenance, reliable, and easy to create packages
I like how when you click on the device, it shows you everything that has changed as well as the software versioning. I am really enjoying the inventory aspect of it. The deployment process for both deploying and creating a package is straightforward. I believe the inventory in KACE is superior to SCCM's. I know with SCCM I could do things like remote console into machines via the agent's remote console, but that is not a feature that is provided in KACE. I know that at least in the Systems Management Appliance, I can't get to it. I'm not sure how distribution works, with distribution points. I'm not sure if KACE has that feature. You could use an SCCM to set up distribution points at remote sites so that they don't have to download patches or software from across the country. If you have a DP or something similar, they could pull it down.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The best part of Intune is device control. If we need to block a user from opening something in their organization's system, we can do it from Intune. If we want to restrict the movement of an organization's data to prevent users from copying the data into Outlook, WhatsApp, or their personal Gmail, we can limit that via Intune. It secures all corporate data."
"The biggest asset is the range of device management options available with Intune, whether it is a Windows device, a Linux device, a Mac device, or mobile devices."
"Application deployment and keeping the devices secure no matter where they are, by having this cloud solution — that has been great."
"The ability to manage devices with different sets of policies is most valuable."
"The overall user experience is quite nice. I have no complaints from end users regarding their devices enrolled in Intune."
"It helps us manage user certificates."
"The security-related tools are excellent; these features allow us to secure devices, lock them down, and ensure compliance."
"The aspects I find most valuable are the managing the data and applications. I can also restrict the users to install any applications. I can also wipe the data if the phone was missplaced or stolen. These are the basics for me."
"It covers multiple operating systems and helps with patch management."
"Pre-packaged support for many third-party applications such as Adobe, Google, Mozilla, Sun (Java), WinZip, and others."
"The most valuable aspect of BigFix is its ability to patch desktops. While we have complete control over servers and can easily push patches to them, desktops pose a greater risk for leaks and vulnerabilities if patches are not installed in a timely manner. By using BigFix, we have significantly improved our ability to patch desktops, whether they are laptops, desktops, or other mobile devices used by end-users."
"Patch management, because it very much improved the patch compliance and has the capability to manage Windows and non-Windows clients."
"It is pretty secure, and it gives extensive vulnerability features as compared to other applications. It supports multiple languages, and the security checks are pretty high as compared to other tools in the market."
"The use of fast query has been extremely valuable providing insight in real time of the endpoints."
"The most valuable features are patch management, software installation, and asset management."
"I like the inventory and life cycle management feature."
"The initial setup is relatively easy."
"KACE has made our life much easier since we got off the Microsoft solution. The Microsoft solution was a lot harder to image over different ports and stuff. They would only have this one place where we could do all the imaging. Now, we have a whole building where we can image from. This means that we can image from our storage area, where we have a place to do our imaging. We can also image right at our desks, which is a lot easier."
"We use the Systems Deployment appliance. It's our bread and butter. It is every machine that gets imaged here in this building and out through the whole state goes through the SDA. We rely on it completely. There is no manual process of getting a laptop out of a box, plugging it up, turning it on, and waiting for Windows to start. If you were to go to Best Buy and buy a brand new laptop, you spend the next two to three hours just setting it up. We don't do that. We get a laptop, plug it into the network, connect it to the SDA, and within about three clicks, we're done."
"The scripting part increases IT productivity because of the specialized software in our environments for students' courses. You need to use software which is not programmed by developers. A lot of software for building houses or other things is developed by normal guys, who do not have much skill in programming. When you need to install this type of software, it is very difficult. You have to install registry keys, etc. For that, it is very good to use the scripting part of this solution. So, you can automate this part as well."
"The most valuable feature of KACE is the mass package deployment. There are a lot of endpoint management solutions in the market. The way KACE responds is with the installation management feature, which is done in a very intelligent way, as well as scripting. It's wow. It's really wow. On top of that, there is a mass undeployment feature as well."
"When vulnerabilities are exploited so much, it is nice to be able to quickly detect or deploy what is needed within our off-work hours or during work hours without a reboot."
"The solution provides us a single pane of glass with everything that we need for endpoint management of all devices. It definitely has made our endpoint management process much easier."
"We're able to deploy software and push out fixes to endpoints faster than ever."
 

Cons

"Microsoft Intune is not user-friendly to manage and has room for improvement."
"I would like to see better integration with Microsoft. There are a few things I can still do with Jamf that I am unable to do with Intune yet."
"The tool's tunnel gateway is not very good, making it an area where improvements are required."
"It would be good if, in addition to the minimal patching and compliance, we could also use Intune for application deployment. For instance, if a device is not patched, Intune should have the ability to push not only a Microsoft patch but also other patches, such as a browser patch."
"Intune needs to incorporate more tools to reduce the number of third-party applications we rely on."
"I'm still playing around with it and haven't had any issues with the product yet, but support can definitely be improved."
"I rate Microsoft customer service six out of 10. While some technicians go above and beyond, there is inconsistency, and connecting with the most helpful representatives is occasionally challenging."
"It would be interesting to integrate the server side of Intune. Some group policy updates we have on the Windows Server side and possibly some on the client side could also be included."
"To make it a ten they should improve the licensing. Second, if they could have one environment for everything it would be nice. For you to install compliance you need to install the server, and then you add the modules. For you to install inventory you install the server and then you add the modules. It's not easy to do. When I was doing it before I learned it, it was not straight forward."
"I would eventually like to see a SaaS offering, a cloud-hosted BigFix instance where we only have to put a relay in our environment."
"The stability is generally pretty good. The one thing that we came across is the battle between load on endpoints and load on our servers and relays versus how quickly, effectively and reliably actions can be taken. I'd like to not have to take an action on a system while I'm working with someone and then have to say whether something will happen between five seconds or thirty minutes from that point."
"The only thing that I don't like about BigFix is that it does not support other devices such as printer firmware, router firmware, and things like that. I will be happy if I can control everything and get everything else in there, even if it is just a line item. They can do some enhancements to the Web UI. I am trying to get customers to be able to manage their environment by using Web UI, and it would be good if we can delete endpoints by using Web UI. We should also be able to generate Excel content or data tables from the Web UI without having to go to the console. It is small stuff, and it drives me crazy that I have to go to another console to do these things."
"I would like to see a web UI SDK so we could take what is provided currently and be able to build our own customized web UI for particular customers that want to sell service."
"Around the scalability concern, I would like to see the ability to run teamed, clustered, or hierarchical root servers, in order to provide a more robust, high availability system. The single monolithic root server model does somewhat bother me."
"The deployment has room for improvement and can be more streamlined."
"The main shortcoming of BigFix was integration with vulnerability management. If you had a vulnerability in your software and BigFix on the endpoint, you needed integration with Qualys, Tenable, or another vulnerability management solution to fix that. It was like, "Okay, we can identify issues, and get that information back from the endpoint, but what are we doing about it?""
"We had issues with the tool's support. We are a Dutch firm and everything has to be in Dutch. We were not able to do the alerts. You were required to tweak them a lot to get them in the language that you preferred. The solution's support depended on the person that you got online. Sometimes, the response was fast and other times you needed to wait a long time. The support also depended on the levels of support that you had requested."
"It could be designed a little bit more intuitively in terms of administration."
"Sometimes the information is not as real time as it's supposed to be."
"The software asset management functionality is an area that needs to be improved. It could be more automated because when connections need to be made, such as when I connected Adobe and my malware removed, the process was pretty much manual."
"There is always room for improvement. However, the system does most of what we need at this moment."
"The labeling process should be more streamlined. It should be easier to do. It gets confusing at times."
"Paying for the product should come with full and extended training anytime it is needed."
"My biggest complaint is that almost every time they send out a new version, it fixes something and breaks another. Something that wasn't working in the last version now works, but something else stops; or they'll remove some dashboard that I really found to be nice and replace it with something totally different that I could care less about."
 

Pricing and Cost Advice

"Intune's pricing is reasonable considering its benefits and the high costs it helps avoid."
"There is a license needed for this solution and it is either included in one of the enterprise license agreements. Microsoft licensing is a mathematical institute, it could be quite complex. We tend to ask specialized organizations to research what the most profitable way it would be for us to use licenses in the organizations."
"There is a license required to use the solution. If you're core users in Office 365, for example, you have Outlook email and E3 license, this is only email. You have to buy an EMS license to have Microsoft Intune. It is expensive."
"It is not expensive."
"Intune is included with our F3 and E5 licenses."
"It's reasonable. They're not giving it away, but it's reasonable."
"Intune is available as an individual product, but it also comes with Office 365 Premium or an Enterprise license, and the price varies for each version."
"Cost is not my department, but the product is included in the E5 license that we already pay for every user, so no additional cost is incurred."
"We have a subscription-based contract with BigFix."
"You get what we call the Platform Edition, which you get for free. The patch service is maybe $0.50 per workstation per month. Then there's the basic server cost, which is about $1.50 per server per month. You also get into Lifecycle which does power management, OSD remote control, and those types of things, and that might be about 10 times the price - which works out to about $13 per server and, maybe $5 per workstation per month."
"There's not much big cost. We only have to pay the agents' cost for the server, and for the systems."
"The tool's price continues to go up. The cost per endpoint can vary, ranging from approximately 30 to 80 dollars per year. Compared to other products, pricing is in the middle. You need to buy an additional database license, but most users already have it."
"It is too costly. It is one of the best tools, but because of pricing, not all clients support it. Its licensing is on a yearly basis."
"You are charged per server and per workstation when using BigFix. ManageEngine is a lot cheaper than BigFix. There are some additional costs, such as support."
"So, the pricing is slightly more expensive than the others. I have to keep buying licenses every time I add a new device."
"Its price is very reasonable."
"n terms of pricing and licensing, my advice is that you need to assess what you need and then look at what they offer. It's easy to get caught up in the things that you want, but don't really need."
"It was a very attractive price. This is a huge feature of this product. If you would "credit score" this product versus others out there on the market, this one has a very attractive price."
"The pricing is great. It's billed annually and it's very reasonable."
"Based on other solutions that we had implemented, its pricing seems to be quite competitive. It is not inexpensive, but it is also not more expensive than any other solution. They have the standard licensing fees and support fees."
"Licensing is done on a per device basis, so it's dependent on how many agents you've got installed."
"The pricing and licensing are absolutely fair."
"The pricing and licensing are good. It's worth it."
"We buy consulting fees from Software Factory, then we pay extra for it."
report
Use our free recommendation engine to learn which Patch Management solutions are best for your needs.
861,524 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Financial Services Firm
9%
Manufacturing Company
9%
Government
8%
Financial Services Firm
14%
Educational Organization
13%
Government
10%
Computer Software Company
8%
University
11%
Computer Software Company
10%
Government
10%
Financial Services Firm
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does Microsoft Intune compare with VMware Workspace One?
Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes ...
What are the pros and cons of Microsoft Intune?
Microsoft Intune is a great configuration management tool and has a lot of good things going for it. Here are some of...
How does Google Cloud Identity compare with Microsoft Intune?
Microsoft Intune offers not only an easy-to-deploy data protection and productivity management solution, but also ...
What do you like most about BigFix?
The most valuable features of the solution are Windows patching and the hardware and software inventory.
What is your experience regarding pricing and costs for BigFix?
The pricing is competitive, but not the most competitive.
What needs improvement with BigFix?
While performing integration, we face many issues with IBM solution. We need detailed information about those issues ...
What is your experience regarding pricing and costs for Quest KACE Systems Management?
My experience with pricing, setup cost, and licensing for Quest KACE Systems Management Appliance (SMA) is that, hand...
What needs improvement with Quest KACE Systems Management?
I wish Quest KACE Systems Management Appliance (SMA) would have a top-down approach since we use orgs; currently, we ...
What is your primary use case for Quest KACE Systems Management?
My main use case for Quest KACE Systems Management Appliance (SMA) is to deploy applications and maintain security, a...
 

Also Known As

Intune, MS Intune, Microsoft Endpoint Manager
Tivoli Endpoint Manager
Dell KACE Systems Management
 

Overview

 

Sample Customers

Mitchells and Buzzers, Callaway
US Foods, Penn State, St Vincent's Health US Foods, Sabadell Bank, SunTrust, Australia Sydney, Stemac, Capgemini, WNS Global Services, Jebsen & Jessen, CenterBeam, Strauss, Christian Hospital Centre, Brit Insurance, Career Education Corporation
Waypoint, Mattos Filho, Meetic, Gems Education, Green Clinic HealthSystem, Service King
Find out what your peers are saying about BigFix vs. Quest KACE Systems Management Appliance (SMA) and other solutions. Updated: May 2025.
861,524 professionals have used our research since 2012.