Try our new research platform with insights from 80,000+ expert users

Ivanti Security Controls vs Microsoft Configuration Manager comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 22, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Ivanti Security Controls
Ranking in Patch Management
13th
Average Rating
8.6
Reviews Sentiment
6.5
Number of Reviews
4
Ranking in other categories
No ranking in other categories
Microsoft Configuration Man...
Ranking in Patch Management
2nd
Average Rating
8.2
Reviews Sentiment
6.6
Number of Reviews
86
Ranking in other categories
Software Distribution (1st), Server Monitoring (6th), Configuration Management (3rd)
 

Mindshare comparison

As of March 2026, in the Patch Management category, the mindshare of Ivanti Security Controls is 2.5%, down from 2.7% compared to the previous year. The mindshare of Microsoft Configuration Manager is 7.8%, down from 14.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Patch Management Mindshare Distribution
ProductMindshare (%)
Microsoft Configuration Manager7.8%
Ivanti Security Controls2.5%
Other89.7%
Patch Management
 

Featured Reviews

Chethan R - PeerSpot reviewer
Windows Security Patching Operation III (Cyber Operations) at CBTS
Has reduced hardware strain through agentless patching and improved asset visibility
This solution does not have capability of managing applications. It is only used for asset management and patch management. Regarding analytics for Ivanti Security Controls, it does not have extensive capabilities. It is a basic tool from Ivanti for scanning and deploying. It does not have analytics features such as EDR or security tools available in the market. It only has capability to check missing patches, find them, and deploy them. When it comes to reports, compliance reports or similar types of reports are not user-friendly. Expertise is required for handling these aspects. The asset management in Ivanti Security Controls needs more visibility. Additionally, it can be improved to handle in-house applications, which currently cannot be installed. It can only handle existing applications, unlike Ivanti's Endpoint Manager. It should have additional features in this area that need improvement.
NS
Senior System Engineer at a tech services company with 10,001+ employees
Centralized endpoint control has streamlined deployments and improved security compliance
In my experience, the best features of Microsoft Configuration Manager are software deployments and updates, OSD, hardware and software inventory, compliance and configuration baseline, reporting and monitoring, and integration with Intune hybrid management. These features make endpoint management efficient and scalable. The feature I rely on the most day-to-day is software deployment and patch management. It keeps endpoints updated and secure with minimal manual effort. Inventory and compliance monitoring are also important, but daily deployments are critical. Microsoft Configuration Manager has had a significant positive impact on our organization in several ways: improved efficiency, enhanced security and compliance, standardization, scalability, and visibility reporting. Overall, Microsoft Configuration Manager has helped us save time, reduce risk, improve operational efficiency, and maintain strong control over our endpoints. One of the biggest impacts Microsoft Configuration Manager has had on efficiency is the reduced manual work for software deployment and patching. For example, deploying a new application or security updates to hundreds or thousands of devices previously required several days of manual effort, including running scripts, checking devices individually, and validating installation. With Microsoft Configuration Manager, these tasks are automated and managed, allowing deployments to complete in hours rather than days. We also have automated reporting for deployment success and compliance which saved the IT team significant time that used to be spent gathering and reconciling inventory data from multiple tools.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Ivanti Security Controls is a better solution than SCCM."
"What has been most valuable is the ability to manage, restore and install upgrades and applications. We scan PCs and server and receive results."
"Ivanti Security Controls is an agentless tool which means we do not need to install any agent on the server or endpoint, and through agentless capabilities, it can install software, install patches, and control over the server, including asset management."
"Technical support is helpful and responsive."
"The most valuable features I find in Microsoft Configuration Manager are mostly patching, deploying software, deploying images, and running custom scripts."
"Automation of operating system, application, and update deployments massively reduces IT operations effort."
"Technical support was helpful and responsive."
"SCCM does everything from A to Z for a Windows operating system."
"The most valuable features are Remote Connect, SUP, Cloud functionality, Report, Query, and third-party patching."
"Overall, I believe Microsoft Configuration Manager is definitely a good product."
"With the SCCM inventory, we found a lot of rogue applications. We were able to identify them, find out who was running them, and either put them on our application list or remove them."
"The most valuable feature is the graphical-based reports of software updates that have been successful, the ones that have failed, and a summary of where the failures are what security breaches may occur."
 

Cons

"When it comes to reports, compliance reports or similar types of reports are not user-friendly. Expertise is required for handling these aspects."
"Ivanti Security Controls is a powerful product, but it has quite a steep learning curve."
"It should be more scalable."
"For the Windows upgrade, the errors we experience are not clear. We see a time out error but do not know the reason. We would like to know the root cause."
"The database should be made to be more stable and robust, but not so much the configuration."
"There should probably be better remote support. They should also continue to improve on patch management, patching, and creating or turning products in software into deployable apps."
"Regarding this, I'd like to mention the agent situation. When the agent on an end-user device is not functioning correctly, it can be quite problematic. It would be highly beneficial if there were a self-healing mechanism in place. Essentially, if the agent becomes corrupted or encounters issues, it should be able to rectify itself autonomously. This is particularly critical because, in order to utilize a tool like MECM (assuming you're referring to Microsoft System Center Configuration Manager), we need to deploy agents, known as AsMs, on all the devices we use, such as Windows 10 or Windows Server. Sometimes, when we deploy configurations or updates, they don't apply properly due to agent issues. This issue has been present since we began using MECM around 23 years ago. Unfortunately, there is currently no built-in mechanism for the agent to detect its own problems and initiate self-repair. Microsoft doesn’t have any feature to scan vulnerabilities and hence, they could include those."
"The solution should incorporate AI. It should also incorporate real-time capabilities. If we could get real-time information about challenges or issues, it would allow us to take immediate action. For example, with the recent outage caused by the Windows issue, having a real-time warning system could have helped us avoid or reduce the downtime we experienced."
"Devices like smartphones and tablets are managed very well on VMware, however, they are absent in SCCM. I could configure iPad from the VMware site and it was done very easily. It should be just as possible on SCCM."
"The tool's deployment can be cumbersome."
"Management of Linux devices could be improved."
"The tool's deployment is difficult. Microsoft needs to improve documentation with videos."
 

Pricing and Cost Advice

Information not available
"Its licensing is quite complicated because we are getting the license not only for SCCM but for the full Microsoft package. We don't need to pay for a separate license. We need to have one license that includes everything we need, such as Windows, Microsoft 365, SCCM, encryption, and so on. So, we don't have a specific price for it. Perhaps, it is good that it includes the full suite of licensing of Microsoft. It is expensive, but we are getting a lot of features."
"Pricing and licensing are a downside of SCCM. It's expensive. I'd have to confirm this, but I think they changed the licensing to core-based instead of socket-based. It's not cheap, because you have to buy the software, you have to buy SQL. Another thing we learned from talking to Microsoft is that they provide you a license for SQL if you run it on the same box as the primary server. If you run it outside that box, you have to buy SQL. Microsoft does recommend you running it on the same box because of performance. But then, in order to run SQL, SCCM, and everything on the same box, you better have some resources. It's an expensive solution. There's no doubt about it."
"When you compare this solution with other tools in the market you might actually find a lot of variation in the pricing and that's why people opt for the other tools rather than Microsoft tools."
"The price could be better."
"The license price could be reduced for Microsoft Endpoint Configuration Manager They should make the price more affordable for smaller companies, most companies would be able to use the solution if it was priced better. There are more people on this cloud because you don't have to have either a server room or an on-premise server. You can have one IT person handle this without any local infrastructure."
"The solution is expensive. Microsoft Configuration Manager would likely be considered high-priced for small businesses because they may not fully utilize all of its features and capabilities."
"We have to pay for a license."
"Presently, I am using a free trial version."
report
Use our free recommendation engine to learn which Patch Management solutions are best for your needs.
884,122 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
18%
Outsourcing Company
12%
Financial Services Firm
10%
Government
9%
Financial Services Firm
11%
Government
11%
Computer Software Company
7%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise13
Large Enterprise66
 

Questions from the Community

What needs improvement with Ivanti Security Controls?
Ivanti Security Controls is a powerful product, but it has quite a steep learning curve. There is quite a lot to learn, though it proves to be very powerful if you put in the time to learn how to u...
What is your primary use case for Ivanti Security Controls?
We are using Ivanti Security Controls for deploying Windows updates to Windows servers.
What advice do you have for others considering Ivanti Security Controls?
I am currently working with Ivanti Security Controls as a customer. I think Ivanti Security Controls is an effective product for this purpose. I would give tech support for Ivanti Security Controls...
How does Ansible compare to Microsoft Endpoint Configuration Manager (SCCM)?
Microsoft Endpoint Configuration Manager takes knowledge and research to properly configure. The length of time that the set up will take depends on the kind of technical architecture that your org...
How to choose between ManageEngine Desktop Central and Microsoft Endpoint Configuration Manager (formerly SCCM)?
ManageEngine Desktop Central is very easy to set up, is scalable, stable, and also has very good patch management. What I like most about ManageEngine is that I can log on to every PC very easily a...
What do you like most about SCCM?
One of the standout features of SCCM is its application management capabilities. It allows us to create packages efficiently and deploy them to specific groups within our network. This streamlined ...
 

Also Known As

No data available
Microsoft Endpoint Configuration Manager, System Center Configuration Manager (SCCM ), Microsoft SMS
 

Overview

 

Sample Customers

Information Not Available
Bank Alfalah Ltd., Wªrth Handelsges.m.b.H, Dimension Data, Japan Business Systems, St. Lucie County Public Schools, MISC Berhad
Find out what your peers are saying about Ivanti Security Controls vs. Microsoft Configuration Manager and other solutions. Updated: March 2026.
884,122 professionals have used our research since 2012.