What is our primary use case?
We have two main use cases of Desktop Central. The first is patching, because we want to keep our systems secure. We install Microsoft security updates using ManageEngine Desktop Central every month. The second case is to deploy applications. We want to install applications to the machines from a central location. Also, we want to give access to users so they can install whatever applications they need using the self-service portal option. When there is a common application used by many users, we publish it to the self-service portal so users can install it themselves instead of contacting local IT. Those are our two main use cases of ManageEngine, but we also use it for other tasks, such as remote connection. Our local IT uses two products: ManageEngine Desktop Central and TeamViewer. We use both to connect to the remote machines.
We have the on-premise version, but we are looking to move forward to the cloud version once they start supporting data migration—at the moment, they don't support it.
How has it helped my organization?
One of the benefits of Desktop Central is it made the provisioning process simpler because now we have a provisioning package. We have around 1,500 laptops at the moment and all these PCs were provisioned by a provisioning package. In the provisioning package, we have integrated every aspect of renaming, deploying applications, patching, etc., so we simply execute the provisioning package and as soon as it's executed, it will install the management agent. Once the agent is installed, it will take care of all the tasks, so we don't have to sit in front of the computer to prepare the machine. This really helps us to provision the PC quickly with our agent.
Now, we are going to do a PC refresh. It's a big project for next year. We are going to replace all of our PCs—1,500 PCs—with a new one, for all the users, so we have big requirements for ManageEngine. ManageEngine does a lot of scripting work in the backend—including renaming the computer according to our conventions, distributing applications, patching—so when we prepare the machine, we want everything to be installed and ready to give to the user. We don't want to wait or take more time, so we've now combined ManageEngine with Microsoft's Autopilot and Intune to provision the PCs. PC provisioning is made easier with ManageEngine.
Another benefit is we have the option to pilot updates with some machines before distributing them to production, and this can be completely automated. We don't have to create said task every time for testing and deployment, so once we scope it, it relieves the time we spend each month deploying patches. It regularly runs in our schedule with the reboot options. We give reboot notifications in a user-friendly manner to employees, with the option to postpone the reboot. This relieves the time that we spend with end users since it's user-friendly.
What is most valuable?
One of the most valuable features is patching. They support third-party patching as well, so we don't have to use another product. They support both Microsoft and third-party updates, and this is one of the main functionalities that we use regularly.
The software deployment feature is also valuable because, once in a while, we need to distribute applications, such as VCO, Office applications, etc. For example, when we prepare a PC for users. We use ManageEngine to perform lots of tasks.
We also have the option to deploy scripts via ManageEngine. We use some scripts that are to be deployed during the machines' provisioning, to make sure our machines are renamed properly according to the naming conventions we want. For example, for the France region, we want FRP, France Paris, and then the serial number. We want to deploy some script that renames the PC after the machine is provisioned, and we also want to deploy background images, logon screen, logout screen, etc. So we deploy all these policies using ManageEngine.
What needs improvement?
ManageEngine could be improved by giving customers an option to perform certain actions proactively. Since I was a consultant, I worked on different products and some had advantages over ManageEngine. For example, proactive remediation—you want to proactively check something on the computers and run the script. In ManageEngine, you have the option to run the script, but Intune has the option to do so proactively. ManageEngine doesn't have this. You should have the option to act proactively, not just going ahead and fixing it once it's done. Proactive remediation should be a feature.
Another thing is, with PC provisioning, they have to make it in a modern way. They have deployment, but it's a very outdated process right now. It's a modern workplace, so you have to provision a PC live, on the go—it's not that you create images and then distribute the image to the machines. Many customers are not using this and, in fact, we are not using it. We use a modern way of PC provisioning. So they have to concentrate on that more.
There are small glitches, but it's not going to stop you from using the product. For example, when you open the configuration, you may not see the details, but if you refresh the page, you will see them. There are small glitches here and there that we can see.
For how long have I used the solution?
I began using this solution about a year ago. In the past, I implemented this solution for different customers, but now I am an end user.
What do I think about the stability of the solution?
This solution is very stable. It depends on the size of the company, though. For us, it's very stable because we don't have many machines. The overall count is 1,800 to 1,900 machines—our license is for 2,050, but we've currently only utilized 1,900. So our infrastructure is medium-sized, I would say. If you go for 10,000, 20,000, you might have some lagging in the performance, but I'm not sure.
It doesn't really require much maintenance. You just keep it as you want and regularly do a cleanup of old applications—when you delete, you have a new version of the package, so you might want to clean up the old packages—and that's it. You have automatic cleanup functionalities in the product itself. For example, if you download an update for this month and, after three months, none of the machines require this patch anymore, it automatically cleans up. You have some settings to enable so that you don't have to manually work on the cleanup.
What do I think about the scalability of the solution?
This solution is very easy to scale. We are trying to create lots of virtual machines in Azure Virtual Desktop, so we might increase our machines by another 100 or 200.
How are customer service and support?
ManageEngine's support is one of the best, I would say. We have chat support, so I can immediately ping someone in support, from my end product console, and get assistance very quickly. If I have a question, I can ask them directly; if I have technical questions, I can ask them, and they will provide an answer right away. If I write an email, it will take three to four hours. Since I was a support engineer before, I don't normally raise questions, but when I do, I normally get quick replies. Because it's a one-to-one chat, you get immediate responses from the chat window.
Which solution did I use previously and why did I switch?
In the past, when I first joined this company, we were using WSUS to patch all of our machines, but we didn't have any control over what patches were installed. We didn't have a proper reporting aspect in WSUS—we could have, but it's very complicated. We'd have to connect the information using SQL Server and pull the information, and that's lots of querying. But with ManageEngine, it's explicit. You go and collect the reports as you want, such as the number of patches installed on a machine or how many machines got a particular update. We even have the option to uninstall patches once they're installed, so we can go back to the previous patch version of the application.
Another drawback with WSUS is that you don't have the option to scale a reboot. With ManageEngine, we can give reboot notifications in a user-friendly manner to employees, with the option to postpone, and after a certain number of days, you can reboot forcefully. This relieves the time that we spend with end users, who now get a pop-up. You don't have many options with WSUS, but with ManageEngine, you do.
How was the initial setup?
The deployment process is very easy. It's a combined product, so when you install the Desktop Central EXE, you install the database on the same machine, as well as the web server components like Apache Tomcat and Observer. Basically, when you install the EXE, you just click "next," "next," "next," and then it's done. It's not a big deployment. In terms of planning, you might need a little bit of time, but that's it. It's a half-day or one-day task, not like SCCM where you have to spend a lot of effort and there are lots of technical guides, technical architectural documents, etc. So it's very user-friendly in terms of deployment, I would say.
The number of people involved in deployment depends on the size of the company. As I was a consultant before, I worked with two people, sometimes with one to six people. So it depends on the company. For example, in our company, we have only two people who manage the platform. To be honest, I cannot say that only one person can install this solution.
For us, the deployment took two to three days, but it's not a continuous three days. We installed the server component and we installed the distribution server component after two days. So on the whole, we would've spent two to three days, maximum.
What about the implementation team?
We implemented through an in-house team.
What's my experience with pricing, setup cost, and licensing?
The pricing is very low, compared to other products. Compared to Intune or SCCM, it's much less. I can say it's a good product for less of a price.
Intune doesn't really have a price, at the moment, because they integrated Intune with another license for Microsoft. If you purchase M365, you get the license. They've made everything a combo now, so obviously any company will go for M365, which includes everything. That's what our company has, and we don't pay anything extra for it. If you split the money, it would be much less than Desktop Central, so you can't technically compare the two.
ManageEngine's licensing is not as good. They add new features and they ask for money. For example, they introduced Browser Security, which is an extra add-on. Compared to Intune, you just buy the Intune product and that's it, you have everything in place—browser security, endpoint management, etc. Everything's included with the Intune license, which isn't the case with ManageEngine. That's something they really need to take care of.
Which other solutions did I evaluate?
We also use Intune, which offers many functionalities since it's integrated with Office 365. In terms of the experience, it's very light, but since ManageEngine is a completely different product, you have to integrate a lot of things. For example, installing the ManageEngine agent to all the machines if you want to onboard them. In comparison, with Intune, normally when you prepare the machine, it's automatically included, so onboarding is easy.
Also, since Intune is a cloud service, you don't need to manage any infrastructure and you don't need a server to host the solution. With Desktop Central, you need a server, and that server should be managed by someone else as well, like a GDC team, a server team.
Both solutions have advantages and disadvantages. For example, creating packages in ManageEngine is easier than Intune. In Intune, you have to create a package and convert it to a package format supported by Intune. In ManageEngine, you can create EXE or MSI—both are supported—and you just upload and create the package.
What other advice do I have?
ManageEngine Desktop Central is a product that's worth the money. It's easy to install and quicker in action. If you start installing the product today, in a small environment, you will be able to deploy the application in two hours.
I rate ManageEngine a seven out of ten. They have a lot of improvements to make.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.