Apple Business Essentials vs. Jamf Pro vs. Microsoft Intune

I would recommend Apple Business Essentials manager to any organization that orders and uses iPads or iPhones on a large scale and wishes to manage them. Even if you do not intend on applying an MDM to your corporate Apple devices, it is nice for asset management and corporate application purchasing from a central location. If you do not care about any of those features, this functionality is not for you.

Incentivized

Well suited for any organization that wants to manage apple products. It's extremely easy to integrate and has many connectors for existing enterprise infrastructure applications. Certificate management is a breeze. Not so suited for smaller businesses that only have 10-20 devices. Jamf has another product called JAMF Now that would suffice for those areas.

Microsoft Intune is well suited for the larger end of the small business segment to the enterprise. The ability to configure and remotely deploy computer configurations, control mobile devices, and fine tune security controls of each device or device group is a major win for this product. Smaller and mid-sized businesses may balk at having to increase their license level to unlock the better updating features.

Incentivized

• Ease of use to manage. Some other solutions can be a little hard to navigate. Fleetsmith is intuitive.
• DEP Enrollment is really nice. If you are shipping a laptop out to the user you can set their password and when they turn on their computer they will have access.
• Adding software to be pushed out. Pretty easy to do.

Incentivized

• Jamf Pro's Self Service is a great mechanism for making software available to end uses as they need it.
• Jamf Pro is also great for creating plans called PreStage Enrollments that allow for computers to skip many of the setup screens, as well as automating account creation.
• Jamf Pro in combination with Apple Automated Device Enrollment (formerly DEP) allows for devices to supervised and managed, this combination allows for locking, remote wipe of devices, and finding locations of devices when put into lost mode.

• [Microsoft Endpoint Manager (Microsoft Intune + SCCM)] helps to speed up the deployment of patches/software throughout our environment. I can easily build a package and then deploy across all endpoints.
• The ability to supercede software is also quite handy. This automates the removal of old versions and replacing them with newer versions.
• The Intune Autopilot option is very useful if you want to deploy software to devices straight out of the box. You can configure them to download software when a user opens a new PC and turns it on for the first time.

Incentivized

• We were told that this was in the works and it would be implemented at the beginning of the year 2019. That has still not happened and whenever we ask about this functionality we cannot get a good answer.
• Management of devices that are already in the field—we were told that in order to use Fleetsmith as we would like (pushing apps to devices) we would have to get each device and set them up from a Mac.
• Integration with Windows.

• Training options are terrific, but costly.
• Finding what you need in Jamf Pro can be tough at times. The interface is not what I would call friendly.
• You'll need static credentials for Jamf Pro. They don't integrate with the Jamf Account, and it doesn't offer 2FA. SSO is an option, but it's not simple to set up.

• Deploying more apps besides Microsoft Edge and Microsoft Office 365 app
• Microsoft needs to make it easier to deploy exe, pkg, and msi apps without having to go through the manual process of re-packaging these apps using tools from github like intuneapputil
• Add a feature to push out software updates for 3rd party apps

Incentivized

We stepped away and are looking at different products that integrate with our entire fleet MDM solution rather than focusing specifically on Apple products. An all in one solution fits our needs better and is more cost-effective in the long run. Jamf Pro needs to improve some features and support but overall its a good product.

Incentivized

Mascom Wireless is a Microsoft shop and SCCM has proved to be helpful in keeping our Microsoft products up to date every month without fail. We also have a Microsoft Enterprise Agreement which we renewed for three years ending 2022. The remote access utility works wonders for the organisation and have saved travel bills including subsistance allowance. We have been able to fulfill security audits both internal and external. We have been able to keep a robust inventory of our computer assets and nothing falls of the cracks

Incentivized

The installation steps are very easy and the UI for admin panel is user-friendly. Enrolment all based on Gmail accounts and the import function is there to fetch the user accounts. Navigating in Fleetsmith admin panel is simple and clean.

Incentivized

Jamf Pro has done pretty much anything we've needed with little setup headache. If we hit a wall, the Jamf user community and tech support departments both are more than willing to help solve problems. Tech support is excellent, but the surprising thing is the user base is by far the biggest resource. Jamf users love to help each other, by directly chatting about issues, posting best practices, or just posting info on the forums.

The console is not intuitive and does not work well often. Due to the complexity of the product, documentation can be confusing. When properly configured, routine tasks like OS deployment, remote control, and software deployment are easy to do. Troubleshooting of System Center Configuration Manager issues is hard, as there are various logs, and their content can be hard to understand.

Incentivized

It's a 'heavy' system, which demands a lot of resources form the datacenter perspective. So, make sure you followed the requirements to avoid frustration in the future. From the 'client' perspective, it's fine. I've never had any issue with that.

Incentivized

Fantastic support. I have had a few queries on how to go about doing things in the best way and the support at Fleetsmith was always very quick to reply and with excellent advice and detail to solve the problem and lead is into our best use of their product.

Jamf Support is very responsive and usually assists in any challenge we are tackling. They are also very transparent when they are allowed to be. I personally love our Jamf Pro support rep and don't fear messaging their support team.

We have not needed to seek support for this product in the time that we have used it thus far. It's been working really well, and have not had any major issues. Being that it's a Microsoft product, it goes without saying that there will be many support options available if needed. This includes phone, web, forums, KB articles, etc. There is even comprehensive documentation that is available on the web through Microsoft's website for use of the product.

Incentivized

They made me more comfortable using the product.

The training session was beneficial because it expanded my knowledge about Jamf products and really learn what I am capable of doing with Jamf Pro in terms of managing Apple computers and devices. Immediately after the training course, I was able to implement what I learn to our cloud instance.

Migration from an existing MDM requires device wipe and reenroll for full supervision of the device. It's somewhat painful. User enrollment makes things easier, but you miss out on full management.

Work with a "test group" of users who you have a good relationship with so that when things don't work properly they understand! Work with your partner nicely without forcing things especially timelines as you are bound to make mistakes and create oversights in the project Management can also interfere with the implementation (which can cause delays) if you make too many mistakes which takes me back to having a "test group" where you have good relations

Incentivized

The primary products we checked out were Mosyle, JAMF, and SimpleMDM. In the end it really came down to the simplicity of our needs and the simplicity of Fleetsmith's approach being in tight harmony. We kicked the tires, hard, for about a month and then dove all the way in.

Incentivized

Even thought we are using this solutions for different purposes (macOS device management VS mobile device management), I think at the end Jamf Pro is more focused or aimed for macOS management, and mobile device management is just a good addition to that. Same I can tell about Ivanty, is more about iOS/Android management rather than macOS

We did not evaluate or use other products like Microsoft Endpoint Manager (Microsoft Intune + SCCM). The main reason we did not evaluate or use other products is because Microsoft Endpoint Manager (Microsoft Intune + SCCM) integrates seamlessly with Microsoft 365 and Windows PCs. Expenses would have increased as well if we had purchased another similar product.

Incentivized

• Lesser cost for managing device, instead of getting more manpower to do it manually.
• Lesser security threats (which will cause financial damage) as all devices are configured according the the company security policies, such as firewalls, media management, app security updates.

Incentivized

• Jamf Pro has allowed us to minimize the time it takes to deploy devices. We can use zero-touch deployment methodologies which allow devices to go directly to end users and allow end users to get up and running without needing IT's help.
• We have implemented both a third-party & macOS patching service, which allows us to ensure all apps and versions of macOS are updated and secure.

• In our current environment, this System Center Configuration Manager had replaced several standalone solutions for patching, imaging, remote assistance, reporting, etc. That saved a lot of time and resulted in money to manage the IT infrastructure.
• Once SCCM is deployed and fully configured, all agents are deployed and it is easy to automate a lot of processes and just control them from time to time to make sure that everything is working as supposed to be.
• SCCM + Windows 10: great built-in endpoint protection solution. As a result, there is no need to buy additional software for that purpose.
• The imaging process is better compared to WDS because you can modify deployment packages and apply patches to a newly imaged machine. This saves tons of time for new employees deployment.

Incentivized