Cisco offers Meraki Systems Manager (SM), an enterprise mobility management platform supporting the monitoring, provisioning and securing of mobile devices across an enterprise network.
N/A
Microsoft Intune
Score 8.2 out of 10
N/A
Microsoft Intune (formerly Microsoft Endpoint Manager), combining the capabilities of the former Microsoft System Center Configuration Manager, SCCM or ConfigMgr, is presented as a unified endpoint management option. Microsoft Intune is an endpoint management solution for mobile devices, an MDM solution that allows the user to securely manage iOS, Android, Windows, and macOS devices with a single endpoint management solution. The component Endpoint Configuration Manager (the…
We were already Cisco Meraki customers so it was a logical step to use their SM product. That said, we did compare to other vendors and we are happy with our choice. Integration and ease of deployment was a big factor. While some competitors could offer lower costs, the …
Previously, we used GFI's LanGuard NSS which is not really an apples to apples comparison. However, the product was agent-based and had an inventory function, Windows update feature and reporting for security holes. Due to the basic nature of the product, we outgrew it and …
It is very helpful if you need to restrict the apps a student or employee can have on their device. I had teachers using Netflix on the iPads before I brought them under management. Restricting them will make you unpopular with some of your employees, however, I advise them the device is being provided for business use and, therefore we have the right and responsibility to manage it.
Microsoft Intune is well suited for the larger end of the small business segment to the enterprise. The ability to configure and remotely deploy computer configurations, control mobile devices, and fine tune security controls of each device or device group is a major win for this product. Smaller and mid-sized businesses may balk at having to increase their license level to unlock the better updating features.
[Microsoft Endpoint Manager (Microsoft Intune + SCCM)] helps to speed up the deployment of patches/software throughout our environment. I can easily build a package and then deploy across all endpoints.
The ability to supercede software is also quite handy. This automates the removal of old versions and replacing them with newer versions.
The Intune Autopilot option is very useful if you want to deploy software to devices straight out of the box. You can configure them to download software when a user opens a new PC and turns it on for the first time.
Limited ability for "command line" functions. For example, we had a laptop that was stolen and showed to be online, but we could not wipe it. We were able to access a command prompt, but it would not accept DISKPART or FORMAT commands to try and make the PC unusable.
The GPS location is not terribly accurate and frequently it "guesses" location based off of an IP address rather than actually activating the GPS on the device. This makes tracking lost/stolen devices very difficult.
Difficulty getting devices to correctly show their status in the dashboard. For example, I can have a PC that is online and connected to the Internet, but shows to be offline in the dashboard. Only after refreshing many times would it indicate that the PC was actually online, thus allowing me to administer it.
Deploying more apps besides Microsoft Edge and Microsoft Office 365 app
Microsoft needs to make it easier to deploy exe, pkg, and msi apps without having to go through the manual process of re-packaging these apps using tools from github like intuneapputil
Add a feature to push out software updates for 3rd party apps
Mascom Wireless is a Microsoft shop and SCCM has proved to be helpful in keeping our Microsoft products up to date every month without fail. We also have a Microsoft Enterprise Agreement which we renewed for three years ending 2022. The remote access utility works wonders for the organisation and have saved travel bills including subsistance allowance. We have been able to fulfill security audits both internal and external. We have been able to keep a robust inventory of our computer assets and nothing falls of the cracks
It has is easy to use overall and is very powerful. The learning curve for the system is very small and I have found it easy to train members of our team to use it. It can fit any size organization and the support is excellent. The ROI is well worth it. If you have a multiplatform ecosystem, this tool is near perfect.
The console is not intuitive and does not work well often. Due to the complexity of the product, documentation can be confusing. When properly configured, routine tasks like OS deployment, remote control, and software deployment are easy to do. Troubleshooting of System Center Configuration Manager issues is hard, as there are various logs, and their content can be hard to understand.
It's a 'heavy' system, which demands a lot of resources form the datacenter perspective. So, make sure you followed the requirements to avoid frustration in the future. From the 'client' perspective, it's fine. I've never had any issue with that.
We have found that Cisco Meraki has always had very good customer support. In the rare case, when we have needed assistance they have always been quick to respond and solve the issue.
We have not needed to seek support for this product in the time that we have used it thus far. It's been working really well, and have not had any major issues. Being that it's a Microsoft product, it goes without saying that there will be many support options available if needed. This includes phone, web, forums, KB articles, etc. There is even comprehensive documentation that is available on the web through Microsoft's website for use of the product.
Work with a "test group" of users who you have a good relationship with so that when things don't work properly they understand! Work with your partner nicely without forcing things especially timelines as you are bound to make mistakes and create oversights in the project Management can also interfere with the implementation (which can cause delays) if you make too many mistakes which takes me back to having a "test group" where you have good relations
The only product I have used that is similar is Apple Configurator. While a powerful solution, it requires physical access to the devices which is not always possible, especially on a large site. Meraki is able to achieve many of the same functions as the Apple configurator but without ever needing to physically access the device, other than initial setup and registration.
We did not evaluate or use other products like Microsoft Endpoint Manager (Microsoft Intune + SCCM). The main reason we did not evaluate or use other products is because Microsoft Endpoint Manager (Microsoft Intune + SCCM) integrates seamlessly with Microsoft 365 and Windows PCs. Expenses would have increased as well if we had purchased another similar product.
It’s scalable up to a point and will scale well from small to a medium business, however, as a business grows and policies get more mature or detailed, you might have to later upgrade to a more appropriate enterprise solution such as MaaS360 or AirWatch. This solution however, will last quite a long tome for a growing business.
Our immediate take away has been a savings of thousands a year in MDM fees. We were paying around $3.00 a device with our previous MDM and our average with Meraki is about $1.88 per device. That while providing far more functionality than our previous provider.
In our current environment, this System Center Configuration Manager had replaced several standalone solutions for patching, imaging, remote assistance, reporting, etc. That saved a lot of time and resulted in money to manage the IT infrastructure.
Once SCCM is deployed and fully configured, all agents are deployed and it is easy to automate a lot of processes and just control them from time to time to make sure that everything is working as supposed to be.
SCCM + Windows 10: great built-in endpoint protection solution. As a result, there is no need to buy additional software for that purpose.
The imaging process is better compared to WDS because you can modify deployment packages and apply patches to a newly imaged machine. This saves tons of time for new employees deployment.
