JumpCloud Directory-as-a-Service® is a cloud-based platform that enables IT teams to securely manage user identities and connect them to resources they need regardless of provider, protocol, vendor, or location. Directory-as-a-Service gives organizations a single pane of glass to manage users and systems. It allows administrators to grant users secure access to resources with protocols and access controls. It also includes APIs, tools, and integrations to maximize administrative flexibility and…
N/A
ManageEngine Endpoint Central
Score 8.9 out of 10
N/A
Desktop Central from ManageEngine is a client desktop management with patching, remote control, and configuration.
JumpCloud is least suited in situations where you have few devices, but lots of users. JumpCloud heavily focuses on the "One-User-One-Device" type of use, and does lack some of the features things like Active Directory is better suited for when having multiple users accessing one machine. Their Powershell APIs are fantastic and getting only more powerful. Lots of features are hidden behind these APIs, so admins not as familiar with Powershell would have more issues leveraging these tools. BYOD deployments are amazing, especially for macOS devices that are using Apple Business Manager and can leverage Zero Touch deployments. It is especially good at handling mixed systems, whereas other options, such as Jamf, are really suiting only for macOS, or Intune is more suited for Windows; JumpCloud managed to handle both systems well.
ManageEngine Endpoint Central is fantastic for a set and forget patching tool. This is great for the Windows clients that we have and provides good reporting and ensures machines are kept up to date and gives us good reporting on which machines are vulnerable in our organisation. Linux machines are not as well handled due to the multiple flavours of Linux that are out there. ManageEngine Endpoint Central only manages specific versions of Mac and Linux so it is best to check compatability ahead of time.
User Management - The ability to control our users and set password/polices is made easy in the JC console
Device Management - Using JC each user is assigned to their own device with only the rights to do their job - When elevated rights are required, this is done simply via the JC console for the period of time required
SSO - Using JC's SAML SSO integrations we are building out our SSO offering and this is making for a much simpler daily user experience
SSO via OpenID - Opening up their SSO from just SAML to including OpenID (OAuth) would allow us to make more use of the service and to also incorporate it into some internal testing suites
Time Limited User Elevation - The ability to time limit a users elevation of privileges would be a great addition
Extending device management to include LPA - Least Privilege Access is becoming a bigger ask from our external auditors - Being able to do this via JC would be amazing
More granular access level controls for technicians (restrictions for juniors) on the Mobile Device Management add-on
Monitoring mobile data usage on mobile devices, this has been in the product pipeline for 5 years, but not yet implemented
Ability to remotely support company-owned mobile devices with no end-user permission. End-user needs to allow the remote session, when sometimes that's what we don't want since we're doing an investigation.
ManageEngine is considered an excellent product due to its comprehensive suite of solutions for IT management, with ManageEngine Endpoint Central specifically excelling in endpoint management. The platform stands out for its user-friendly interface, robust features, and versatility in addressing diverse IT needs. It offers organizations a centralized solution for endpoint security, patch management, software deployment, and asset management
It's simple. I like how JumpCloud keeps things simple. Similar to Apple's ecosystem, they give you what you want with some extra features and bells and whistles but it doesn't take a large instruction manual to use it. They have the support system and KB articles to back up their product and learn about a feature and how to implement it
I have rarely contacted support. When I have, the responses were within expected time frames, and easy to access. Community support is incredible, both from the JumpCloud representatives, and the user base community at large. The support pages on the website also are typically very well written and strike a nice balance between having the technical information needed, and also being easy to understand for the small business types that might not have as much of a technical background as an IT Admin.
The local distributor of the product is always available, however most support is received within an hour from India. We've had complex requirements and the support team went so far as to customize their mobile application to suit our unique needs. We honestly can't complain about any support we've received and it's always been very quick.
WSUS (provided by Microsoft) is a MUCH inferior product, no flexibility at all, updates when it wants and how it wants and was generally not suit for purpose. In addition, endpoint offers all the other functionality that WSUS doesn't (as said earlier in my review, remote control, endpoint security and much more).
Some features would make more sense for us to be bundled by machine, instead of the user. We have fewer machines, and multiple users log into one machine, so doing something like paying per user for services like Patch Management are difficult to warrant the cost. I also feel a more complete package that includes common addon features; Patch Management and Password Manager, would be an improvement. It would also be nice if we could change packages, addons, and other billing services via self-service instead of reaching out to our account manager.
With software metering, the real use of applications by users has been identified; in this case, when the license renewal date arrives, users who do not use this application have stopped renewing it. This has achieved savings for the business.
The deployment of images has made the onboarding of collaborators faster, this means less downtime and more productivity for the company.
By having the laptops patched and without vulnerabilities, there is greater productivity, because the equipment is no longer out of service due to an attack or vulnerability.
