SCCM and Intune: Two great tastes together at last in Endpoint Manager
We use Endpoint manager to manage all the windows devices in the organization, both shared and 1:1 from a central IT department over 100 …
Microsoft IntuneFormerly Microsoft Endpoint Manager
Starting at $5 per user/per month
View PricingOverview
What is Microsoft Intune?
Microsoft Intune (formerly Microsoft Endpoint Manager), combining the capabilities of the former Microsoft System Center Configuration Manager, SCCM or ConfigMgr, is presented as a unified endpoint management option.Microsoft Intune is an endpoint management solution for mobile devices, an MDM solution…
Recent Reviews
Awards
Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards
Reviewer Pros & Cons
Pricing
Microsoft 365 Business Basic
$5
On Premise
per user/per month
Microsoft 365 For Individuals
$6.99
On Premise
per month
Microsoft 365 Apps
$8.25
On Premise
per user/per month
Entry-level set up fee?
- No setup fee
Offerings
- Free Trial
- Free/Freemium Version
- Premium Consulting/Integration Services
Product Details
- About
- Integrations
- Competitors
- Tech Details
- FAQs
What is Microsoft Intune?
Microsoft Intune (formerly Microsoft Endpoint Manager), combining the capabilities of the former Microsoft System Center Configuration Manager, SCCM or ConfigMgr, is presented as a unified endpoint management option.
Microsoft Intune is an endpoint management solution for mobile devices, an MDM solution that allows the user to securely manage iOS, Android, Windows, and macOS devices with a single endpoint management solution.
The component Endpoint Configuration Manager (the former SCCM) is a system monitoring and management platform that can be deployed as an agent, via the cloud, or on-premises. It can manage systems across OS types (Windows, Mac, Linux), as well as multiple environments, including servers, virtual environments, and mobile devices from a single management console, and supports scaling capabilities, such as future application delivery.
Microsoft Intune is an endpoint management solution for mobile devices, an MDM solution that allows the user to securely manage iOS, Android, Windows, and macOS devices with a single endpoint management solution.
The component Endpoint Configuration Manager (the former SCCM) is a system monitoring and management platform that can be deployed as an agent, via the cloud, or on-premises. It can manage systems across OS types (Windows, Mac, Linux), as well as multiple environments, including servers, virtual environments, and mobile devices from a single management console, and supports scaling capabilities, such as future application delivery.
The platform includes a customizable reporting tool to inform future business software decisions. It also enables endpoint protection from malware and vulnerability identification within the monitored systems and infrastructure.
Microsoft Intune Video
Announcing Microsoft Endpoint Manager
Microsoft Intune Integrations
Microsoft Intune Competitors
Microsoft Intune Technical Details
| Deployment Types | On-premise |
|---|---|
| Operating Systems | Windows |
| Mobile Application | No |
Frequently Asked Questions
ManageEngine Endpoint Central, Ivanti Neurons for Unified Endpoint Management, and Workspace ONE Unified Endpoint Management (UEM) are common alternatives for Microsoft Intune.
Reviewers rate Support Rating highest, with a score of 10.
The most common users of Microsoft Intune are from Mid-sized Companies (51-1,000 employees).
Comparisons
Compare with
Reviews and Ratings
(312)Attribute Ratings
Reviews
(1-14 of 14)Companies can't remove reviews or game the system. Here's why
September 04, 2021
A close to perfect MDM solution
First off let me clarify my product review only covers Microsoft Intune now called Microsoft Endpoint Manager. I used it to manage all of macOS and Windows 10 computers to deploy apps, compliance policies, configuration profiles, Windows autopilot, and to onboard my devices to Microsoft Defender for Endpoint.
- Windows Autopilot
- Integrates well with Apple devices
- Good tech support
- Runs in the cloud there is no need to put up an on-premises server
- Deploying more apps besides Microsoft Edge and Microsoft Office 365 app
- Microsoft needs to make it easier to deploy exe, pkg, and msi apps without having to go through the manual process of re-packaging these apps using tools from github like intuneapputil
- Add a feature to push out software updates for 3rd party apps
Microsoft Endpoint Manager (Microsoft Intune + SCCM) is used in various ways in my company and the companies I'm an MSP for. Mostly it is used in Microsoft 365 Business Premium environments and it does a great job of gathering end point information as well as give us the ability to push out Microsoft Desktop apps and Microsoft Edge as well as other apps. It's also nice that I can setup specific configurations and settings for Windows, 365 desktop apps, and Edge just like when using Group Policy for on premise servers and PCs. But using Microsoft Endpoint Manager (Microsoft Intune + SCCM) is much easier to use and implement.
- Able to create Compliance Policies and Configuration Profiles
- Configure Windows Update settings
- Configure Endpoint security settings and Windows Defender Antivirus
- Create App Protection and Configuration Policies
- More hardware details of devices such as drives, memory, etc.
- Ability to remotely connect to a PC without 3rd party software
- Not really any other cons that stand out
January 22, 2021
Microsoft Intune + SCCM Review
We use MS Intune and SCCM with our Azure cloud solution for all of our offices.
It is great tools to control and monitoring our security, servers and applications.
Manage mobile devices is highly important now days, so now we can manage our phones and tablets in modern way with modern approach.
It is great tools to control and monitoring our security, servers and applications.
Manage mobile devices is highly important now days, so now we can manage our phones and tablets in modern way with modern approach.
- We can add and assign mobile apps to user groups and devices
- Manage access on personal devices by restricting actions users can do or not
- Wipe or removing organization data from apps
- Reporting should be improved
- Better integration with AV software
- AI integration with alert notification about unusual user behavior
January 25, 2020
The one to beat for Windows application deployment and patching
We use SCCM for application and Windows desktop, laptop, and server patching. We accompany it with the PatchMyPC addons, so we can update the majority of applications we use for end-users.
We also use it to deploy security software.
- Windows and Office patching: SCCM does this really well. It is efficient, reliable, and easy to schedule. It's quite simple to keep machines updated once they've been registered.
- Application Deployment: SCCM very effectively deploys application and application updates. We use it very effectively to reinstall our security software if it gets uninstalled or needs to be updated.
- Reporting: The SQL Reporting Services oriented user-interface is really not particularly user-friendly.
- Inventory: The inventory function is overly basic and difficult to search. If this were improved to be a legitimate asset management tool, it would tremendously increase the value of SCCM to organizations.
January 17, 2020
Microsoft Intune Review
We use it for mobile device management, mobile application management, Mac OS management, and Windows 10 management. I have also converted GPO to Intune Policies for Windows 10 devices. The Bitlocker key is also being managed by Intune. I set up the company portal for self-services application installs.
- Software deployment.
- Device wipe.
- Reporting.
- User notification for patching/rebooting.
October 18, 2019
Relax and let SCCM do the job for you to do other stuff
It is used by two departments, enterprise services (e.g Infrastructure Administration, Email, Sharepoint, etc) and Help Desk.
- Patching lots of computers (in my case 400+) without leaving your seat!! Less administrative overheads.
- Deploying new machines with a standard image that is the same across the organisation and no one has a different set of image and therefore consistancy within the organsation.
- Provide a comprehensive inventory of the organisation's computer assets.
- Provide security auditors with patching compliance reports within the organisation.
- Driver portals for different PC/Laptop manufactures.
- There is no dashboard for the executive summary of the organisation's patch levels.
- Being able to see the downloaded patches (labeled with KB numbers) according to their names on the SCCM server.
August 03, 2019
Very powerful and hard to work with
System Center Configuration Manager was used as a solution for OS deployment, remote troubleshooting, and patch management for Windows PCs in our organization. The plan was to use it to manage close to a thousand PCs in total. As the product required an excessive number of man-hours to implement and support, its use was dropped after a year, and an alternative selected. The main goal was to improve OS deployment and replace WDS.
- Remote Control works well and does not require a lot of configuration. It must be understood that the Remote Control feature of System Center Configuration Manager is different from RDP, as it does not establish a separate user session and allows a tech to troubleshoot issues in a way visible to a user.
- It is easy to add client devices for management, and multiple options are available (push, Active Directory, etc.)
- It's modular and extensible. For example, a third-party company, Parallels, makes a System Center Configuration Manager plugin to manage Macs from the same console.
- Installation is very laborious and complicated. The number of things to manually configure during the installation is incredible.
- OS deployment is hard to configure and troubleshoot. The Microsoft article on deploying Windows 10 via System Center Configuration Manager in a test environment takes 44 minutes to read (Microsoft's estimate, not mine -- check here: https://docs.microsoft.com/en-us/windows/deployment/windows-10-poc-sc-config-mgr). If something goes wrong, there are multiple log locations to check on both the server and client, making troubleshooting difficult.
- The management console looks old, and its performance isn't great. It is often hard to find settings in the console, and it refreshes slowly. The old name for System Center Configuration Manager, SMS, comes to mind often. "Slowly Moving Software."
System Center Configuration Manager (SCCM)is being used across the whole organization on all of our Windows computers and our dual booted Mac computers. SCCM addresses the problem of having to have more employees to be available for hands on installing and updating any software that SCCM allows the user to do without another employee finding time to do it for them.
- SCCM allows our administrator to push updates remotely and does not require our staff to do anything to install software/updates etc.
- SCCM lets us control licenses to software by allowing our administrator to only push out software to staff members when requested instead of allowing all staff to choose software from a list. Prevents unauthorized usage of licenses to software.
- SCCM allows periodic software updates to be scheduled even when our staff are not at their computers, because it does not require staff actions.
- SCCM takes a long time to install once a computer has been reimaged and sometimes it fails.
- When the SCCM server goes down, no one is able to install anything and causes staff to be frustrated.
- There isn't a communication tool that tells users that new software has finished installing. Staff have to keep checking for software they requested to be installed to verify it was installed.
March 14, 2019
Great tool for enterprise IT teams, must have usage experience for all IT specialists.
At my current and previous companies, I have used System Center Configuration Manager as one of the main tools to manage my IT infrastructure. From simple management of active directory users and computers to detailed inventorying of windows equipment (computers and server), software inventorying, software deployments and patch management. Also, it is used as a main endpoint protection solution that includes centrally managed Windows Defender and ATP. We use System Center Configuration Manager as one of the main monitoring tools to get reports of the Windows patching state, device availability and activity, to get information about what PCs users are using at a current time. Using as the only solution to capture and image new and existing workstations and servers. And, also SCCM is the main remote control/assistance tool for our help desk department.
- We have mostly Windows environments, so SCCM provides us tons of monitoring options for computers and servers.
- SCCM saves a lot of time and money for our Help Desk team to provide remote assistance to end users.
- In a Windows 10 environment, SCCM provides pretty decent endpoint protection.
- Patch management: tons of options of management, deployment, and monitoring.
- Systems Imaging: deploying images to new PCs or servers, reimaging existed environment.
- And of course, systems inventorying (hardware and software).
- Initial configuration is pretty much complex and requires some additional time for preparation and deployment.
- It would be awesome to have Patch management and endpoint security be moved to separate tabs in the SCCM management console.
- Imaging functionality is great but over-complicated, and sometimes simple processes take way longer compared to regular WDS services.
- Better reporting and monitoring services with customized charts.
- Better integration of SCCM patching services with Windows Updates services on Windows 10. Sometimes it is almost impossible to say if patches were installed on Windows 10 via SCCM deployment until you get that information within SCCM management console.
- Requires a lot of learning about the product for IT personnel.
February 28, 2019
Asset Management, Software Deployment and Patch Management Solution
Microsoft System Center Configuration Manager is used by our IT Operations department to create, deploy software packages for homegrown applications, commonly used software and windows update on desktop, laptops, and servers. It provides IT Asset Management capabilities as well as software inventory and auditing. The remote control feature is used by PC support for remote access and support solution.
- Managing Windows Environments for patching, software deployment, and Inventory.
- Automation of software deployment.
- Imaging of devices.
- Asset reporting.
- The SCCM console is a bit outdated. Needs an improvement.
- Better reporting, we have to rely on other monitoring tools for software and hardware inventory.
- Configuration and setup of SCCM can be quite challenging if you have never performed this.
February 23, 2019
Microsoft SCCM is the answer
Excellent tool for centralized and standardized configurations and software distribution. This tool is based on AD authentication like the rest of the Microsoft products and makes sending enterprise-wide updates automatically or manually a breeze. Metered usage for software, as well as built-in reporting, is excellent as well. Due to the popularity of the tool, there are enough resources online to get help on most issues.
- We are using it for software distribution.
- AD based user access.
- Web-based.
- Allow custom icons.
- Reboot notifications.
- Better reporting.
November 30, 2018
SCCM 2012 R2 Review
Microsoft System Center Configuration Manager is used by our whole IT department. Being part of a company that has multiple locations all across the world, SCCM is a must have tool for managing thousands of computers. SCCM is amazing for imaging, application deployment, and reporting. It allows you to save time and be very efficient.
- SCCM has a very strong user community.
- One of SCCM's best feature would be the ability to push software through packages to multiple computers at once.
- What I like best about this release is the added powershell support.
- Apart from the steep price, there is absolutely nothing to dislike about this product!
- Huge learning curve, requires a lot of training.
- Requires many prerequisites for installing SCCM on a Windows Server.
We use MS SCCM in our organization to deploy and manage System Center Endpoint Protection. We also use it to deploy known good configurations of operating systems and programs for new machines to our network. We use SCCM to report and alert on the health status of servers and endpoints. We also use it to manage Windows and third party applications.
- Patch Management
- OS Deployement
- Health Status Reporting
- Application Deployement
- It can be a house of cards at times. If one little thing fails it seems like the whole thing comes crashing down. SCCM is NOT for the faint of heart.
- Setup is quite a chore. The setup process it NOT straight forward and relying on a third party walk-through is essential.
- Diagnosing what is wrong with SCCM can be a daunting task. Again... not for the faint of heart.
January 16, 2018
SCCM 2012 Review
We use SCCM for image deployment, windows update management, anti virus management with endpoint protection and as a backup remote management tool. Only the IT help desk is using this currently.
We got this in our origination, because Microsoft wanted to assist us in upgrading all of our machines to Windows 10, to move away from Windows 7. We are currently only licensed for workstations and do not actively use it on servers currently, but I believe we will in the future.
We got this in our origination, because Microsoft wanted to assist us in upgrading all of our machines to Windows 10, to move away from Windows 7. We are currently only licensed for workstations and do not actively use it on servers currently, but I believe we will in the future.
- Anti-virus management. Deploying, managing and removing end point protection is simple. Compared to other products like Symantec, Webroot, Vipre and Trend Micro, threat protection was good and updates were easy. When it was time to remove, it was simple and did not require additional tools to remove the product.
- Patch management was good. Works well with WSUS and reporting was decent and helped us get caught up on patching that we were lacking.
- Image management. We have Windows 7 and 10 deployments set up and use SCCM to configure everything for capture and deployment.
- I would like to see better training and explanation for configuring SCCM to import existing images that have been stood up. While I did manage to get it working, the documentation from Microsoft itself is lacking. I've found that I have to spend a lot of time researching from 3rd parties that have stumbled through it.
- Remote access to workstations. SCCM remotes in to a machine via the IP and we have found that in an environment where there is wireless and wired and sometimes machines flop back and forth, we cannot always remote in to a machine. If they were able to use the SCCM agent or go by system name, we would be able to remote in to a PC easily and replace the 3rd party tool we have with Dameware.
- Access restrictions. Doesn't provide an awesome way to lock down what a user can and cannot do within SCCM. We have some level 1 techs that we need to be able to modify a task sequence, but we don't want them to have full admin access.