Ivanti Endpoint Manager increases user and IT productivity by helping IT administrators gather detailed device data, automate software and OS deployments, and quickly fix user issues.
N/A
Microsoft Enterprise Mobility + Security
Score 8.3 out of 10
N/A
Microsoft Enterprise Mobility + Security is a suite of applications supporting mobile device and application security, MDM, as well as conditional or privileged access with multi-factor authentication, and advanced security reporting. Products in the suite includes Microsoft Intune mobile device management, Azure Information Protection, Microsoft Identity Manager, Microsoft Cloud App Security, Azure Active Directory, and other ancillary applications.
You need to push O365 or some product out to your institution. If you need to build out a reboot before and after and maybe something else, [Ivanti Unified Endpoint Manager (formerly LANDESK Management Suite)] can easily do that for you. It then can also use a query to determine who needs that product in your environment and then continue using that query to watch for the machines you targeted to show up once your push succeeded. If you need to, you can use the task scheduler and schedule your software distribution for a specific not in normal business hours or on a weekend.
Overall it is well suited to a mid size Enviromint with a limited staff. If you have a limited amount of time you can dedicate to solutions then having one that is by default already included in the system and can be managed well then it makes for fast integration with low overhead
Software distribution - the ability to sit and provide software when a machine calls home works phenomenally well. You may also target based on certain conditions, ranging from LDAP queries down to hardware revisions of individual components.
Operating system provisioning - the range of choice in sequential execution is second to none. We migrated from MDT to Ivanti's providing with relative ease.
Patching and compliance - you're able to get extremely granular, and the rollout project templates make rolling it a particular patch from QA to Production an automated breeze
Azure AD Single Sign-On -- this is my favorite feature of EMS + Security. It is easy to setup and MS has simple instructions for most popular cloud services.
InTune -- the changeover from the old InTune Client/Silverlight Portal has been painful, but once you get Win10 devices setup with InTune, management is a breeze.
Mac support - While it's the best I've seen with cross platform support, that doesn't mean they don't have a long way to go to catch up with the functionality of other tools that focus on one specific platform.
Product coherence - Their core product, the management suite, is great but with every new acquisition the company makes, it seems like there's another product that gets shoehorned into the picture. Making all those disparate pieces work smoothly together is something they're still working on.
Documentation - They come out with a lot of great features but some are so complicated I couldn't begin to understand the various facets of it all. I realize the days of published manual are long gone but even a PDF covering the major components in detail would be better than having to bump around in the dark until you have to call support for help.
Software Licensing Management - Every major release seems to completely rewrite this tool but they keep seeming to miss the mark. Lately it's a Microsoft Silverlight program that's very slow and has way too much data to be useful.
Web Console - The web console is all but unusable. The only way to really work on administration is to use the 32bit console which is great if you're running Windows but a fully featured web console would be much preferred.
As Microsoft evolves Intune, SCCM, MECM and combines their features into the MS EULA, Ivanti seems to be going the opposite where they are stripping out core products in favor of an EULA + A la cart pricing model that simply is more expensive than Microsoft's pricing. A few years ago, the gap was large enough to justify the extra cost of Ivanti, today the gap has closed significantly enough that the value add just isn't there for us.
Items are logically laid out and most are easy to find. The more advanced stuff can be trickier, but it is still not hard to find. There are a lot of options though, so remembering where some settings are, especially if you do not alter them often, can take a minute, but you will get to them fairly qiickly.
most features are pretty point and click simple. Some areas that are move detailed require some specialized training and knowledge to be able to navigate and get anything useful out of it. With some basic understanding you can gather tremendous amounts of data and have it available
TRM\TAM support has been generally very good. Getting reported bug fixes, design changes, UX problems resolved has been a pain. It is often difficult to get problems escalated beyond the TRM\TAM level. Support is fantastic when you can get it, getting it can often require more work than it should, and that is probably our biggest issue.
Better in most all categories. On-prem was not an issue for my organization. MS SCCM was lacking features. Airwatch required increasing tiers of service in order to match [Ivanti Unified Endpoint Manager (formerly LANDESK Management Suite)] features, and lacked the robust inventory data we needed. Meraki was very simple to use, but did not meet our needs. I would say that most Airwatch customers aren't using all the features they are paying for, and could save lots of money by using Meraki instead.
Microsoft Enterprise Mobility + Security is better than any of the products I have used that do similar things. There is a huge convenience to all the things Microsoft Enterprise Mobility + Security brings together in one place. Also, the speed and streamlining nature of Intune helps with the management and set up of devices.
Centralized IT - all in one solution that is better in some areas than traditional niche software applications. You'll probably still spend the same amount of time with users on the HD line, but you'll be able to reduce the amount of time it takes for auxiliary Help Desk tasks (ticketing, reporting, background deployment, etc.)
Cost - This is a negative of course ;) But at some point you can save some money if you ditch SCCM or your other CRM
