"The initial setup is fairly straightforward."
"The most valuable feature is the scalability."
"We're a Microsoft-centric organization, so we are happy with the integration between products."
"The most valuable features are application deployment and task-sequenced imaging."
"The solution is stable."
"It's a stable product."
"We have found the scalability to be quite good."
"It's helped us solve problems surrounding patching, installing, and reporting different patches, etc., on the virtual machines."
"The most important aspect is that we can centrally deploy the updates that are necessary for the organization. It's important."
"A valuable feature about this solution is that it enforces an updating and patching process for my applications."
"The most valuable feature is its ability to identify which updates are needed on a particular machine."
"Setup is very simple and straightforward."
"The most valuable features are that it is included with Windows, and it can be driven by Group Policy Objects (GPOs)."
"The most valuable feature is the decreased level of internet usage by my network."
"Downloads critical reports separately."
"I want the system to provide some dependency relations. I would also like to see the relationship between different machines."
"Its client interface should be more accessible, and the notifications should be more customizable from the console. It should be more user friendly and have some kind of customized notifications so that we can use it on the client side. These are the reasons why we restricted its use only for the server environment and didn't use it on the client side."
"In terms of the monitoring, the timeframe it takes to actually report back on the compliance of a device after it has been patched is a bit too long."
"One area of improvement is regarding the patching of Office 365 products. We have some difficulties on this side, and it can be improved."
"It would be nice to have everything in one place. Now they have Intune for the desktops and SCCM to handle their servers."
"There is no asset management package included."
"The App to upgrades to the server needs to be improved."
"There should probably be better remote support. They should also continue to improve on patch management, patching, and creating or turning products in software into deployable apps."
"This solution's deployment could be improved. When I was the admin, there were some problems when deploying to clients. Sometimes the policy is not effective. I guess, more on the reliability side, more reliable means working more often with the clients. It could be easier to deploy."
"I would like to see support for other operating systems such as Linux."
"Could be improved with additional features such as an update alarm."
"Some issues with scalability in larger organizations."
"Job management and control is an area that is in need of improvement."
"The reporting is not as practical as I would like it to be."
"Having the ability to group updates by the operating systems would be very helpful."
Microsoft Endpoint Configuration Manager (MECM, formerly SCCM or System Center Configuration Manager) is a software management suite that allows users to manage large numbers of Windows-based computers and servers.
Configuration Manager features software distribution, operating system deployment, remote control, network protection, security management, patch management, and hardware and software inventory, among other services. It allows you to set configuration and security policies, keep your software up-to-date, and monitor your system status while giving your employees access to corporate applications on whatever devices they choose.
Configuration Manager allows you to manage computers using macOS, Windows UNIX, or Linux, and mobile devices running iOS, Windows, or Android operating systems. It can be integrated with Microsoft Intune, allowing you to manage computers connected to a corporate network.
With Configuration Manager, you can manage PCs and servers, keeping software up-to-date, setting configuration and security policies, and monitoring system status while giving your employees access to corporate applications on the devices that they choose.
Benefits and Features
Reviews from Real Users:
Users of MECM like that it is stable and flexible. Patching is one of its most useful features, although users cite many other features as useful as well. One user stated that "It does what you need it to do, and it's a one-stop-shop for the company and for all your deployments." Overall, “the entire solution, from end to end, is excellent.”
Windows Server Update Services (WSUS) enables information technology administrators to deploy the latest Microsoft product updates. You can use WSUS to fully manage the distribution of updates that are released through Microsoft Update to computers on your network. This topic provides an overview of this server role and more information about how to deploy and maintain WSUS.
Microsoft Endpoint Configuration Manager is ranked 1st in Patch Management with 33 reviews while Microsoft Windows Server Update Services is ranked 6th in Patch Management with 7 reviews. Microsoft Endpoint Configuration Manager is rated 8.0, while Microsoft Windows Server Update Services is rated 8.0. The top reviewer of Microsoft Endpoint Configuration Manager writes "A stable systems management software product with useful package deployment and application deployment features". On the other hand, the top reviewer of Microsoft Windows Server Update Services writes "Stable with good patching and good internal updating". Microsoft Endpoint Configuration Manager is most compared with Red Hat Ansible Automation Platform, BigFix, ManageEngine Desktop Central, Ivanti Patch for Windows and Quest KACE Systems Management, whereas Microsoft Windows Server Update Services is most compared with BigFix, Ivanti Patch for Windows, Quest KACE Systems Management, ManageEngine Patch Manager Plus and Kaseya VSA. See our Microsoft Endpoint Configuration Manager vs. Microsoft Windows Server Update Services report.
See our list of best Patch Management vendors.
We monitor all Patch Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.