Overview

Work has asked me to Compare/Contrast BigFix with SCCM because HCL is charging us a rather large amount per client for BigFix and the Boss wants options.

Articles

SCCM Features

Feature list taken from https://docs.microsoft.com/en-us/mem/configmgr/core/plan-design/changes/features-and-capabilities

Co-management

Co-management is one of the primary ways to attach your existing Configuration Manager deployment to the Microsoft 365 cloud. It enables you to concurrently manage Windows 10 devices by using both Configuration Manager and Microsoft Intune. Co-management lets you cloud-attach your existing investment in Configuration Manager by adding new functionality like conditional access. For more information, see What is co-management?

Desktop Analytics

Desktop Analytics is a cloud-based service that integrates with Configuration Manager. The service provides insight and intelligence for you to make more informed decisions about the update readiness of your Windows clients. It combines data from your organization with data aggregated from millions of devices connected to Microsoft cloud services. For more information, see What is Desktop Analytics?

Cloud-attached management

Use features like the cloud management gateway, cloud-based distribution points, and Azure Active Directory to manage internet-based clients.

For more information, see the following articles:

Manage clients on the internet
Plan for Azure AD
Azure services

Real-time management

Use CMPivot to immediately query online devices, then filter and group the data for deeper insights. Also use the Configuration Manager console to manage and deploy Windows PowerShell scripts to clients. For more information, see CMPivot and Create and run PowerShell scripts.

Application management

Helps you create, manage, deploy, and monitor applications to a range of different devices that you manage. Deploy, update, and manage Office 365 from the Configuration Manager console. Additionally, Configuration Manager integrates with the Microsoft Store for Business and Education to deliver cloud-based apps. For more information, see Introduction to application management.

OS deployment

Deploy an in-place upgrade of Windows 10, or capture and deploy OS images. Image deployment can use PXE, multicast, or bootable media. It can also help redeploy existing devices using Windows AutoPilot. For more information, see Introduction to OS deployment.

Software updates

Manage, deploy, and monitor software updates in the organization. Integrate with Windows Delivery Optimization and other peer caching technologies to help control network usage. For more information, see Introduction to software updates.

Company resource access

Lets you give users in your organization access to data and applications from remote locations. This feature includes Wi-Fi, VPN, email, and certificate profiles. For more information, see Protect data and site infrastructure.

Compliance settings

Helps you to assess, track, and remediate the configuration compliance of client devices in the organization. Additionally, you can use compliance settings to configure a range of features and security settings on devices you manage. For more information, see Ensure device compliance.

Endpoint Protection

Provides security, antimalware, and Windows Firewall management for computers in your organization. This area includes management and integration with the following Windows Defender suite features:

Windows Defender Antivirus
Microsoft Defender Advanced Threat Protection
Windows Defender Exploit Guard
Windows Defender Application Guard
Windows Defender Application Control
Windows Defender Firewall
For more information, see Endpoint Protection.

Inventory

Helps you identify and monitor assets.

Hardware inventory

Collects detailed information about the hardware of devices in your organization. For more information, see Introduction to hardware inventory.

Software inventory

Collects and reports information about the files that are stored on client computers in your organization. For more information, see Introduction to software inventory.

Asset Intelligence

Provides tools to collect inventory data and monitor software license usage in your organization. For more information, see Introduction to Asset Intelligence.

On-premises mobile device management

Enrolls and manages devices by using the on-premises Configuration Manager infrastructure with the management functionality built into the device platforms. (Typical management uses a separately installed Configuration Manager client.) This feature currently supports managing Windows 10 Enterprise and Windows 10 Mobile devices. For more information, see Manage mobile devices with on-premises infrastructure.

Power management

Manage and monitor the power consumption of client computers in the organization. Configure power plans, and use Wake-on-LAN to do maintenance outside of business hours. For more information, see Introduction to power management.

Remote control

Provides tools to remotely administer client computers from the Configuration Manager console. For more information, see Introduction to remote control.

Reporting

Use the advanced reporting capabilities of SQL Server Reporting Services from the Configuration Manager console. This feature provides hundreds of default reports. For more information, see Introduction to reporting.

Software metering

Monitor and collect software usage data from Configuration Manager clients. You can use this data to determine whether software is used after it's installed. For more information, see Monitor app usage with software metering.

BigFix Features

BigFix Pros

Highly configurable

BigFix Cons

Cost of BigFix per client

SCCM Pros

Cost is included in our Campus License Agreement

SCCM Cons

Customized content is harder to generate(?)

Compare/Contrast BigFix with SCCM

Contents