Try our new research platform with insights from 80,000+ expert users

AWS Config vs Microsoft Configuration Manager comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 22, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Intune
Sponsored
Ranking in Configuration Management
2nd
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
334
Ranking in other categories
Remote Access (2nd), Enterprise Mobility Management (EMM) (1st), Unified Endpoint Management (UEM) (1st), Microsoft Security Suite (1st)
AWS Config
Ranking in Configuration Management
18th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
5
Ranking in other categories
No ranking in other categories
Microsoft Configuration Man...
Ranking in Configuration Management
3rd
Average Rating
8.2
Reviews Sentiment
6.6
Number of Reviews
86
Ranking in other categories
Software Distribution (1st), Server Monitoring (6th), Patch Management (2nd)
 

Mindshare comparison

As of March 2026, in the Configuration Management category, the mindshare of Microsoft Intune is 6.9%, down from 10.1% compared to the previous year. The mindshare of AWS Config is 2.3%, up from 1.5% compared to the previous year. The mindshare of Microsoft Configuration Manager is 8.8%, down from 13.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Configuration Management Mindshare Distribution
ProductMindshare (%)
Microsoft Intune6.9%
Microsoft Configuration Manager8.8%
AWS Config2.3%
Other82.0%
Configuration Management
 

Featured Reviews

AkashKamble - PeerSpot reviewer
Sr MacOS specialist engineer at Cyber24
Enables management of multiple operating systems with a single license
The best feature is that it's a Microsoft product, so if anything goes wrong, we get quick support for anything required. Remote system functionality allows us to sit anywhere and take control of any device via remote management. We can enhance security for clients' laptops with built-in Microsoft Defender, which is available with the Microsoft Intune license. We use it for reporting purposes through endpoint analytics. When pushing scripting, there are two types available: remediation script and reservation script. Through endpoint analytics, you can push defender policies to clients. It helps with reporting, inventory updates, and monitoring tenant status health.
Dineshkumar Thulasiraman - PeerSpot reviewer
Cloud Engineer at cloudifyops
Useful for vulnerability scanning and data encryption
AWS Config's dashboard improved our company's security as it helps with the vulnerability scanning of resources. AWS Config integrates with the existing security infrastructure of our company, and it is an easy process that is not at all complicated. AWS Config is a security product. The tool protects its users' resources and data from unauthorized access, security breaches, and threats. The product helps with data encryption. You can have your data on AWS KMS, which helps with data encryption. For areas like SSL/TLS encryption, the tool offers data protection between AWS services and endpoints. As I need to learn the components of the product, I rate the overall tool a seven out of ten.
NS
Senior System Engineer at a tech services company with 10,001+ employees
Centralized endpoint control has streamlined deployments and improved security compliance
In my experience, the best features of Microsoft Configuration Manager are software deployments and updates, OSD, hardware and software inventory, compliance and configuration baseline, reporting and monitoring, and integration with Intune hybrid management. These features make endpoint management efficient and scalable. The feature I rely on the most day-to-day is software deployment and patch management. It keeps endpoints updated and secure with minimal manual effort. Inventory and compliance monitoring are also important, but daily deployments are critical. Microsoft Configuration Manager has had a significant positive impact on our organization in several ways: improved efficiency, enhanced security and compliance, standardization, scalability, and visibility reporting. Overall, Microsoft Configuration Manager has helped us save time, reduce risk, improve operational efficiency, and maintain strong control over our endpoints. One of the biggest impacts Microsoft Configuration Manager has had on efficiency is the reduced manual work for software deployment and patching. For example, deploying a new application or security updates to hundreds or thousands of devices previously required several days of manual effort, including running scripts, checking devices individually, and validating installation. With Microsoft Configuration Manager, these tasks are automated and managed, allowing deployments to complete in hours rather than days. We also have automated reporting for deployment success and compliance which saved the IT team significant time that used to be spent gathering and reconciling inventory data from multiple tools.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We can securely manage both company-owned devices and personal devices enrolled in our BYOD program."
"Intune's most valuable features are the device, compliance, and configuration policies."
"Configuration profiles, remediation, scripts, and auto-pilot features are very good."
"The thing I appreciate most about Microsoft Intune is that the management of the devices was very simplified. We have all machines connected to it at all times, whether they are in the office or working from home."
"The user experience with Microsoft Intune is excellent because we can manage users and maintain security and policies anywhere they are."
"The solution is easy to use."
"As the solution is a software as a service, the scalability is unlimited."
"It is much easier to deploy software updates and Windows updates globally because of the cloud base, so I can manage from anywhere, making it quite convenient for me."
"Installing the instances and performing upgrades is smooth and clean."
"The tool protects its users' resources and data from unauthorized access, security breaches, and threats."
"The solution is scalable and provides over 100 rules."
"AWS Config's dashboard improved our company's security as it helps with the vulnerability scanning of resources."
"The initial setup is super easy, it takes like two minutes. Literally a one-click deployment."
"The scalability is a ten out of ten."
"This has made the management of our environment easier."
"The most valuable feature of SCCM is the application distribution."
"This solution captures all the devices in our infrastructure."
"One of the standout features of SCCM is its application management capabilities. It allows us to create packages efficiently and deploy them to specific groups within our network. This streamlined process has significantly improved our software distribution workflows."
"Microsoft Configuration Manager helps with patch management."
"The most valuable feature of Microsoft Endpoint Configuration Manager is the availability of being able to manage the Microsoft estate. It handles many areas, such as asset management and tracking."
"The most valuable feature of this solution is its ability to deploy patches to nearly all applications."
"Technical support was helpful and responsive."
 

Cons

"It would be good if, in addition to the minimal patching and compliance, we could also use Intune for application deployment. For instance, if a device is not patched, Intune should have the ability to push not only a Microsoft patch but also other patches, such as a browser patch."
"Setting up Intune Autopilot can be a little complicated."
"It would be interesting to integrate the server side of Intune. Some group policy updates we have on the Windows Server side and possibly some on the client side could also be included."
"An area for improvement is the absence of seamless integration, particularly with external dashboards."
"Once it's configured it is unobtrusive, but it does take some hands-on to configure and deploy it properly."
"I wanted to check if there is any provision at the Intune level to restrict certain things, such as a website, but unfortunately, that feature is available only in Microsoft Defender. Intune has web filtering capabilities, but they are only useful for protection from malicious websites, whereas we would like to be able to restrict a website. For example, YouTube is a clean website. No one would identify it as a malicious website, but if we want to stop the end-users from going to that website, we have to go for another product, such as Microsoft Defender or another third-party proxy solution. It would be great if this capability is included in Intune."
"It needs incorporation of Knox, ZeroTouch, etc."
"When Microsoft Intune is used with different android devices it does not always work as it is supposed to."
"Improvements are needed as per customer requirements."
"There is room for improvement in built-in tools, they are not up to the mark."
"The solution is missing a configuration that can assist us when writing our programming languages."
"The reboot process for AWS instances could be improved. Microsoft Azure does not have this problem, so AWS could consider making their instances more robust. You would not need to reboot your instances frequently to replace the hardware and stuff. They can look for a better approach or mechanism to improve in the future. The concern is that you need to plan for the outage when you reboot an instance. You need to have a maintenance window where you can properly reboot the instance without affecting your application. When Amazon announces that you need to reboot an instance and are not ready, this becomes a problem."
"The ability to integrate MDM would be great."
"Their compliance reporting is not accurate, and they admitted it on the phone when we had a call with them. We were trying to understand why their numbers didn't match on our compliance reports. It is not accurate and you cannot depend on the compliance reports. The numbers just don't match, and we can't figure out why. We called Microsoft and they said, "Yeah, that's a known issue." But there is no word that they're working on it."
"The solution can be improved with the addition of a mobile device manager."
"There is a reboot issue with the patching. Sometimes, if patching runs into any issue whatsoever, it doesn't reboot but it doesn't tell you it errored out. It just sits there and we don't find out until the next day whether it patched or not. That was a big issue for us. We're working through that. They added some stuff in there now where you can actually tell reboot is pending. But we still need some kind of notification that if something fails or is pending, we know. We shouldn't have to go in and look. They don't have anything for that right now."
"On some hardware, we'd like an easier way to get peripherals attached."
"I'm looking for a single solution for all discovery needs. It fulfills about 40% of the requirements, and I'd like to see the other 60% so that I don't have to keep doing this."
"It would be of benefit if Configuration Manager could be connected/integrated with multiple Microsoft Intune subscriptions rather than just one (the current limit)."
"I want the system to provide some dependency relations. I would also like to see the relationship between different machines."
 

Pricing and Cost Advice

"The product is offered as part of a Microsoft standard bundle. The pricing can be competitive to Airwatch, and Maas360."
"The E5 license is expensive."
"It comes with the E5 plan. We bought the E5 plan from Microsoft."
"The product is relatively pricey, but considering its benefits, I'd say it's fair. The benefits outweigh the expensive licensing fees, especially for large organizations, but medium-sized and smaller businesses may be unable to afford it."
"The purchase of the product was handled by someone else."
"It is reasonable. When you have Microsoft 365 E3 or E5 license, it is already licensed in that license. So, you could say it is free."
"The licensing costs we leave up to the customer and these vary from one to another."
"The overall pricing of Microsoft Intune is good for companies that have big IT budgets, 3,000 or more users and devices."
"The solution charges us per hour. There's no license."
"It is a very expensive tool. AWS pricing for Config is not fixed and depends on your organization's size and complexity."
"We have a support license from Microsoft Endpoint Configuration Manager and the overall price of the solution is reasonable."
"Its licensing is quite complicated because we are getting the license not only for SCCM but for the full Microsoft package. We don't need to pay for a separate license. We need to have one license that includes everything we need, such as Windows, Microsoft 365, SCCM, encryption, and so on. So, we don't have a specific price for it. Perhaps, it is good that it includes the full suite of licensing of Microsoft. It is expensive, but we are getting a lot of features."
"Pricing and licensing are a downside of SCCM. It's expensive. I'd have to confirm this, but I think they changed the licensing to core-based instead of socket-based. It's not cheap, because you have to buy the software, you have to buy SQL. Another thing we learned from talking to Microsoft is that they provide you a license for SQL if you run it on the same box as the primary server. If you run it outside that box, you have to buy SQL. Microsoft does recommend you running it on the same box because of performance. But then, in order to run SQL, SCCM, and everything on the same box, you better have some resources. It's an expensive solution. There's no doubt about it."
"Pricing is negotiable with Microsoft, depending upon which of their packages you choose."
"There is an annual license needed to use the solution."
"There is not a license needed to use the solution."
"I would rate the cost as eight out of ten."
"The solution is expensive. Microsoft Configuration Manager would likely be considered high-priced for small businesses because they may not fully utilize all of its features and capabilities."
report
Use our free recommendation engine to learn which Configuration Management solutions are best for your needs.
884,873 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
10%
Computer Software Company
10%
Financial Services Firm
9%
Government
8%
Financial Services Firm
20%
Comms Service Provider
11%
Photography Company
6%
Manufacturing Company
6%
Financial Services Firm
11%
Government
10%
Computer Software Company
7%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business124
Midsize Enterprise53
Large Enterprise167
No data available
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise13
Large Enterprise66
 

Questions from the Community

How does Microsoft Intune compare with VMware Workspace One?
Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes ...
What are the pros and cons of Microsoft Intune?
Microsoft Intune is a great configuration management tool and has a lot of good things going for it. Here are some of...
How does Google Cloud Identity compare with Microsoft Intune?
Microsoft Intune offers not only an easy-to-deploy data protection and productivity management solution, but also ...
What needs improvement with AWS Config?
Improvements are needed as per customer requirements.
What is your primary use case for AWS Config?
I use the solution in my company to check the vulnerabilities for all the resources, including tools like S3, EC2 Ins...
What advice do you have for others considering AWS Config?
AWS Config's dashboard improved our company's security as it helps with the vulnerability scanning of resources. AWS ...
How does Ansible compare to Microsoft Endpoint Configuration Manager (SCCM)?
Microsoft Endpoint Configuration Manager takes knowledge and research to properly configure. The length of time that ...
How to choose between ManageEngine Desktop Central and Microsoft Endpoint Configuration Manager (formerly SCCM)?
ManageEngine Desktop Central is very easy to set up, is scalable, stable, and also has very good patch management. Wh...
What do you like most about SCCM?
One of the standout features of SCCM is its application management capabilities. It allows us to create packages effi...
 

Also Known As

Intune, MS Intune, Microsoft Endpoint Manager
No data available
Microsoft Endpoint Configuration Manager, System Center Configuration Manager (SCCM ), Microsoft SMS
 

Overview

 

Sample Customers

Mitchells and Buzzers, Callaway
Flatiron, Prezi, iZettle, British Gas, Burt, Autodesk, FanDuel
Bank Alfalah Ltd., Wªrth Handelsges.m.b.H, Dimension Data, Japan Business Systems, St. Lucie County Public Schools, MISC Berhad
Find out what your peers are saying about AWS Config vs. Microsoft Configuration Manager and other solutions. Updated: March 2026.
884,873 professionals have used our research since 2012.