No more typing reviews! Try our Samantha, our new voice AI agent.

Ivanti Endpoint Manager [EOL] vs Samsung Knox comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 4, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Intune
Sponsored
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
377
Ranking in other categories
Configuration Management (1st), Remote Access (2nd), Enterprise Mobility Management (EMM) (1st), Unified Endpoint Management (UEM) (1st), Microsoft Security Suite (1st)
Ivanti Endpoint Manager [EOL]
Average Rating
8.6
Reviews Sentiment
5.4
Number of Reviews
13
Ranking in other categories
No ranking in other categories
Samsung Knox
Average Rating
8.2
Reviews Sentiment
4.7
Number of Reviews
10
Ranking in other categories
Enterprise Mobility Management (EMM) (7th)
 

Featured Reviews

OluwashileAdeniyi - PeerSpot reviewer
Senior Infrastructure Security Engineer at a outsourcing company with 51-200 employees
Centralized endpoint security has improved and supports hybrid work and BYOD policies
Regarding what I dislike about Microsoft Intune and its downsides, I would say that more Mac controls are needed because we have limited Mac and Linux control. When comparing controls and policies between Windows, Mac, and Linux, Windows has almost everything you can think of, while Mac and Linux have limited types of control. You cannot implement certain things on Mac and Linux that you can on Windows. The limited controls are a major issue. Additionally, if Microsoft could find a way to embed servers into Microsoft Intune, that would be beneficial. Microsoft Intune is not really designed for servers or Windows servers. It is more tailored towards Windows 11 and Windows 10 operating systems. Windows servers are not fully supported. Enterprise organizations usually have both servers and endpoints, which are users' workstations. For servers, most people look for other solutions such as SCCM, which is Configuration Manager. However, SCCM is what Microsoft Intune is trying to replace. Both SCCM and Microsoft Intune belong to Microsoft. Microsoft is trying to transition organizations into Microsoft Intune, the native cloud solution. However, because this update is still in process, servers are not fully compatible with Microsoft Intune and cannot be managed by it. The current policy that has emerged from issues with clients is what they call co-management, which is relatively new, and I do not know if adoption is significant. Many legacy or older customers who have been using these products for decades still have SCCM. When it is time for them to manage their Windows devices, they use what is called cloud attach. Cloud attach is a term whereby your SCCM is connected to your Microsoft Intune. Most people do not know about it, but I have deployed it for several organizations. Cloud attach and co-management work together so that your device is in SCCM, but some policies are pushed from Microsoft Intune. It is like two different solutions working hand in hand. That is what they call co-management. Microsoft Intune does not bring all of your endpoint and security management tools into one place, which is the goal and how it should be. However, as I mentioned, servers are not included. If we talk about end users, Microsoft Intune does bring all your devices together. In a typical enterprise environment, you have end users with workstations, laptops, company-issued phones, and bring your own devices. You can create policies for all of these. However, for the backend, your servers do not have much coverage. Servers are not really covered by Microsoft Intune in that way.
VG
Wintel Administrator at Fourth Dimension Technologies
Centralized management simplifies software distribution and patch management
From the features perspective, distribution packages is the best feature in the Ivanti Endpoint Manager. We create tasks for patching or distributing software, appliances, or MSA files and schedule them. We create repair groups, push appliances, create drives, and map shared drives to distribution packages. It distributes the groups included in those packages across our entire network. It is easy to deploy appliances or applications, including OS to workstations within a single click. We can see any missing patches or vulnerabilities. It is very useful for troubleshooting and identifying patches, whether missing or installed. I would suggest including an option to manage multiple clients in future releases. For example, as a managed service provider, if I use Ivanti Endpoint Manager for one client, can I deploy or use the same server to manage other clients or multiple sites or region clients? That feature would be beneficial for managing multiple domains within a single appliance.
TS
Ensures enterprise-level security with seamless updates and integration
The key benefits of Samsung Knox include its secure and user-friendly nature straight out of the box, giving enterprise customers security assurance. A specific feature, Knox E-FOTA One, allows forced firmware updates over the air without end-user intervention, which can be scheduled to occur during off-hours. Additionally, the Knox Secure Folder sandboxes both personal and work data, ensuring corporate data does not mix with personal data. The integration capabilities allow for seamless integration with the customer's MDM product set, providing access to the Knox Suite ecosystem. These features allow compliance with industry regulations, crucial as enterprises move toward a cloud-based, zero-trust security model.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Microsoft Intune is a core product, and it's very stable"
"Microsoft Intune is best for Windows devices and security in Office 365 and Microsoft-related enterprise environments. It's a nice platform for endpoint management."
"Autopilot is definitely the most valuable feature for me, because as an MSP supporting some clients with 300 to 400 users, once it is configured correctly we use Microsoft Intune so that when a laptop is sent directly to a remote user they just log in with their email address and password and their machine is ready to go with Wi-Fi, SharePoint access, OneDrive backup, Outlook, and all the applications they need automatically configured and deployed."
"The biggest thing for us is enforcing logins only from devices that are managed by Intune."
"At the moment, Autopilot is the most valuable feature."
"The insights, even though we're talking about charts and graphs, are super valuable to customers who might not otherwise know what's in their ecosystem or the current state of things within their ecosystem."
"The most valuable features are the ones that make sure that the deployment is of a standard operating system and the Zero Touch deployment, which is very useful. This allows users to have an out of box experience."
"I particularly appreciate the administration and security features, which can be deployed easily."
"The Ivanti Endpoint Manager allows us to perform rollouts, starting small with a group of devices and expanding to a larger set of devices, and it provides the ability to download updates while pinpointing which updates we need and don't need."
"The best feature that Ivanti Endpoint Manager offers is remote desktop management, which allows viewing a user's screen."
"The main benefits of Ivanti Endpoint Manager include patch management and security benefits such as vulnerability management, and it is particularly useful for managing devices in a centralized console."
"The interface is intuitive for administrators to understand patching, package creation, deployment, troubleshooting, remote access, and PowerShell scripting automation."
"Ivanti Endpoint Manager has served us well over the years, supporting operating systems from Windows XP to Windows 10."
"The best features of Ivanti Endpoint Manager are that the agents are very light, and the deployment monitoring is very good."
"The license cost is lower than other products in the market."
"Ivanti Endpoint Manager offers excellent features, working well with both iOS and Android, positioning itself as a market leader and providing a range of deployment features, including quick deployment of business apps, configuration profiles, compliance profiles, password policies, iOS and Android upgrades, and jailbreak device detection."
"Samsung Knox functions as a UEM (User Endpoint Management); for IT professionals, certain features help save time, and we enable IT professionals and technical teams of organizations by training them, handling deployments, and assisting with troubleshooting when needed."
"It's a very good product that any organization can use to help manage their devices."
"Samsung Knox is essential because you can centrally manage all your devices, including Android devices, iPhones, and Windows devices, in one platform at an affordable price, improving your security with GPOs and different policies, which is crucial in these times when we need to secure all communications, software, and various components against hackers."
"Samsung Knox has very seamless integration capabilities for deployment; we easily upload devices through the KME, Samsung Knox Mobile Enrollment."
"The most valuable feature of Samsung Knox is the endpoint protection it offers. Users have the ability to perform a factory reset without the need for a hard reset, which is very beneficial."
"Overall, I would rate the solution as a 10."
"Samsung Knox is doing excellent work with its current offerings."
"Based on my experience and understanding, Samsung Knox is quite good, user-friendly, and top-notch."
 

Cons

"For an existing customer who has an SCCM, it would need to be upgraded to an MECM first before I can introduce Microsoft Intune."
"Unfortunately, Intune’s management extension does not provide the same level of logging, and I lack the visibility in Intune that I had with SCCM."
"I find the solution quite old school with not many features."
"When pushing anything from Microsoft Intune, the sync timing is 48 hours. While sometimes it takes 5 to 10 minutes, the official period given by Microsoft is within 48 hours, which can be time-consuming for policies, applications, or patches."
"I cannot think of any particular features which I consider to be most valuable."
"Automations in Microsoft Intune can be more elaborated; KQL (Kusto Query Language) is available, but if multiple automation options were readily available, which would include PowerShell, KQL, JSON, and different interpreters like VS Code or Python readily available from Microsoft Intune, it would help administration and management much better."
"The user interface should be more user-friendly, as it can sometimes be challenging to navigate. Microsoft often relocates features, making it difficult to consistently find what I need."
"Packages on different identity provider platforms that are not supported present challenges for package installation."
"Improvements could be made in creating collections and enhancing patch packaging."
"The product's implementation process is in areas of concern where improvements are required."
"For larger environments such as ours, the pricing for the Ivanti Endpoint Manager should be more competitive considering how much we pay every year, making it a constant challenge to get the product and license renewed."
"When it comes to the reporting part, it needs to be improved. The executive reports and the deployment reports can be more improvised."
"The reporting functionality and user interface could be improved. The options to generate reports should be more dynamic rather than static."
"Despite the good features, I would suggest improvements in the console interface of the Ivanti Endpoint Manager as it appears outdated, reminiscent of the early 2000s."
"The area that could be improved within Ivanti Endpoint Manager is integration, particularly with tools such as Splunk or potentially ServiceNow."
"When we offboard a user, sending the wipe command or lock command is slightly slower than Workspace ONE, as Workspace ONE automatically processes the lock or device wipe command instantly, while InTune is similar too."
"The main drawback is that they need to expand this product beyond Samsung devices to include every device."
"Features like private DNS would be very useful if pushed through Knox Manage."
"The primary disadvantage is that it's not totally integrated with the Microsoft environment."
"We face challenges with the application launcher when testing firmware versions, especially for kiosk mode."
"Profile customization needs improvement. Samsung Knox currently has some intelligence features, but there are limitations in this console."
"We faced multiple issues when pushing configuration profiles and policies through Samsung Knox. The students were cracking the entire system."
"Samsung Knox needs to expand customer features across all devices, not just Samsung devices."
"Improvements could be made for features such as data services, which do not work properly with devices not manufactured by Samsung, although they do function well with Samsung devices."
 

Pricing and Cost Advice

"It's a bit expensive from a licensing perspective, especially as we look to have organizations with tenants across the globe."
"It is not expensive."
"It's a part of Microsoft 365 and E5 licenses. Microsoft's strategy of making every feature in Microsoft Intune paid needs optimization. Remote control is one of the basic features, not a luxury feature, yet we must pay for it. I"
"Intune comes with the licensing that is common for large organizations. However, Microsoft has recently released many add-ons that are very expensive, especially for large organizations or corporations."
"Microsoft Intune is expensive."
"The pricing needs improvement."
"They have categorized the licenses according to the size of the business. So, if it's a smaller organization, we can choose the license accordingly. If it's a big organization, then we can choose accordingly. Everything is clearly mentioned, and we can decide. It's suitable for all kinds of infrastructure, and that's very goo"
"There are licenses required for this solution. We enable licenses on the devices we need to manage."
Information not available
Information not available
report
Use our free recommendation engine to learn which Enterprise Mobility Management (EMM) solutions are best for your needs.
908,800 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
10%
Manufacturing Company
9%
Computer Software Company
8%
Outsourcing Company
7%
Outsourcing Company
14%
Computer Software Company
13%
Government
7%
Construction Company
7%
Comms Service Provider
11%
Manufacturing Company
10%
Government
8%
Financial Services Firm
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business192
Midsize Enterprise62
Large Enterprise186
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise2
Large Enterprise8
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise1
Large Enterprise3
 

Questions from the Community

How does Microsoft Intune compare with VMware Workspace One?
Microsoft Intune is a great tool for managing a mobile device fleet while keeping access control. The solution makes ...
What are the pros and cons of Microsoft Intune?
Microsoft Intune is a great configuration management tool and has a lot of good things going for it. Here are some of...
How does Google Cloud Identity compare with Microsoft Intune?
Microsoft Intune offers not only an easy-to-deploy data protection and productivity management solution, but also ...
What needs improvement with Ivanti Endpoint Manager?
Ivanti Endpoint Manager can improve support for Mac and Windows devices, as it currently excels with iOS and Android....
What is your primary use case for Ivanti Endpoint Manager?
My main use case for Ivanti Endpoint Manager is managing mobile devices, including iOS and Android, deploying apps on...
What advice do you have for others considering Ivanti Endpoint Manager?
Ivanti Endpoint Manager handles security and compliance requirements by checking for jailbroken or rooted devices, pa...
What is your experience regarding pricing and costs for Samsung Knox?
Regarding pricing, setup cost is crucial in our region. Companies buy Samsung Knox for both security and efficiency p...
What needs improvement with Samsung Knox?
I would appreciate improved management capabilities for iPhones. Currently, there are some possibilities, but they ar...
What is your primary use case for Samsung Knox?
I use this solution for my clients, for different businesses such as transport, editorials, hospitals, and ambulances...
 

Also Known As

Intune, MS Intune, Microsoft Endpoint Manager
Ivanti Neurons for UEM
No data available
 

Overview

 

Sample Customers

Mitchells and Buzzers, Callaway
Information Not Available
Information Not Available
Find out what your peers are saying about Ivanti Endpoint Manager [EOL] vs. Samsung Knox and other solutions. Updated: June 2026.
908,800 professionals have used our research since 2012.