Try our new research platform with insights from 80,000+ expert users

Microsoft Configuration Manager vs Tanium comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 18, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Configuration Man...
Ranking in Server Monitoring
6th
Average Rating
8.2
Reviews Sentiment
6.4
Number of Reviews
85
Ranking in other categories
Software Distribution (1st), Configuration Management (3rd), Patch Management (2nd)
Tanium
Ranking in Server Monitoring
3rd
Average Rating
7.8
Reviews Sentiment
6.4
Number of Reviews
20
Ranking in other categories
Vulnerability Management (24th), Endpoint Protection Platform (EPP) (20th), Endpoint Detection and Response (EDR) (21st), Unified Endpoint Management (UEM) (5th)
 

Mindshare comparison

As of February 2026, in the Server Monitoring category, the mindshare of Microsoft Configuration Manager is 4.2%, down from 6.7% compared to the previous year. The mindshare of Tanium is 4.5%, down from 7.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Server Monitoring Market Share Distribution
ProductMarket Share (%)
Tanium4.5%
Microsoft Configuration Manager4.2%
Other91.3%
Server Monitoring
 

Q&A Highlights

it_user460248 - PeerSpot reviewer
Senior Technology Architect - Cloud & Infrastructure Services at a tech services company with 10,001+ employees
May 23, 2017
 

Featured Reviews

JunedBedrekar - PeerSpot reviewer
Expert at a tech vendor with 10,001+ employees
Have effectively deployed patches and applications while integrating with cloud solutions
The features I find most valuable in Microsoft Configuration Manager are replication and scripting. If I want to get a fetch report for anything, such as hardware-related issues or group policy-related issues, I need to fetch the report by using SCCM's scripting language and remediation part. The inventory collection features of Microsoft Configuration Manager are good because we always prefer the inventory. We do it by using the script language. We use remote management capabilities in Microsoft Configuration Manager. Remote management capabilities are useful if the user is not providing access; we can use the backend users to update the group policy and sync the devices. These are the main features we require.
VK
Infra Vulnarability Manager at Rezilyens
Immediate results in patching promptly address vulnerabilities
When working with Tanium, there are some older devices that haven't been patched for a long time, and certain patches are not included in Tanium. I have to search outside to download patches, create bundles, and then perform the task. It would be easier if Tanium provided the patches directly. Some other brands provide the patch with a direct download link, which facilitates the process. Also, I feel that if there were more detailed documents and remediations readily available online for troubleshooting, especially more up-to-date information, it would be beneficial. Currently, some resources online are very out-of-date.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"With the SCCM inventory, we found a lot of rogue applications. We were able to identify them, find out who was running them, and either put them on our application list or remove them."
"This solution helps us by automating the patching of our system."
"Microsoft has done a good job with authentication solutions, such as single sign-on, or open authentication."
"It does the job and meets our needs. With everybody working remotely these days, we are using this solution to deploy everything. The deployment of PCs is easy."
"This solution captures all the devices in our infrastructure."
"The solution is highly scalable."
"The most valuable features are Remote Connect, SUP, Cloud functionality, Report, Query, and third-party patching."
"Microsoft is being very competitive right now, and they are really investing in a lot of new features to be more competitive in the marketplace."
"The most valuable features of this solution are the consolidation of all historical data on device endpoints, security drivers, firmware, and Software version gaps."
"The interrogation piece was the most valuable feature because it was very detailed."
"The solution is scalable and helps to understand how infrastructure works. It helps to improve the health of the organization."
"I would say Tanium is the best tool for vulnerability management."
"When I push a quick update, it's done right away, and I can rescan immediately to confirm completion within minutes."
"The product is granular and can build complex roles compared to other EDR vendors."
"For incident response tasks, all these tasks can get done in minutes with minimal disruption to the end-user."
"The solution's technical support is very responsive."
 

Cons

"The main room for improvement is the on-screen display. I think it would be good if some improvements were made."
"They need to improve the support for the Mac operating system."
"The downside of Microsoft Endpoint Configuration Manager is it's an on-premise-based solution. With the pandemic coming on board the need to support users across the globe has increased. For a while, we would use the in-built Microsoft Teams screen sharing feature but the disadvantage of that is you cannot perform privileged access. Microsoft does not give you access to that. That's where you need cloud-based tools, such as BeyondTrust or Freshservice."
"The tool's deployment is complex and depends on the architecture you want to implement."
"They should improve their anti-malware policies like the SCEP policies. For instance, you can't have different policies for different servers, there is only one policy in all the servers, and everything is covered under that. For example, say you want to scan one group of servers on Saturday, and then you want to scan another group of servers on Sunday, you can't do that. You have to scan all your servers, a regular scan or a full scan, on the same day and at the same time. That's definitely one thing they need to resolve. In the next release, it would actually be nice if they included Apple products. It will also help if you can use Intune again. Their compliance reporting feature could also be better. They can maybe work a bit on that for patching now. It would be better if SCCM came with the functions of Right Click Tools built-in. If SCCM would have all those functions already built-in, we won't have to go and spend $5,000, just as an add-in from another company to get those functions."
"There is a reboot issue with the patching. Sometimes, if patching runs into any issue whatsoever, it doesn't reboot but it doesn't tell you it errored out. It just sits there and we don't find out until the next day whether it patched or not. That was a big issue for us. We're working through that. They added some stuff in there now where you can actually tell reboot is pending. But we still need some kind of notification that if something fails or is pending, we know. We shouldn't have to go in and look. They don't have anything for that right now."
"In terms of scalability, I believe there's room for improvement. While SCCM is capable of handling our current needs effectively, scalability could be enhanced to accommodate future growth and larger deployments."
"In spite of us being a premier customer we find the support unsatisfactory."
"The most painful thing is the interface. It's a bit unclear sometimes."
"When working with Tanium, there are some older devices that haven't been patched for a long time, and certain patches are not included in Tanium. I have to search outside to download patches, create bundles, and then perform the task."
"It is not really additional functions, or the features that are needed, rather the complexity would be reduced based on the number of modules required to put together a comprehensive operational security and risk compliance model."
"Tanium required local admin or root rights on Mac devices, which did not comply with our security policies. This made the solution less suitable for our restrictive environment."
"Any movement into a SaaS solution has challenges since the processes and data flows are not well defined. Hence, you need to build it at the same time."
"There are some bugs in the product. The tool needs to improve in the area of reporting."
"The solution needs to improve the reporting and tracking capabilities."
"The main issues are the network connection because different customers have issues with their networks. It's difficult implementing this type of solution because the network is the main feature in the architecture for these types of solutions. Tanium could improve by creating some network optimization."
 

Pricing and Cost Advice

"The solution operates on a licensing model that can be expensive."
"The license price could be reduced for Microsoft Endpoint Configuration Manager They should make the price more affordable for smaller companies, most companies would be able to use the solution if it was priced better. There are more people on this cloud because you don't have to have either a server room or an on-premise server. You can have one IT person handle this without any local infrastructure."
"Pricing and licensing are horrible. You have to not look at dollar value to use SCCM. It's super-duper expensive but it works. The acquisition cost is expensive, it's labor-intensive. But it works."
"It comes free with the Microsoft account. We have a yearly agreement, and all products are covered under it."
"The price is competitive and reasonable."
"There is an annual license needed to use the solution."
"For enterprises, there is an annual license required to use this solution. The price of the solution could be cheaper. However, this is mostly because of the exchange rate from the dollar to the Nigerian currency."
"Its price is okay because it is part of our licensing."
"The solution offers value for money."
"The product's pricing differs from region to region depending on negotiations and the number of endpoints."
"The solution is expensive but it's a good investment."
"It's an expensive solution. It would be nice if the cost were lower."
"It is higher than some competitors in the market."
"There is an annual license required to use this solution."
"Tanium is a more expensive solution in Latin America than some of the competitors, such as BigFix."
report
Use our free recommendation engine to learn which Server Monitoring solutions are best for your needs.
881,707 professionals have used our research since 2012.
 

Answers from the Community

it_user460248 - PeerSpot reviewer
Senior Technology Architect - Cloud & Infrastructure Services at a tech services company with 10,001+ employees
May 23, 2017
May 23, 2017
I would not waste time in comparision. SCCM is best for Windows mgt.
2 out of 5 answers
JF
Principal Technology Consultant at RIO3 Consulting
Jun 14, 2016
Good morning, what specific information do you seek. I am on the consulting side so we look at Gartner, Forrester, and other sources. I have some information on SCCM and BigFix off hand. Are there specific features you are looking at to compare SCCM and Tanium?
it_user304998 - PeerSpot reviewer
Works at a tech company with 51-200 employees
Jun 14, 2016
Unfortunately we won't have an answer on this, the request is to compare Tanium patch management vs Microsoft Path management (SCCM). We don't play in this space so never bothered to dig in this area. If they are speaking with either Microsoft or Tanium, either one should be able to provide the customer with a comparison between the two vendors. Sent from my iPhone On Jun 14, 2016, at 7:04 AM, Ariel Lindenfeld - Community Manager at IT Central Station > wrote: Hi, Can you help out a colleague with the following question about Endpoint Compliance: ----- Tanium vs SCCM I'm comparing Tanium and SCCM. Has anyone done a comparison of these solutions? Any thoughts about the differences? ----- Please reply to this email with your response or post your answer here. User's background: User at a tech services company with 1000+ employees You've been a member of IT Central Station since September 2015. In a market full of vendor hype, we provide free connections between real users of Endpoint Compliance to share advice and make better buying decisions. Thanks for being part of the community, Ariel Lindenfeld Community Director, IT Central Station IT Central Station 244 Fifth Avenue New York, NY 10001 (646) 328-1944 To change notifications, please visit your subscription page or unsubscribe completely from similar emails. um-nqn 101666 gitbdelUmkweEM0dFdtb2svZWFvWlFSVU1yWFdJMHloQnFyYnZSaSs1cG1TbVdMcldCU216ZDRTT0ZMTGVPbmM4SHpDRS0tOGdTTmdTM3VncVp5R0NQM1Y3K3F0QT09--21c2b4f3bf871f4c09d15549779c6a95f54ceb52gitbdel WARNING - CONFIDENTIAL INFORMATION: ________________________________ The information contained in the e-mail may contain confidential and privileged information and is intended solely for the use of the intended recipient(s). Access for any review, re-transmission, dissemination or other use of, or taking of any action in regard and reliance upon this e-mail by persons or entities other than the intended recipient(s) is unauthorized and prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message and any attachments.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Government
11%
Computer Software Company
7%
Manufacturing Company
7%
Financial Services Firm
15%
Government
10%
Manufacturing Company
9%
Computer Software Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise13
Large Enterprise64
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise3
Large Enterprise11
 

Questions from the Community

How does Ansible compare to Microsoft Endpoint Configuration Manager (SCCM)?
Microsoft Endpoint Configuration Manager takes knowledge and research to properly configure. The length of time that the set up will take depends on the kind of technical architecture that your org...
How to choose between ManageEngine Desktop Central and Microsoft Endpoint Configuration Manager (formerly SCCM)?
ManageEngine Desktop Central is very easy to set up, is scalable, stable, and also has very good patch management. What I like most about ManageEngine is that I can log on to every PC very easily a...
What do you like most about SCCM?
One of the standout features of SCCM is its application management capabilities. It allows us to create packages efficiently and deploy them to specific groups within our network. This streamlined ...
What needs improvement with Tanium?
While there is always room for improvement, I am pleased with Tanium.
What is your primary use case for Tanium?
The primary use case for Tanium ( /products/tanium-reviews ) is compliance, patching, and inventory as part of the core functions.
What advice do you have for others considering Tanium?
For smaller companies, Tanium is quite a big investment, and one needs to have a considerable setup to make it economically viable. I would recommend it to others with a similar use case. The solut...
 

Also Known As

Microsoft Endpoint Configuration Manager, System Center Configuration Manager (SCCM ), Microsoft SMS
Tanium Inc Cloud, Tanium XEM
 

Overview

 

Sample Customers

Bank Alfalah Ltd., Wªrth Handelsges.m.b.H, Dimension Data, Japan Business Systems, St. Lucie County Public Schools, MISC Berhad
JPMorgan Chase, eBay, Amazon, US Bank, MetLife, pwc, Cerner, Delphi, MGM Grand, New York Life
Find out what your peers are saying about Microsoft Configuration Manager vs. Tanium and other solutions. Updated: January 2026.
881,707 professionals have used our research since 2012.