KACE Systems Management Appliance (SMA) Reviews

We use the solution for managing our fleet of approximately 1,500 devices. This includes Windows patch management and version control, scripting deployment to workstations as well as managed software deployment to groups and individuals. 

It is also used for creating reports for software use, patching records, and auditing the workstation fleet. We like being able to create custom reports based on any number of internal fields, and the ability to have custom inventory fields too. With it, we can deploy complex software solutions in a controlled manner.

Quest KACE has provided us with a managed environment that surpasses all expectations. The information available via KACE is up to date, critical to our normal operations, and has become the go-to tool of our IT teams for extended support. In our classroom environment, it has saved a lot of time in software deployment.

Having a full report of our estate, which version of Windows is running, whether the device is encrypted, is running the latest AV solution, when the support runs until, et cetera, has been vital. It allows us to maintain a service desk that has all of the most up-to-date information on all workstations.

Full auditing of the Windows estate is the most valuable aspect for us. We are aware this solution can do Apple and Linux-based integration too, however, we simply haven't had the time to explore this so far. 

The managed software deployment is great. We like ensuring a single managed solution can be deployed - rather than having to do a custom install, which is time consuming and error-prone.

Scripting deployment for configuration, removal, or reporting is helpful as well. This has allowed us to ensure we are currently using our workstations and they are correctly implemented for end-users.

The solution needs to add:

• Automated software deployment, rather than manually having to create uninstall packages and running this against a number of manually entered devices. 
• Driver feeds for devices outside of Dell ownership.
• The ability to push out managed feature updates from Microsoft in a more seamless way.
• The ability to integrate quickly with workstations to push out tests/patches.

There is a Resolve issue whereby some workstations no longer report/check-in after a recent update. This is now an open case with Quest Support.

There is a Resolve issue whereby we cannot migrate between VMware hosts.

We have been Quest KACE customers for approximately five years now. We have used the K1000 for device management and K2000 for asset deployment.

The stability is great - it simply never fails!

Scalability is very good. We've been able to expand several times, expanding the number of devices covered with ease. We have also utilised the cloud-based MDM solutions, however, this isn't something we've maintained a licence for due to internal staffing resources.

We have successfully moved away from a hardware-based solution and moved into a virtualised VMWare estate. This has allowed us to integrate the backups of this product within our organisational estate, plus allowed us to migrate the services across various parts of our network, without having to physically change the location of the hardware. This is a great solution for us and removed any hardware blockers that were in place previously and to take advantage of the virtualisation advantages without any major changes to our client estate.

We previously used Acronis to do very basic duplicate systems.

The solution is very easy to get set up and push out clients to our workstations for deployment. It is now used as our only solution to image and deploy workstations!

As with many platforms, the more you can put in, the better the solution will function. The time taken to deploy complex packages can be time-consuming, but this is outside of the KACE environment directly.

Licencing has been quite simple throughout. We have successfully expanded our support numerous times, including additional features and devices.

We did not previously evaluate other options. 

We use it for asset management for PCs and servers, and for doing updates. We also use it for monitoring all of our systems to keep them compliant with Windows updates or server updates. In addition, we use it to deploy and to uninstall software, and we use the Service Desk.

We're using Quest's K1000, which is the asset manager, and we're using the K2000, which is the deployment appliance.

The way it helps us is the easy organization and visibility that it gives into the software versions that are on our assets. It doesn't necessarily provide the solution but it provides us with high visibility into where we're at on all our assets. We can then address the different deployments to get things up to date pretty quickly.

The most valuable feature is the ability to monitor updates—the software versions—on machines so that we can keep everything compliant. We're very highly monitored because we are a financial institution. We have audits all the time and they look for vulnerabilities. So we try to keep everything to the latest software versions and firmware versions. We use KACE to monitor those.

The K1000 doesn't communicate well with some clients without SMB. There are some issues with getting things to image correctly because they rely on SMB, and SMB is a protocol that is being removed due to security reasons. Organizations are trying to rely less and less on SMB. I know Quest is aware of it. They've talked about having a new version that wouldn't rely on SMB for connection to the clients, but they haven't gotten there yet.

I've been using the Quest KACE Systems Management for four years. We're using 12.01.49 and we've been on it for about a month. We update pretty much every time updates become available.

The KACE solution is solid. We haven't had any issues with functionality.

It's definitely easy to scale out. We've had to add licenses as our environment has grown. We haven't had any problems there. We haven't hit our heads on any capacity issues.

We're using it to the capacity that we need to. We do most of our software deployment through it and we do about 150 to 200 tickets a month through the Service Desk.

Any time I've had to deal with their technical support, they've responded quickly and they're pretty thorough in getting things resolved.

For example, about six months ago, one of the updates didn't deploy correctly. I was doing it on a Saturday because I didn't want to interrupt production. It didn't go well, and a gentleman from Quest support jumped on and he went through it that day and we got it resolved. He knew what code needed to be executed manually and he worked through the problem and had us up within a couple of hours.

Positive

The initial setup is pretty involved because you have to set up Service Desk and you've got to set up all your environment labels for the different assets. As a part of purchasing the appliance, you do get to buy some services to help you get it set up in your environment, and that was a great purchase. They assisted us a lot in getting the Service Desk, and some of our labeling and environment, set up to get us going.

Between the two appliances, the deployment took pretty close to a week.

In terms of an implementation strategy, the first part was to get the Service Desk up and running on the K1000. Then we went to the K2000 with imaging and deployment through that.

We have about 85 to 90 people using the Service Desk, and we have five people in our IT department who administer the system. While they don't do so full-time, we have three people who do the admin work on the KACE appliance. One is responsible for software deployment, and the other two do most of the updates, as well as the monitoring of updates and vulnerabilities on computers, and pushing the patches through KACE. And we have four people who monitor the Service Desk in KACE. One is a basic Service Desk individual and the other three are systems admins who overlap and help out.

At the time when we bought it, it was a Dell product. Since then, Dell sold it to Quest. Dell provided a third party to help with the installation.

The solution has saved us a ton of time in several areas. We spend tremendously less time—probably 80 percent less—on updating now, versus before we had KACE.

I was using Microsoft SCCM in my previous environment and I replaced it with KACE. When I came to this new environment we put KACE in. Compared to SCCM, it's a lot better. With SCCM, when I was trying to push updates or get the stuff to function, the way it was designed it was more difficult. Usually, if I set up a script with KACE, it doesn't take long to get it to run successfully. Whether it's scripting or installing, it seems to be much smoother with the KACE product. The improvements are in deploying Windows and server updates automatically, on schedule.

We got rid of SCCM because we got out of our Microsoft licensing agreement at the time, and it was covered under that. And it just wasn't effective for us. We had a lot of issues with it.

There were a couple of us in IT who had used KACE in previous environments and we liked it, so we made the recommendation and moved forward with it.

Its ease of use is an eight out of 10. Some things can be a little difficult to find, but support's always there to help if we can't figure something out.

For both appliances, the K1000 and the K2000, make sure that you purchase the support for the deployment and get Quest's assistance in getting it set up properly for your environment. With the K2000, we got it set up with their support and then one of our technicians went in and started changing things and really set it in the wrong direction. Their support will help you start out on a firm foundation.

We use this solution to manage our workstations and desktops. We can manage our hardware inventory and licenses, remotely install software, update software, and generate reports.

We do not use it to manage servers, only workstations.

We have a lot of different machines and devices in our environment. When I need to upgrade or install specific software applications, they can be deployed en masse and over a short period of time. It saves us a lot of time, which is the biggest help that KACE provides.

This product has helped our IT operations increase productivity. We have been able to create labels for machines and users, which has been useful. Also, we have been able to create rules in KACE that segregate software according to each area. Using this capability, our team management has improved as well as our customer relationships. 

This solution makes it easy to control assets and upgrade all types of software.

The mass deployment of software is easy to do.

KACE is very intuitive and easy to use. I am new to using the KACE Systems Management solution. Today, I was amalgamating software for the first time. It was easy to do. The employee that I was helping liked the way that it resolved the problem. It is also easy and fast to transfer my knowledge of KACE to another person.

This product provides good visibility into our machines, which is useful. It provides details about the software, hardware, and what is connected to it. It is very easy to use.

I would like them to implement VBScript language in KACE Systems Management. Currently, we can only use PowerShell.

We recently updated to the latest version, and we haven't yet seen all the features that it previously had.

I have been using Quest KACE Systems Management for between three and four years. It was deployed several years before I joined the company.

Stability-wise, it is fine. I have never seen this product crash or timeout.

If the server is working, then KACE Systems Management is fine.

We have four help desk staff who work with it. We don't manage servers with KACE; we just manage stations. We do not use it in our daily routine.

As our company and environment have grown, scalability has not been a problem. The scalability of the tool seems to be good. We currently manage 639 endpoints.

We use Quest Premier Support and contact them a lot. They have a Brazilian analyst who is very good to work with. He is skilled, has complete knowledge of the product, and has helped to resolve several problems that we have had in our environment. He never leaves us with big problems.

I would rate technical support a ten out of ten.

Positive

I have worked with SCCM, which is quite like this product, but the KACE Systems Management interface is better. 

KACE Systems Management makes it easy to find information because it is intuitive. 

The pros of SCCM are that it has more integrations and APIs with Microsoft software. This is useful when it comes to managing an environment. Because it is a Microsoft product, it has more integrations than other competing software.

I was not involved in the initial deployment.

KACE saves us time when it comes to maintaining our machines. For example, we sometimes need to retrieve information from the operating system of our machines. Normally, this has to be done manually, and we move from station to station to complete the task. With KACE filtering the results, we can do it in 20 seconds.

The pricing is fair.

KACE is a useful product for us. As I am new to it, I don't have very many suggestions for improvement. Rather, it has been very good, useful software.

I would rate this solution as eight out of ten.

We use KACE SMA and KACE SDA. We use all but a few of the features that both appliances have to offer. We are in a VM environment with the KACE SMA, however, we use a physical appliance for the SDA.  

The ticketing system, real-time inventory, patching, software license, and imaging are commonly used. We also use this for scans - with this and aggressive patching we have been able to pass several outside pen tests. Scripts are used to push out software so the clients don't have to wait and it takes the pressure off of the technicians.

The solution has helped with real-time inventory, advertising and pushing out software, patching, and oval and SCAP scans. We can get the majority of what we need with this product and do not have to spend money on something else. 

In terms of imaging, we don't have to have an image for every model of Dell computer we have due to drivers. The SDA pulls and installs the correct drivers for each model. 

Post-installation tasks make it easy to add or remove software to images without having to download, change the image, and upload them back onto the server.

The streamlined processes and procedures are great. Automating processes is helpful. Patching is huge as it's set it and forget it for the most part. Real-time software and hardware inventory is great. 

We can track software licenses in one place. We can have a ticketing system and be able to create processes so that when one ticket closes, the next one is assigned in the process. 

Being able to add and remove software from images without having to recreate the image every time is helpful. 

Being able to create labels to group items we want to keep track of makes it very easy for us. 

The notifications (up to 60 days pre-renewal for contracts) are a great way to know when a renewal is coming instead of finding out last minute. 

The ticketing system works for us and we like using it. That said, some processes that seem like they should be simple either can't be done or are cumbersome in setting them up. I managed a different ticketing system previously and we were able to have certain questions come up for the client based on the category picked. It was easy to set up and use. Being able to auto have a KB article with questions needed for certain categories easily auto inserted into the ticket based on category was also an option. 

There may be a good reason why some things are not easily able to be done, yet it needs work to compete with some of the other ticketing systems out there now.

I've been using the solution since 2010.

We had a few different solutions. We had an access database we were using for ticketing and inventory, and patching was manual. Imaging was with a product that required an image for every different model of computer we had.

The setup was straightforward.

We worked with a vendor team, and they were excellent.

We can do more with less staff. And, unfortunately, due to budgeting, we now have fewer staff.

The cost is reasonable. I would definitely take the JumpStart training that is offered as it helps to get you started.

We evaluated an in-house system, School Dude, and a ticketing system that is no longer in business.

We Primarily use KACE as a diverse deployment and management solution. 

Our environment includes multiple locations, so having a single point of deployment for automation/patches/software/scripts and response management is ideal. 

We work in the banking industry, so having this single point and not having to worry about security is enormous. We have to go through multiple government security audits a year and our auditors are always blown away with our KACE environment. We need KACE to keep our organization going.

Previously, we were working with upwards of 200 different applications and tools, the amount of compatibility issues and clutter was unbelievable. One update on one application could ruin a whole environment at times. Thank goodness we found KACE to consolidate our environment and really cut down on resources! 

They've saved us so much time and money it's unreal. They have so much flexibility in what you want to configure or script. In some of my deployments, I've built entire applications on KACE to work with, while in others I have small built-in batch files. The only thing that limits KACE is your imagination.

The ability to build scripts right on the deployment center itself, as well as building groups that take those scripts/task chains has been absolutely invaluable and one of the most important parts of my whole environment. Without it, we would need to hire at least six to seven more employees to do what I'm able to do myself with those tools. 

On top of this, they have multiple forums that are super active. I've gone to tech support, ITninja, and even Reddit. One time, I asked a question on the KACE subReddit on how to improve a function and a KACE team member responded in five minutes. That's honestly unheard of for a company like this.

The GUI needs some work. I love all that it can do, however, it can be just be so cluttered at times. I wish we could see them spend some time improving the interface.

Sometimes when I run certain functions or need to do a one-off massive deployment, it lacks in "mobility". It can be a pain, having to go back a page and re-type in all the same information in the "run now" tab when I have a whole bunch of one-off situations. It's not like I can't do what I need to do, however, I seem to just spend more time than I'd like having to type in the same information over and over.

I've used the solution for the past five years.

In all the years we've had this product we've never had a stability issue.

The solution can scale. The product can be a help desk ticket system, all the way up to the entirety of your virtual machine environment - making updates and changes at a click of a button.

They take their role in support extremely seriously. We don't have to reach out too often due to the lack of problems, however, when we do, they respond within an hour or two at the very longest.

Positive

We did not use another solution. Once we got KACE, I just don't understand how we held on for so long without it.

We had a vendor assist us so that we never had a single hiccup during the entire setup.

The vendor was, without a doubt, an expert. We assisted and learned everything they could teach us.

We had ROI about a year into this and have saved so much ever since.

If your team is small like ours, I highly recommend working with an install vendor. For us, it wasn't as much a technically challenging thing to implement as much as what the vendor showed us during setup and installation that was just so helpful. With their help, we were able to hit the ground running and had much less of a learning curve.

Other options were discussed however, it was so long ago I can't recall what they were.

I would say start by looking at all of the services/products that KACE offers - don't feel overwhelmed as they will integrate very well with each other.

The primary use of this product is for our user support (help desk).

Kace has helped us integrate all of our IT needs from inventory to imaging. Having this appliance to do everything automatically and push out software is a plus. Summer tasks are so much easier with imaging across the network that requires almost zero technicians intervention.

Managing 3,000+ computers across our campus from one single solution has made our life (and work) so easy. We are able to respond to the needs of our users always and can look into the history of the devices or the KB created to self-serve our users.

Our computer Inventory became more accurate, and computers were rolled out faster. Our techs adapted quickly to the new service desk, and the users can now check the status of their ticket by login into the user portal. 

As we plan computer rotations, having an accurate inventory is a key to identifying computers that are end-of-life or out of warranty. KACE can provide all of the necessary information by simply running customized reports that in turn can be provided to individuals or departments, either on-demand or on an automatic schedule.

Asset management, inventory, reporting, and service desk features work together and they are very valued in our daily operations.

When a user creates a ticket, users are in a continuous loop of communication via the service desk, user portal, or email. We are now able to set tier levels and involve other areas within IT, networking, sysadmin, VOIP, or managerial for approvals.

The service desk can be configured and customized to better serve our environment. If necessary, additional queues can be added.

There is always room for improvement. An example will be the implementation of granulated permission to run Scripts. We often find it unnecessary (and dangerous) that all technicians can see/run all the scripts created by our institution. Ideally, a Manager could assign some scripts to certain levels of support. 

However, the system does most of what we need at this moment.                                          

KACE has a website, "Use Your Voice," where users can make suggestions to improve the product or add new features. This offers a great way to improve the system.                      

KACE recently added Windows Feature Update patching to SMA. That was a considerable improvement to keep end-points secure, as many users were asking for it. 

SMA was implemented in our institution in late 2008.

The stability is great, initially was running on a physical server, and recently migrated to a VM, both environments are very well-built.

Support was always provided a fast and accurate response to our questions, issues, or even helping us implementing new system upgrades

Positive

n/a

The setup was straight foward, and a dedicated support team was on the line while we implemented and set up the system. KACE included a follow-up online training to guide us and have the appliance up and running within the first hour.

We've seen ROI in less than 6 months.

We also looked into TrackIT.

We were originally using a physical appliance and now we have migrated to a virtual appliance. We migrated to the virtual appliance three years ago.

Our primary use case is for managed installations and the software that we deploy. Our offices are scattered throughout the state and we have 103 locations that are remote. We use KACE to inventory those items. We use KACE to push updates, third-party products, and third-party software to them.

We gather inventory from them, it lets us know how many machines out there have 16 gigs of memory and who's running low in this space. Any new software that we get that the company purchases, that is how we deploy out to the masses. We do that so that we don't have to travel the state over and over again, we can do all this stuff remotely.

We also have a lot of reports that are being generated from the information that KACE has so that we can take that back to our accounting department. We can provide reports on the location of newly purchased laptops. It shows us if they're still being used and who they are assigned to.

The ease of being able to distribute software to a thousand machines from one location with just a few clicks is the most valuable feature.

KACE is super easy to use. You have to change your mental process on how to think of something and look at it as how KACE has designed it. But once you can figure out what KACE is thinking, then it is really easy to use. We've been using it so long that we don't have to write much new stuff for it. We are able to use the old scripting jobs or deployments that we had. We're able to take those and modify them with new software and then push it out that way. I learn something new every day in it. There's a lot of stuff that I probably don't know that it can do. I'm always playing with and discovering new things.

It's 90% on a single pane.

We use the Systems Deployment Appliance. It's our bread and butter. Every machine that gets imaged here in this building and out through the whole state goes through the SDA. We rely on it completely. There is no manual process of getting a laptop out of a box, plugging it up, turning it on, and waiting for Windows to start. If you were to go to Best Buy and buy a brand new laptop, you would spend the next two to three hours just setting it up. We don't do that. We get a laptop, plug it into the network, connect it to the SDA, and within about three clicks, we're done.

It takes around 30 minutes to configure our laptops. We image machines, image laptops five to 10 of them at a time. It's really great to just line them all up and power them on, hit enter, enter, enter, and then walk away. That part's great.

KACE saves us time. We've been using it for so long now it's become part of our routine. 

It has also increased the team's productivity. We've been able to create standards where we know that no matter what type of laptop it is, we can image it the same way. It has the same setup for every user kind of thing. We know we can guarantee that everybody across the state is running the same version of Microsoft Office or products like that. It has continuity. It's made it to where we are efficient across the board from high-level VP level down to standard user level. Our equipment and the way that our equipment functions is standard. It's across the board.

It makes it to where the six guys that are on our team here can step up and do the same job. We know what to look for. We know the learning curve for it. We all know what it does and how it works. If we hired a new person, they could come in and pick it up very fast and be up and going extremely quickly. We've cut the learning curve down tremendously.

I would like for there to be improvement when it comes to Microsoft and Windows updates. It has the ability to do it but the control of it is not there like I have in the Windows Server Update Services. The way KACE does it is still very granular. You don't really see the process like it is in the Windows Server Update Services. I think that would be one of the biggest things that I would like to see KACE really put some work into and really make that a big enhancement. 

I have been using KACE for seven to eight years. 

It's very stable. The upgrades and patches that they come out with only seem to enhance the product. They're not trying to fix something that's broken. It always seems like when there is a new version, it's always something that is enhancing.

We have one SDA and one SMA and it works for all 1200 of our devices that we have listed. I don't think we would ever need to scale out to anything larger than that.

When it comes to opening a service ticket or a support ticket through KACE with Quest, it's one of those that I don't cringe at. I don't mind it because I know I'm going to get somebody that's going to help me. They go above and beyond to help, unlike other companies like Microsoft or something. It's a pain to open a ticket with them because you feel like you have to sit at your phone and can't move and can't leave waiting for them. It's the complete opposite for Quest. I really like how KACE operates on the support side of things. We use their premium support.

I can open a ticket through the appliance itself or I can sign onto the Quest support website and submit a ticket that way. I know that in a very short amount of time, I'm either going to get contacted that they're working on it or we'll actually have a support technician calling me directly. I get real people. One of the biggest benefits is you get a real person. A real person who is willing and knowledgeable about the problem that you're calling about.

Having this excellent support hasn't influenced us to purchase additional products. But it has been an influence on never, not even considering, picking a different product for SMA or SDA. It's a given that it will be here and it will be here for a long time.

The initial setup was straightforward. When we got the original physical machines, it was taken out of the box, we plugged it into the rack, and got it set up. Within a day or so we had it up and running and had machines in there doing inventory already.

We had professional services assist us with the deployment. I can't remember if they actually came on-site or if we did it remotely. 

Our experience with Quest support has always been great. Any of our interactions with them have always been spot on.

The biggest thing that I've discovered from it, is to give a picture of our entire environment. In one location, I can see how many laptops we have, how many desktops we have, how many people we have assigned, and to what software we have it deployed. I can give versions. I can give so much detail on devices that I don't normally see or I don't normally touch, that are anywhere from five miles down the road to 300 miles down the road. I have the ability to see them, change them, update them, and move them. That's where the biggest bang for it comes in.

From an admin point of view, it would make an administrator's life a lot easier to be able to have that vision across their environments and know what's out there and where you stand in that environment. To know if the machines are up to date or if they falling behind, and different things like that. 

I would rate KACE a solid nine out of ten. Nothing is perfect, I think that there's always room for improvement but it would be a strong nine.

We use the KACE solution for endpoint management, since our posture is based on endpoints. We have almost 2,000 endpoints.

We have two KACE boxes. It's not a virtual appliance, it is a physical appliance.

It's not only saving time but increasing IT productivity. If you have a KACE box, you're going to save a lot. Having KACE is a blessing for IT administrators for endpoint management. They can do a lot of work remotely, as well as troubleshooting, mass deployment, and mass uninstallation. KACE is very intelligent and it has its own uninstaller.

An example of how KACE helped is that there was a McAfee service-provider who was visiting us to do a McAfee upgrade for our antivirus system. They are experienced people, the subject matter experts for deploying McAfee, the client, the agent, et cetera. He was having an issue uninstalling a McAfee firewall client. If you deploy a McAfee in your network, the uninstaller should be from McAfee, but the uninstaller from McAfee was an outdated version. Uninstalling the firewall client from McAfee requires a lot of effort. It's not impossible, but it's time-consuming and if you try to uninstall from the control panel, of course it won't allow you. There is a popup for the password and, without that, a lot of problems are going to occur. 

He told me he was facing this issue. The solution for uninstalling it was provided by KACE. I demonstrated it to him for one of our clients and he was shocked. He started writing that command, and the next day he sent me a text message, saying, "Thank you. You made my life easier." He gave that command to another customer, a client of his who is an IT administrator, to run that command via a batch file to all the end-users, because they didn't have KACE. 

For an IT department in any organization that pays for endpoint management, KACE is really a blessing for them.

The most valuable feature of KACE is the mass package deployment. There are a lot of endpoint management solutions in the market. The way KACE responds is with the installation management feature, which is done in a very intelligent way, as well as scripting. It's wow. It's really wow. On top of that, there is a mass undeployment feature as well.

For example, we had an issue a while back where there was a plugin for the SAP module being deployed to almost 1,800 computers. It was taking a backup, restarting the machine, and updating it automatically. Our end-users were complaining every day. We were receiving hundreds of calls. We found out that the issue was this plugin. It was updating and restarting machines without informing the users. When we did inventory, we started finding this application, but we didn't know about the history of that application. Luckily, KACE gave us an uninstallation path, the command line. When we deployed it, believe it or not, it worked as a massive uninstallation feature and it took care of almost 1,800 computers within one hour.

It's really very time-saving stuff. It's all up to you, how you are going to utilize KACE, but if you know the way, the features are very user-friendly and it does not require scripting. There are built-in features where you can build your own script and execute it remotely through KACE. 

I have never officially worked on the service desk model of KACE, but when I went through it, it was fine. It's good for a small IT department. It's more than enough. It has asset inventory and printer inventory. You enable the SNMP features and you can get reports on printers and even printer cartridge utilization reports. It's a very handy tool for organizations that have a lot of endpoints in place.

We also used the Systems Deployment Appliance for Windows 7. Now, we are planning to use it for the Windows 10 upgrade for the rest of our machines. If you're going to capture the image of a machine and re-image that machine, it's great. Over the network, it took us 18 minutes to deploy 19 GB of images. And that was not on the same campus. It was a remote campus. For the same campus, we also used it to deploy and it took us, I think, 16 minutes and a few seconds for almost 18 GB of Windows 7 images.

There are a lot of nice features.

There is a module for agent management when you right-click on the inventory. If you want to connect remotely you can do so. But sometimes the agent check-in does not happen. You can do the first check-in through a script, at the same time. 

But there should be a mini toolbox, like the competitors of KACE have, with the small features for KACE administrators. That would make their lives easier. If you are troubleshooting a specific endpoint, remote control is available as is Wake-on-LAN. But if you want to execute some commands, you have to use a third-party tool, the PS tool. If they would integrate those small things, it would make KACE more powerful.

I have been using Quest KACE Systems Management for almost five years.

Initially, four years back, we were having a lot of issues with the KACE agent. But as the solution has grown, the maturity level has really increased and the stability and the reliability have as well. My KACE machine has not been down for a single day in the last five years. It's a very stable product.

It's really reliable now and very intelligent on top of that. When we do a mass deployment, there isn't a single day when my network admin asks me, "Why are you deploying this?" I deployed Office 2013 with KACE, in a massive way, and our network guys never said, "Oh, we can see there is a bandwidth spike." The way that KACE intelligently deploys and manages installation is great. It's really kind of a miracle. I believe that they select a group, copy the file over the network to the cache of the local machine, execute the command, and then install the media file on the local machine.

KACE is very scalable.

We started with 700 clients and today we are at almost 2,000 clients. There hasn't been a single day where I have been concerned about the scalability or the of KACE. 

Quest Support for KACE is good. They are responsive and they always give you a solution in a  timely manner. 

We faced a problem two or three years back, an issue with the inventory of Forescout Secure Connector. We could not find out how many machines had Secure Connect Connector because it's installed as a service. It was a very complex problem for us and KACE support came up with a solution: Create a new, customized inventory to get Secure Connect to be considered as a process. On that basis, we had a new entry and this solved our problem.

We have not used another asset management solution in this organization. I did use SCCM in my old company.

For us, the initial setup was not complex. The problem was that the environment, the network we work in, is a very restrictive environment. We have a lot of firewall policies and a layer of firewalls across the network. Because of the complex network architecture, we struggled a bit with the network discovery of the endpoints. We used one of the best practices: Do auto-discovery and then apply the agents.

At that point in time, I didn't really know KACE. It was a new box. I started discovering what would be next. The next thing that happened was another blessing from KACE which was having it do the Active Directory group policy deployment for the agents. I deployed it and that discovery was running for almost a week, but we started installing the agent within about four to five days. It was time-consuming. It took us two weeks because we ran it organization-to-organization because it would have slowed down the network. We did not want to take any risks. If we had taken the risk, it wouldn't have been an issue, as far as the KACE agent deployment is concerned. 

Now, whenever a new machine comes into our network, the KACE agent is automatically installed. Right after that, KACE is installing one of our NEC client agents automatically. Then, KACE will discover that this machine is a part of the McAfee agent, and if it is not, it will automatically install the McAfee agent. Then I configure McAfee to sync with Active Directory. 

So for us, when a new machine is joining, the desktop engineer will run only one command, GPUpdate. The machine will restart and then all the group policies, the KACE policies will be deployed. KACE will then install all of our small plugins automatically and they're good to go.

One of the best parts of KACE is when you go for a version upgrade. Once you do a version upgrade for any KACE module—any KACE virtual appliance or physical appliance—it's very user-friendly. In addition, the agent upgrade is a miracle. When you do the agent upgrade for the KACE appliance for the first time, it's "super-wow". The last upgrade I did was for almost 1,900 PCs, and all the agents were updated automatically when I upgraded the agent package. It took only 24 hours.

I am the only KACE administrator in our organization, but there are desktop engineers who log in to KACE. They review machines, but I do all the administration and configuration. They use it to take inventory or check the memory and see what replacements are required. They are read-only administrators.

We have seen a lot of return on our investment in KACE. One area is headcount. We are a military hospital. Imagine having 2,000 computers on the ground in different remote locations, yet having only seven desktop support engineers. If you do the math, there should be no way that seven desktop engineers can support 2,000 endpoints. Even the best-case scenario is one engineer working with 100 desktop machines, max. That gives you an idea of the headcount savings.

We are also saving on the licensing fee, compared to other endpoint management solutions.

KACE is very easy to use and user-friendly compared to the other endpoint management tools, like Microsoft SCCM and other third-party tools, in terms of IT administration. Compared to its competitors, it's easy to get machine inventory.

If any organization wants to manage its endpoints, having KACE, as I said, is a blessing for the IT administrators.

I would give it an eight out of 10. I am being demanding because there are some more improvements that can be made. But KACE can be a superpower in endpoint management.