Looking at different unified endpoint management solutions and am torn between Microsoft Intune, VMWare Workspace ONE, ManageEngine, and Ivanti. For those of you with hands-on experience, which tool delivers the best value in terms of features, ease of management, and reliability? I’d really appreciate any recommendations, pros and cons, or real-world experiences that could help me decide.

We are currently migrating from ManageEngine and Workspace ONE for iOS to Intune. With our heavily Windows-based environment and G3 licensing, it made the most sense. One of the biggest challenges was limiting scope—avoiding the temptation to make sweeping changes to ITSM and other business processes at the same time.

Once we started, we quickly realized just how much there was to learn in the world of endpoint management. In many ways, shifting legacy mindsets around technology has been more challenging than the migration itself. This process also gave us an opportunity to reflect on where it's appropriate to maintain in-house expertise for Intune.

One of the key realizations was that while traditional tech support and help desk teams use endpoint management tools daily, they may not have the advanced skills needed to lead a major transition—especially as many of the most technically adept staff naturally gravitate toward cybersecurity, DevOps, or other specialized fields. Rather than pulling engineers from other parts of the business, we chose to partner with a Microsoft partner VAR to train and upskill our internal team as we are implementing Intune, to ensure our long-term self-sufficiency.

Hey Joe, I can only speak from a Microsoft InTune perspective. If you're already part of the M365 ecosystem I would highly recommend going with Intune (no extra cost if you have an E3/E5 license). The other contenders can certainly integrate with 365 but Intune is going to offer the most seamless experience. Are the majority of your devices Windows based?

We lean heavily on Windows, but also utilize various iOS devices across the firm. Device enrollment has been fairly painless, and there's great amount of control over configuration, compliance, conditional access capabilities, etc.

A great feature that sticks out for me has been InTunes BYOD capabilities. If/when a corporate device is misplaced, we can use MAM to secure apps and data contained on a personal device without forcing a full enrollment. This has worked out really well for us, especially when a user is travelling and all they have is their personal mobile. This offers a sense of privacy, while also maintaining security.