Ivanti Endpoint Manager vs. Jamf Pro

You need to push O365 or some product out to your institution. If you need to build out a reboot before and after and maybe something else, [Ivanti Unified Endpoint Manager (formerly LANDESK Management Suite)] can easily do that for you. It then can also use a query to determine who needs that product in your environment and then continue using that query to watch for the machines you targeted to show up once your push succeeded. If you need to, you can use the task scheduler and schedule your software distribution for a specific not in normal business hours or on a weekend.

We run a technology lending program for students. Jamf Pro has been instrumental in allowing student staff to prepare the laptops in a systematic, consistent manner. The same can be said with iPads and deploying apps to the iPads is automated. Also, extra software titles are made available in Self Service (both for laptops and iPads). Additionally, putting policies in Self Service for IT student workers to deploy to sit-down machines to run as needed is quite useful as well. Less appropriate scenarios would be in cases where there are fewer than 10 to 20 machines. Looking at Jamf Now would probably be a better use of resources. Jamf Now is not as robust as Jamf Pro, but for smaller entities it would be a better fit and a better choice financially.

• Software distribution - the ability to sit and provide software when a machine calls home works phenomenally well. You may also target based on certain conditions, ranging from LDAP queries down to hardware revisions of individual components.
• Operating system provisioning - the range of choice in sequential execution is second to none. We migrated from MDT to Ivanti's providing with relative ease.
• Patching and compliance - you're able to get extremely granular, and the rollout project templates make rolling it a particular patch from QA to Production an automated breeze

Incentivized

• Custom Scripts mean you can accomplish almost anything you need.
• Extension Attributes gives you a way to report on anything.
• Extremely configurable. Just know that means it can be hard to find what you're looking for.
• Training and community resources are readily available.

• Mac support - While it's the best I've seen with cross platform support, that doesn't mean they don't have a long way to go to catch up with the functionality of other tools that focus on one specific platform.
• Product coherence - Their core product, the management suite, is great but with every new acquisition the company makes, it seems like there's another product that gets shoehorned into the picture. Making all those disparate pieces work smoothly together is something they're still working on.
• Documentation - They come out with a lot of great features but some are so complicated I couldn't begin to understand the various facets of it all. I realize the days of published manual are long gone but even a PDF covering the major components in detail would be better than having to bump around in the dark until you have to call support for help.
• Software Licensing Management - Every major release seems to completely rewrite this tool but they keep seeming to miss the mark. Lately it's a Microsoft Silverlight program that's very slow and has way too much data to be useful.
• Web Console - The web console is all but unusable. The only way to really work on administration is to use the 32bit console which is great if you're running Windows but a fully featured web console would be much preferred.

Incentivized

• While already in progress, the Configuration Profile editor is a little unwieldy
• User dialog messaging. While Jamf [Pro] helper is very useful, a more feature-rich utility with editor functions would be extremely welcomed to interact with the user while installing software.
• Policies: I would desperately like to see the ability to organize the order of packages and scripts within a policy without needing to use names, numbers, and 'priority'. Just let me drag items in a policy around in order.
• Policies: scripts can only be run before or after, please let me place them in between packages

As Microsoft evolves Intune, SCCM, MECM and combines their features into the MS EULA, Ivanti seems to be going the opposite where they are stripping out core products in favor of an EULA + A la cart pricing model that simply is more expensive than Microsoft's pricing. A few years ago, the gap was large enough to justify the extra cost of Ivanti, today the gap has closed significantly enough that the value add just isn't there for us.

Incentivized

We stepped away and are looking at different products that integrate with our entire fleet MDM solution rather than focusing specifically on Apple products. An all in one solution fits our needs better and is more cost-effective in the long run. Jamf Pro needs to improve some features and support but overall its a good product.

Incentivized

Items are logically laid out and most are easy to find. The more advanced stuff can be trickier, but it is still not hard to find. There are a lot of options though, so remembering where some settings are, especially if you do not alter them often, can take a minute, but you will get to them fairly qiickly.

Jamf Pro has done pretty much anything we've needed with little setup headache. If we hit a wall, the Jamf user community and tech support departments both are more than willing to help solve problems. Tech support is excellent, but the surprising thing is the user base is by far the biggest resource. Jamf users love to help each other, by directly chatting about issues, posting best practices, or just posting info on the forums.

TRM\TAM support has been generally very good. Getting reported bug fixes, design changes, UX problems resolved has been a pain. It is often difficult to get problems escalated beyond the TRM\TAM level. Support is fantastic when you can get it, getting it can often require more work than it should, and that is probably our biggest issue.

Jamf Support is very responsive and usually assists in any challenge we are tackling. They are also very transparent when they are allowed to be. I personally love our Jamf Pro support rep and don't fear messaging their support team.

They made me more comfortable using the product.

The training session was beneficial because it expanded my knowledge about Jamf products and really learn what I am capable of doing with Jamf Pro in terms of managing Apple computers and devices. Immediately after the training course, I was able to implement what I learn to our cloud instance.

Migration from an existing MDM requires device wipe and reenroll for full supervision of the device. It's somewhat painful. User enrollment makes things easier, but you miss out on full management.

Better in most all categories. On-prem was not an issue for my organization. MS SCCM was lacking features. Airwatch required increasing tiers of service in order to match [Ivanti Unified Endpoint Manager (formerly LANDESK Management Suite)] features, and lacked the robust inventory data we needed. Meraki was very simple to use, but did not meet our needs. I would say that most Airwatch customers aren't using all the features they are paying for, and could save lots of money by using Meraki instead.

Even thought we are using this solutions for different purposes (macOS device management VS mobile device management), I think at the end Jamf Pro is more focused or aimed for macOS management, and mobile device management is just a good addition to that. Same I can tell about Ivanty, is more about iOS/Android management rather than macOS

• Centralized IT - all in one solution that is better in some areas than traditional niche software applications. You'll probably still spend the same amount of time with users on the HD line, but you'll be able to reduce the amount of time it takes for auxiliary Help Desk tasks (ticketing, reporting, background deployment, etc.)
• Cost - This is a negative of course ;) But at some point you can save some money if you ditch SCCM or your other CRM

Incentivized

• Jamf Pro has allowed us to minimize the time it takes to deploy devices. We can use zero-touch deployment methodologies which allow devices to go directly to end users and allow end users to get up and running without needing IT's help.
• We have implemented both a third-party & macOS patching service, which allows us to ensure all apps and versions of macOS are updated and secure.