We're a global organization with over 1400 domain-joined computers and 200 servers, and we've finally outgrown WSUS. Its limitations with remote endpoints and third-party patching are becoming a hassle. We're searching for a comprehensive solution that simplifies managing all Windows updates for our desktops, laptops, and servers.
Specifically, we're interested in:
1. **Product Recommendations:** What are the top products you've used for managing updates on such a large scale for both Windows systems and servers?
2. **Microsoft Solutions (Intune/MEM):** What's the best way to implement Intune in a fully domain-joined environment? Should we consider co-management with SCCM? Can we manage all updates through Hybrid Azure AD Join and Intune alone? Also, what's the cost involved for managing updates?
3. **Deployment for a Global Workforce:** How do these solutions handle remote workforces? Do they use cloud-based agents, or do they require VPN connections? Is there a P2P distribution method to save bandwidth?
4. **Cost and Licensing:** What are the typical cost models? Are there per-device fees, or is it a flat rate for multiple endpoints?
We're aiming for a solution that streamlines management, enhances compliance, and effectively patches remote devices without relying on VPNs. Any insights or shared experiences would be really appreciated!
4 Answers
For deployment, PDQ Connect could be a decent option. It's agent-based and doesn't rely on a VPN to function, which is great for remote work setups.
I've been using NinjaOne for about 1600 endpoints and it's really effective. You might run into some issues sometimes, but their support is responsive and addresses problems regularly. The NinjaRemote feature is super useful too. Give it a try—they offer a free evaluation period!
If you're on M365 E3 or higher, definitely go for Autopatch in Intune. It's fully automated and free, making it a better choice than even paid options like Ivanti. You could also add Patch My PC for handling third-party apps easily.
Absolutely! Autopatch is the way to go, especially for automated updating.
I recommend checking out Action1 for patch management. It's been working well for us and is quite user-friendly.
Totally agree! An RMM tool like Ninja makes a huge difference. The decentralized support aspect is a game changer.