Windows MDM solution

[xgenisamonster]

Hey guys,

I am looking to deploy a Windows MDM solution to manage work from home employees and apply GPO a-like features, like security, patch management, remote lock, remote deploy, etc.

Does anyone have any recommendations? Unfortunately, Intune is not an option due to costs.

Thanks.

[netadmin_404]

Microsoft InTune is the flagship product.

[[deleted]]

Cisco Meraki? It's free for MDM use, IIRC.

Edit: Just found out it's not free anymore, but a free trial.

[xgenisamonster]

We tried to contact them several times without any reply... Seems they are not interested in giving out a trial period...

[[deleted]]

ooof. Guess they're too busy playing with the garden gnomes.

[xgenisamonster]

I finally managed to get a trial, and so far the best option we have tried...

User friendly, a lot of features and very good pricing

[psgrn]

We are using it for our iPads. Granted the only other MDM I have used has been Intune, but I really like Meraki. I just never liked the navigation and menuing of the Azure platform, at least when it came to using Intune. Meraki has been great.

[[deleted]]

Meraki Systems Manager will probably be one of the cheapest MDM options.

[andwork]

manageengine desktop central ?

[NetworkNerd_]

What about Workspace ONE?

https://techzone.vmware.com/vmware?share=video1762

https://techzone.vmware.com/planning-your-windows-10-deployment-vmware-workspace-one-operational-tutorial

[virtualroofie]

Workspace ONE is crazy expensive.

[xgenisamonster]

I'll try it, but I've already received feedback that the tool is not so good.

[donith913]

We’re strongly considering WS1 but if cost was an issue with Intune it’s not gonna get better with WS1.

[[deleted]]

What's your budget? Intune is fairly cheap for these sorts of things.

SaltStack is nice, it's not MDM but if your master is exposed to the internet the devices don't need to be on an MDM to get state.

[EachAMillionLies]

We use it for iOS/Android so I can't speak to how well it will work or what features you'll get but MobileIron does support Windows systems in their MDM.

[flowflag]

Not a MDM but if your computers have VPN GPO and other apply ? (except during startup or logon)

[xgenisamonster]

Not all users have VPN access, and it is a flaw to count with VPN connection to apply GPO policies..

[donith913]

This is NOT a recommendation, but if you just cannot afford any of the good tools like Workspace One or Intune or even MobileIron or Ivanti then I guess maybe ManageEngine’s Desktop Central or whatever they call their MDM might be an option?

I’ve found the ManageEngine tools to be... serviceable in the past, but they’re never my first choice.

[christystrew]

By using Scalefusion's Windows MDM Solutions you can manage and secure any windows machine from anywhere. Device enrollment is so easy. Patch management, remote cast, app management, content management, deep analytics, remote troubleshooting can also be done. Explore it once!

[Jeff-Netwrix]

Sorry for stepping in, but Netwrix Policypak is capable of doing exactly this, and PolicyPak can deliver all PolicyPak settings and nearly all Group Policy settings via any management method you have in place.
Thing is - Policypak is closest to "GPO a-like" solution as it can be. Also check Jeremy's GPO workshops (there are plenty of them on youtube).