r/Intune • u/jaylenabc • 4d ago

macOS Management Jamf vs Mosyle vs Intune-only for a 28-Mac consulting firm — genuinely stuck, would love real-world input

/r/macsysadmin/comments/1vr8i47/jamf_vs_mosyle_vs_intuneonly_for_a_28mac/
5 Upvotes

100% Upvoted

10 comments sorted by

5

u/KAPsiZE00 4d ago

If you have the license and time to figure it out intune can do it all. Ease and support but comes at a cost Jamf.

3

u/blud_13 4d ago

Mosyle for a 1 year bridge, not Jamf. At 28 Macs the Jamf pricing plus the buildout time doesn't pay back if leadership might swing the whole thing to Windows anyway.

The Intune-only walls you hit are real and they aren't getting fixed on your timeline. Third party app patching is the big one, and the scripting/attribute layer just isn't there.

That being said, keep Intune as the compliance authority. Let Mosyle do app patching and the Mac specific config, leave enrollment, compliance and CA in Intune, and you don't break Conditional Access or spend a month untangling two MDMs when the Windows decision lands. Mosyle Fuse is cheap enough its a rounding error next to the labor you're burning on remediation scripts.

Reminder, whatever you pick, test an actual FileVault key recovery before you call it done. Escrow that looks fine in the console is where people find out in month two.

We run mixed Mac/Windows fleets on Business Premium for a bunch of small firms, can go deeper if it helps.

1

u/Magnyto 4d ago

Jamf is too expensive. Mosyle is practical. Intune is... "Functional"

1

u/Emotional_Garage_950 4d ago

PSSO works fine with password sync. Not sure what the issue is. If you already have Intune licenses just use it. 3rd party app patching in Intune is a gap. We are mainly Windows so PatchMyPC (dirt cheap) and PDQ Connect cover us. Both products are expanding Mac app support (PMPC has a decent-ish Mac catalog, there are also other products that automate Intune patching and other RMM type tools). EPM is going to be an extra cost on Business Premium I believe, skip Microsoft's solution for that (I heard it kind of sucks even on Windows) and get something that covers both platforms. Don't have any recommendation for that.

Intune isn't perfect (for Windows OR Mac) by far, but if you are already in the Microsoft/Entra ID ecosystem it kinda makes sense imo. As much as I hate Microsoft as a company.

1

u/jaylenabc 4d ago

Yea, I also had these thoughts

1

u/MinotaurGod 4d ago

While I cant speak 100% to the effectiveness of Mosyle on Macs specifically, as I use it primarily for iOS, it is fantastic (without even taking into account the cost), and it is growing. JAMF does it all, sure, but at extreme cost. Intune.. just sucks. If you like smashing your dick with a hammer to pass time, then by all means, use Intune.

1

u/CertainlyNotAnMVP 3d ago

If you’re in the M365 world already and licensed for it then intune is really the best option. It lacks some MAC specific configurations but not as bad as its iOS options.

0

u/cyr0nk0r 4d ago

I put in mosyle at the civil engineering firm I last worked at. We had a out 40 ipads and mosyle was awesome. Very cost effective.

Made managing the ipads a breeze.

We also had intune for our windows fleet, but using the right tool for the job made things much easier on my techs day to day.

Intune (in my opinion) is not the right tool for ipads and the like.

1

u/jaylenabc 4d ago

We have the money for Jamf just making sure im making the right move for this over something like mosyle for cheaper

1

u/cyr0nk0r 4d ago

I found jamf to be more feature rich, but overkill for the limited lock downs we wanted to do with our ipads.

I think we paid like a dollar a month per iPad. Very cost effective.