LANDesk gave us virtually everything we wanted in a client management product – and more. Plus, the LANDesk Management Suite's support for diverse platforms was superb.

Its asset inventory scans were quick, accurate and unobtrusive. In addition to finding standard desktops, these scans detected VMware-based virtual machines on the network, but otherwise Management Suite did not offer any support for virtual clients or servers, which is becoming a growing concern in most enterprise networks. The remote control feature gave us seamless, transparent access to any desktop machine in the organization. LANDesk Management Suite successfully delivered and configured application software packages (either initial installs or patch updates) to Windows, Linux and Macintosh clients. Operating system upgrades, service pack installations and security patch deployments were a breeze, with wizards guiding us unerringly along the way. Backing out service packs and security patches was similarly easy. It correctly and easily monitored our software licenses.

In terms of security measures, LANDesk Management Suite monitored, updated and configured LANDesk's own antimalware component, but, unfortunately, LANDesk doesn't support the monitoring and configuring of third-party antimalware tools. The LANDesk antimalware tool thwarted 90% of the miscreants we threw at it, but most enterprises already have antimalware tools they rely on. LANDesk's security score reflects our belief that it should work with these other tools, too.

LANDesk Management Suite also includes a feature called DHCP Network Access Control (NAC), which integrated closely with Cisco devices' NAC implementations on our network. Management Suite correctly identified and quarantined the desktop PCs whose OS patches we'd deliberately made out-of-date. LANDesk's Host Intrusion Prevention System did an adequate but not perfect job of alerting us to the external threats.

LANDesk Management Suite efficiently and accurately discovered our network and deployed agents to our Windows NT/XP/2000/2003/Vista clients via an easy-to-use wizard-guided console push operation. For Windows 95 and 98, we used login script entries, while for other clients (Mac OS X, Linux), we directed local network administrators to visit each client to run the agent install tool. Impressively, LANDesk's agent watcher restarted the agents on the clients when, for example, "power users" attempted to end the agent processes on a client machine.