- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
OpenText ZENworks
Your PCs are imaged by one tool, patched by another and encrypted by a third. One console could run all three — OpenText ZENworks runs provisioning, software delivery, patching, Windows disk encryption and licence audit from one console — on servers you host in your own data centre, or as a Windows-only SaaS edition in OpenText’s cloud.
Buy through TechBag
Same software. Better outcome — at a lower cost.
How it’s rated
Full scoreboard ↓Quick answer
The OpenText platform family
This page covers OpenText ZENworks — ZENworks Suite and its seven products, plus the OpenText Endpoint Management SaaS edition. The rest:
Quick facts
30-second orientation- Product
- Unified endpoint management and protection suite, run on your own servers
- Maker
- OpenText (Waterloo, Canada; NASDAQ/TSX: OTEX); CEO Ayman Antoun since April 2026
- Lineage
- Novell ZENworks, then Micro Focus until OpenText bought it in January 2023; name kept
- Suite
- Configuration, Asset, Patch, Endpoint Security, Full Disk Encryption, Service Desk, Hybrid Workspaces
- Platforms
- Windows, Mac, Linux, iOS and Android; encryption and security policy are Windows-only
- Servers
- Primary Servers on the SUSE-based ZENworks Appliance or SLES; Windows servers dropped after 23.4
- SaaS edition
- OpenText Endpoint Management: Windows laptops, desktops and servers, in OpenText’s cloud
- Price
- Quote-only; patch content needs its own subscription after the first 60 days
- Analysts
- Leader in two IDC MarketScapes, April 2024: UEM for SMBs, and client management for Windows
- In India via
- TechBag — module scoping, server sizing, a quote in INR with GST
Understand unified endpoint management before you buy it
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
What is unified endpoint management?
One console that enrols, configures, patches and secures every PC, Mac, Linux machine and phone, instead of one tool per job.
A separate tool for every endpoint job vs OpenText ZENworks — the honest table
What consolidation actually replaces, dimension by dimension.
| Dimension | A separate tool for every endpoint job | OpenText ZENworks |
|---|---|---|
| Tools to run | Imaging, patch, encryption and MDM apart | One Control Center for all seven modules |
| Patch evidence | A spreadsheet of failed installs | Compliance reports and open CVEs by device |
| Lost laptop | Hope the disk was not readable | Full-disk encryption with pre-boot sign-in |
| USB drives | A policy document nobody follows | Storage-device rules enforced on the PC |
| Licence audit | A week of counting installs | Usage reconciled against what was bought |
| What it is NOT | — | A kiosk specialist or a published price list |
The cheapest test is a pilot zone: enrol fifty mixed devices, patch them against the CVE view, and encrypt five Windows laptops.
The five pieces of the platform
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Primary Server
Runs as the SUSE Linux-based ZENworks Appliance on a hypervisor, or installed on SLES. Windows Primary Servers ended with 23.4 in November 2023; 24.2 onward needs Linux.
Database
An embedded PostgreSQL database, or your own Microsoft SQL Server or Oracle. Every device record, patch status and audit trail sits in a database you operate.
Agent
PCs run the ZENworks Agent over internet-friendly protocols, so remote staff need no VPN; phones and tablets enrol through Apple, Android Enterprise or ActiveSync.
Console
One web console holds bundles, patch policies, security and encryption policies, inventory and reports for every device class, so the whole suite is run from one place.
Primary Servers you host on a SUSE appliance — one agent and one console for patch, encryption, security and assets.
Nine capabilities. Manage, patch, protect.
OpenText ZENworks manages, patches and protects every PC, Mac, Linux machine and phone from one console you host.
Software out in bulk
Bundles push and track software across PCs, with Apple VPP and Android Enterprise app distribution for phones and tablets.
New devices, ready fast
Apple DEP, Android Enterprise and Windows Autopilot enrol devices; MDT, AutoYaST and KickStart handle OS imaging.
Help without a site visit
Control, view, chat, file transfer and remote execution work inside or outside the network, and sessions can be recorded.
Licences you can prove
Inventory, software usage and licence reconciliation are set against purchase records and contracts to catch overspend.
OS and third-party patches
Policies decide which OS and application patches land where and when, and compliance reports show what is still missing.
See which CVEs are open
Missing patches are mapped to the CVEs they fix, so a team can find exposed devices and remediate them in one action.
Policy that knows location
Firewall, Wi-Fi, VPN enforcement and folder encryption policies on Windows change with the user’s role and network location.
USB and malware locked down
Storage-device rules decide which USB drives work, and built-in antimalware scans files copied to or opened on the PC.
Lost laptop, unreadable disk
Whole-disk encryption with pre-boot authentication for Windows 10 and 11, managed centrally from the same web console.
Watch OpenText ZENworks in action
What recent ZENworks releases added, first-time mobile device management set-up, the reworked Patch Management module and the built-in antimalware. All from OpenText’s official channels, recorded in 2022–23 when the line was sold as Micro Focus ZENworks.
ZENworks - What's Your Version?
A tour of what the recent ZENworks releases added, from the year OpenText took over the line.
Setting Up MDM Within ZENworks for the First Time
Step-by-step first set-up of mobile device management inside the same ZENworks zone as the PCs.
Next Generation ZENworks Patch Management Video 1 - Introduction
An introduction to the reworked Patch Management module and how patch policies are now built.
ZENworks Endpoint Security Antimalware Feature Overview
The antimalware engine built into Endpoint Security Management, shown from policy to scan.
Want a live, India-context walkthrough for your environment?
Book a guided demo →Imaging, patching, encryption and licence audit rarely share a console. ZENworks runs all of them from one, on servers you own.
Here’s what genuinely sets it apart — and exactly where it stops.
One console from imaging to licence audit
ZENworks covers the whole life of a device: Autopilot, DEP or an OS image to provision it, bundles to load software, patch policies to keep it current, remote control to fix it, and Asset Management to reconcile its licences. The Suite adds Service Desk, so a user’s software request can be approved and delivered automatically.
Protection modules that most MDMs leave out
Endpoint Security Management sets Windows firewall, Wi-Fi, VPN and USB rules that change with where the user is, and adds antimalware. Full Disk Encryption locks Windows 10 and 11 disks behind pre-boot authentication. Both are managed from the same console as patching, not bought from another vendor.
Your servers, your database, your country
The full suite runs on Primary Servers you host, on the SUSE-based ZENworks Appliance or SLES, with PostgreSQL, SQL Server or Oracle behind it. Inventory, patch history and encryption keys never leave your estate. Teams that want no servers can take the Windows-only SaaS edition instead.
Where it stops
No public price. Encryption and endpoint security are Windows-only, and so is the SaaS edition, which names no India region. Patch content is a separate subscription after 60 days. Windows Primary Servers are gone, so you need Linux skills. Kiosk lockdown and rugged-device depth are not what the line is known for.
The numbers behind the platform
What your OpenText ZENworks rollout looks like
Count devices and pick modules
List PCs, Macs, Linux machines and phones, then decide which of the seven modules you need, or whether the Suite is cheaper.
Choose on-prem or SaaS
Windows-only and serverless points to Endpoint Management; anything else means sizing Primary Servers and a database.
Stand up the appliance
Deploy the ZENworks Appliance in your Indian data centre, connect the database and directory, and enrol a pilot group.
Patch and encrypt the pilot
Run patch policies against the CVE view, encrypt a few Windows laptops with pre-boot sign-in, and test a recovery.
Roll out and reconcile
Widen enrolment in waves, turn on USB and location rules, and run the first licence reconciliation before renewal.
The review scoreboard
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
Quick poll — what’s driving your evaluation?
Talk to an advisor“We image labs with AutoYaST and Windows PCs with Autopilot, then the same bundles follow. One console replaced three scripts.”
“The CVE view changed our patch meetings. We now ask which machines still carry a named CVE, not how many patches failed.”
“Location-aware policy is the feature we use most: laptops drop to a strict firewall the moment they join café Wi-Fi.”
“Moving our Windows Primary Servers to the appliance took longer than planned. Budget Linux training before you upgrade.”
“Asset Management found 300 unused design-suite licences in the first reconciliation. That paid for the renewal.”
“Strong on PCs, thinner on Android kiosks. We kept a separate MDM for scanners on the shop floor.”
Where everyone sits — the grids
Analyst firms bury this view behind paywalls, and G2 retired its Grid. So here’s TechBag’s synthesis of the unified endpoint management market — tap any vendor to see why it sits where it does.
TechBag UEM & MDM Grid
Execution strength vs product vision — the classic market map, minus the paywall.
Mature suite; IDC Leader twice in 2024; quote-only.
Deployment Choice × Protection Depth
The grid nobody publishes — where the product can run and keep its data, India included, vs how far it goes beyond MDM into patching, encryption and device control.
Self-hosted suite or Windows SaaS; FDE, AV, USB control, CVE patching.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
OpenText ZENworks vs the UEM field
Against Microsoft Intune, ManageEngine Endpoint Central, Hexnode UEM, Scalefusion UEM and 42Gears SureMDM — on deployment, platforms, patching, security, price, minimums and India.
| Dimension | OpenText ZENworks | Microsoft Intune | ManageEngine Endpoint Central | Hexnode UEM | Scalefusion UEM | 42Gears SureMDM |
|---|---|---|---|---|---|---|
| What it is | Self-hosted UEM suite | Microsoft’s cloud UEM | UEM plus patch | Six-platform UEM | UEM with an agent trio | Rugged-fleet UEM |
| Deployment | On-prem; Windows SaaS | Cloud only | On-prem or cloud | Cloud console | Cloud, India-hosted | Cloud or on-premise |
| Platforms | Win, Mac, Linux, mobile | Five platforms | PCs, servers, mobile | No Linux | Six, Linux included | Nine families |
| Enrolment and imaging | Autopilot, DEP, imaging | Autopilot native | Imaging; Autopilot thin | ADE, AE, Knox | Zero-touch, ADE, Knox | ZTP, Knox, ADE |
| Patching | OS + third-party, CVEs | Third-party is add-on | 850+ third-party apps | Win + Mac, by CVE | Third-party on Windows | Windows-led patching |
| Security and encryption | FDE + firewall + AV | EPM is an add-on | Device control, ASR | Encryption policies | Veltar on the agent | Policy and compliance |
| Remote help and kiosk | Recordable remote help | Remote Help is add-on | Remote control built in | Four kiosk modes | Kiosk, self-recovery | Remote screen, SureLock |
| Pricing model | Quote, per module | Per user, often bundled | Per 50 endpoints, yearly | Per device, monthly | Per device, annual | Per device |
| Published entry price | Not published | $8/user/month | Free to 25; $795/yr | $2.20/device/month | ~$2/device/month | $3.99/device/month |
| Included vs add-on | Patch feed after 60 days | Plan 2 and Suite extra | Editions gate features | Tiers gate depth | Trio costs extra | Sure apps included |
| Minimums and scale | No minimum published | Per user, no floor | 50-endpoint packs | 15-device minimum | 10-device minimum | No minimum; 7M devices |
| India data location | Your own servers | Local India geography | Chennai, Mumbai, on-prem | US, EU, UAE only | India-hosted | India region or on-prem |
| Lock-in and exit | Your DB, their agent | Tied to Entra | Agent swap to leave | Re-enrol to leave | Trio deepens the tie | Sure apps stay behind |
| Best fit | Self-hosted, Windows-led | Microsoft 365 shops | Patch-first, any budget | Mixed fleets with kiosks | Frontline, India-hosted | Rugged and IoT fleets |
Which approach fits you?
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Choose OpenText ZENworks if…
- ✓You want imaging, software delivery, patching, disk encryption, USB control and licence audit from one self-hosted console
- ✓Your endpoint data must stay on servers you run, in your own Indian data centre, with your own database behind them
- ✓Your fleet is mostly Windows PCs, with Macs, Linux machines and company phones that need the same policies
Compare alternatives if…
- ✓You already pay for Microsoft 365 E3, E5 or Business Premium — Intune may cost you nothing extra
- ✓You need per-device prices on paper before talking to sales — Endpoint Central, Hexnode, Scalefusion and 42Gears list theirs
- ✓Your fleet is Android scanners, kiosks and signage — Scalefusion, Hexnode and 42Gears go deeper on frontline devices
Do not expect…
- ✓A published price, or patch content beyond 60 days without a subscription
- ✓Disk encryption or endpoint security for Macs, Linux or phones; both are Windows-only
- ✓An India region for the SaaS edition, or a Windows server to host the on-prem suite
OpenText ZENworks is one of 28 uem & mdm products TechBag carries. The UEM & MDM guide narrows them to a shortlist and shows the reasoning. →
What does running five endpoint tools cost you?
Drag the sliders (managed endpoints; IT admin-hour cost). Estimates model admin time spent imaging, chasing missing patches, handling USB and encryption exceptions and counting licences, at an assumed 1.5 hours per endpoint a year, with 70% of it removed by one console with patch, security and asset policies. Both figures are assumptions. Illustrative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models your actual environment and modules.
Three ways to consume it
Quote-only. OpenText prints no price for ZENworks or for the OpenText Endpoint Management SaaS edition. Each of the seven products can be licensed alone, or together as ZENworks Suite, which OpenText says costs less than buying them separately. The Suite includes 60 days of patch content; after that Patch Management needs its own subscription, and the full ITIL Service Desk is a further add-on. TechBag maps your fleet to modules first, then quotes in INR with GST.
ZENworks Suite (on-prem)
Best for mixed fleets that must stay on your own servers
- Seven products under one quote
- 60 days of patch content included
- Quoted; no public price
+ Platform add-ons
Best for a broader rollout
- Scoped to your estate
- Add-on modules as needed
- Phased, right-sized deployment
OpenText Endpoint Management (SaaS)
Best for Windows-only fleets that want no servers
- Subscription in OpenText’s public cloud
- Windows laptops, desktops and servers
- Quoted; no India region named
Buy it for less — TechBag pricing beats list
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Get an India-ready quote
Tell us your requirements and current tools — we’ll model it against what you spend today.
The 8 questions to ask every vendor
Take this into your next vendor call — including ours.
How many devices are Windows, Mac, Linux, iOS and Android? Encryption and security policy cover Windows only.
Which of the seven products do you need, and does the Suite bundle cost less than those modules bought alone?
On-prem appliance in your Indian data centre, or the Windows-only SaaS edition, which names no India region?
Does your team run SUSE Linux? Primary Servers no longer run on Windows Server from release 24.2 onward.
Embedded PostgreSQL, or your existing Microsoft SQL Server or Oracle, and who will back it up and patch it?
Is the patch subscription in the quote? The Suite includes only the first 60 days of patch content.
Do you run Android kiosks or rugged scanners? Test them in the pilot, or plan a specialist MDM beside it.
Does the quote itemise modules, device counts, term and support level? Ask for INR with GST on every line.
Questions buyers ask
Ready to evaluate OpenText ZENworks?
Map your fleet to the modules you actually need first, or let a TechBag advisor size the appliance and database and quote the Suite in INR with GST.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.