Microsoft

System Center Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building System Center Configuration Manager, though we can’t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the 🙂 button in the top right corner and choose “Send a Frown”. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer – our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the System Center Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Microsoft Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. VPN Split Tunnel - Possibility to use only a limited number static/fixed IPs

    Many companies are very restrictive from a security point of view. They only allow VPN split tunnel if the direct download from the Internet can be restricted to a limited number of well known and trusted static/fixed IPs.
    This is already requested for the Cloud Distribution Point: "Option to change SCCM client communication with cloud distribution point to use only one fixed IP" (https://configurationmanager.uservoice.com/forums/300492-ideas/suggestions/13636533-option-to-change-sccm-client-communication-with-cl)

    But this requirement can also be applied to OS patches or OS feature packs and Office patches that are directly downloaded from Microsoft (https://technet.microsoft.com/en-us/library/bb693717.aspx) and cannot be provided from Cloud Distribution Point…

    5 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  2. Ability to run a command or a task before and after patching using the automatic deployment tool

    Would be nice if the Automatic deployment would allow me to have a task or command run before and after patching takes place. there are some applications like McAfee encryption where I need to run a command to have the PC temporarily turn off a process so that it can patch or restart properly.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  3. Stick WU server in registry during client upgrade

    During an automatic CM client upgrade there is a risk the update agent gets out to internet and download updates and upgrades from Microsoft Update servers before the new client agent is installed. During a CM client upgrade the local GPO/WU server registry settings should be sticky to block this behavior.

    7 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  4. Ability to test settings for deployment notifications

    It would be very helpful to be able to test the configuration for end-user notifications when putting together a software update package or other application deployment. Since there are several configuration settings which can affect what the end-user will see, it would be great if we could visually demo/test the current configuration so we know what the end-user will actually see.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  5. Replace the "Number of Exired Updates" column

    With SCCM CB expired updates are automatically removed from SUGs. This means that the column "Number of Expired Updates" in the Software Updates Group view is redundant, the number will always be zero. I would like to see it replaced by a "Number of Superseded Updates" column instead.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  6. Include Branch status (CB/CBB/LTSB) in Winver for Windows 10

    Include Branch details whether machine is in CB, CBB or LTSB in Winver for WIndows 10.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  7. Software Update Groups - Speed up 'Edit membership'

    'Edit membership' is unuseable if you've got many update groups. Please add simple tools like 'Add update(s) to existing group(s)', 'Remove update(s) from group(s)' and 'Remove Update(s) from this group' (if you're in context of an update group).
    The sub dialogues of this aditional functions shouldn't provide the information in which update group the patches are listed because the query runs too long. Just let us choose the groups form a simple search list. A filter to minimize the list of results would also be fine.

    10 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  8. ADR engine improvements

    - when naming ADR, it would be good to have an option to create a name convention when creating the update group. not just <ADRName>+DateTime, but could use some variables like %MM% %YYYY%, etc.

    - it would be good to have some exclusions options on the search, like exclude when text does not contain, maybe restrict by platform, etc. like the filter we can create on the console but adding options for a more complex with and's and or's

    - multiple collection/template based on time as well as ability to exclude updates based on update group. scenario is when you…

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  9. Update Servicing Message Windows 10 Feature Update 1607

    "When you install a new operating system, all the existing data on your computer will be removed." This message confuses the user.

    15 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  10. Control Windows 10 driver auto-update

    With Windows 10, the system's drivers are updated directly from Windows Update. This is usually a good thing because it means the system will have the latest WHQL drivers installed. It also means the system administrator needs to maintain less driver packs for individual models (at least for corporate / enterprise computer models).

    However, it sometimes happen that an updated driver will have a MSI co-installer that will run outside the scope of the SCCM client and might run concurrently with an application or package installation step from a task sequence. It will cause the installation to fail and maybe…

    24 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  11. Software update deployment flexibility

    Currently, there are two options that can be configured in CM to control when update actions occur on CM client devices. One allows us to set a date/time for when updates are available. The other sets a deadline date/time when updates are to be installed and a reboot process is initiated. My recommendation is to divide these two update scheduling options into three options.

    1. When updates are available (date/time)
    2. When updates must be installed by (date/time)
    3. When a reboot must occur by (following the installation of updates)

    The option for when a reboot occurs should allow for…

    2 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  12. "select all"

    With 1606 we can multi-select updates thankfully however on newly imaged machines there may be 80 or more updates to select.
    It would be really nice to have the ability to Select All security updates with one click.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    4 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  13. Automate OS Images by integrating the latest Software Updates from the Configuration Manager Console

    Rather than manually updating Build & Captured images every month and selecting when it's applied. set up an automated rule that applies Windows updates on a scheduled basis to a windows image that, then updates the distribution point(s) automatically.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  14. Allow Maintenance Windows To Work correctly with include rules

    When you add an include rule to a collection that has a maintenace window the machines that were "included" never get the maintenace window for that collection.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  15. Allow users to see all ADR properties

    It would be nice to be able to see and change all properties of an ADR after it is created, such as deadline times, availability times, etc.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  16. Add "Product Family" to the search feature of Software Updates and ADR

    Currently, the "Product" can be used as a search filter for Software Updates node and for ADRs, but I would like to see "Product Family" as well.

    This would help in situations where you want all updates targeting the Windows OS products, but you don't want to specify 10 individual products in a search.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  17. clean software update groups

    Integrate the Clean Software Update Groups add-on into SCCM console.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  18. ConfigMgr Automatic Deployment Rule wizard should give an option to admininstrators to select an existing SUG

    ConfigMgr Automatic Deployment Rule wizard should give an option to admininstrators to select an Software Update group when they select Existing Software Update Group

    5 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  19. Console Typo - Windows Update for business Profiles

    In both the CM CB 1606UR1 and the CM TP 1609 admin consoles, the Windows Update for Business Profiles node needs the "B" in Business capitalized.

    0 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  20. Software update exclutions

    Make it easier to exclude updates to collections like in WSUS.

    We have a multi tenant solution where we have about 150 different customers in the same ConfigMgr solution.

    When we have to exclude an update for any of these customers we cannot deploy the update to the top level collection but would have to deploy to all the lower level collections instead.

    Please add a collection property where we can exclude updates for one particular collection or make a list like there is in WSUS where you can uncheck one or more groups.

    5 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base