Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we canā€™t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the šŸ™‚ button in the top right corner and choose ā€œSend a Frownā€. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer ā€“ our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Console Typo - Windows Update for business Profiles

    In both the CM CB 1606UR1 and the CM TP 1609 admin consoles, the Windows Update for Business Profiles node needs the "B" in Business capitalized.

    0 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  2. Software Updates - Need an Option to Control the Auto deployment of Revised updates

    WSUS has an inbuilt option to control the approval /Auto Approval of revised updates.
    However ConfigMgr is missing this feature. This is causing the revised updates to get auto installed on the clients if the deployment is active.
    The latest example for this issue was KB3172605. This was revised by MS and caused auto install with reboot on clients

    95 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  1 comment  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  3. Control Windows 10 driver auto-update

    With Windows 10, the system's drivers are updated directly from Windows Update. This is usually a good thing because it means the system will have the latest WHQL drivers installed. It also means the system administrator needs to maintain less driver packs for individual models (at least for corporate / enterprise computer models).

    However, it sometimes happen that an updated driver will have a MSI co-installer that will run outside the scope of the SCCM client and might run concurrently with an application or package installation step from a task sequence. It will cause the installation to fail and maybeā€¦

    24 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  4. ADR Available Deployments

    I would like to see ADR's support the creation of Available deployments in addition to Required deployments. We have some business cases where a certain subset of servers are aren't allowed to "push" software updates to until the server/app owners have verified the patches.

    The issue is that these servers don't have connectivity to the internet so we have to deliver them via ConfigMgr. By creating an Available update using an ADR, it streamlines our ability to "deliver" the updates to all systems, and allow the Patching Team, or App/Server owner to patch according to their own business schedules.

    264 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    26 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  5. ADR-Search criteria (Software Updates)

    when creating/editing ADR, the list of software updates (products, languages, etc) should list only the information that has been selected on the sup information.

    ie. it should not list all products or languages if you only have selected english and windows 10.

    9 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  6. Add support for Drivers Update Classification (as we had in CM 2007)

    to update Surface Hardware with latest Firmware and Drivers we need Drivers category in configmgr 2012 and later as we had it in CM 2007.

    That would be much easier than deploying an msi file.

    60 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    4 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  7. ConfigMgr Automatic Deployment Rule wizard should give an option to admininstrators to select an existing SUG

    ConfigMgr Automatic Deployment Rule wizard should give an option to admininstrators to select an Software Update group when they select Existing Software Update Group

    5 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  8. Software update exclutions

    Make it easier to exclude updates to collections like in WSUS.

    We have a multi tenant solution where we have about 150 different customers in the same ConfigMgr solution.

    When we have to exclude an update for any of these customers we cannot deploy the update to the top level collection but would have to deploy to all the lower level collections instead.

    Please add a collection property where we can exclude updates for one particular collection or make a list like there is in WSUS where you can uncheck one or more groups.

    5 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  9. SCCM Software updates - Be able to create Server dependencies for Software Updates

    This idea is about having the possibility to create an (optional) dependancy between specified servers, so that a server will not be updated until the server it depends on is already considered fully up to date.
    This would be extremely effective -for instance- for Applications that require the Database Server to be up and running before the Application Server. Especially in large environments these are challenges that SCCM currently doesn't provide any solution for bar scheduling Application Servers in a seperate, later window (which is not ideal for multiple reasons).

    2 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  10. Randomize Maintenance Window Start Time

    Currently, randomization only applies to deadlines and does not take maintenance windows into account. If you have a heavily virtualized environment with shared storage and want to use maintenance windows there is no good way to prevent a resource storm at the start of the maintenance windows. The only way is to break up the devices into several collections with staggered maintenance windows. This is cumbersome to maintain at a level that would provide the desired granularity.

    Ideally there would be an option to randomize the maintenance window start time. Bonus points to making that randomization configurable.

    45 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    2 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  11. Device Variable for Windows patching to exclude patches device level

    similar to Task Sequence Variable, which can be set to collection level or device level, if patch exclusion is possible using variable, it will help to avoid exclude patch from group / creating new deployment for machine.

    Most of our customers will directly exclude the complete patch cycle if an issue is identified in a specific patch from that month

    as currently OS level patch exclusion is not possible, hence it will be best to have exclusion created in SCCM Device / Collection level.

    4 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  12. deploy to operating system image

    When I do my monthly patch Tuesday deployments; it would be great if in addition to targeting a device collection you could also target one or more operating system images.

    This would allow me to deploy all corporately approved updates not only to our systems but the images that we use to build future systems with.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  13. Software Update Group-Compliance Details

    It will be good to have a "COMPLIANCE" tab to check the compliance percentage for any SUG deployed to multiple collections. As of now, if we need to check for the compliance percent for any SUG. We cannot check it under the "Deployment" node and instead have to go to the particular collection's Deployments node to check the compliance percentage.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  14. We are a large company that does not target software updates to "All Systems" but to smaller collections based upon operating company and Op

    We are a large company that does not target software updates to "All Systems" but to smaller collections based upon operating company and Operating system. As such, when trying to deploy a task sequence we cannot get any updates to deploy because the computer is not yet part of a targeted collection. I would like to see 2 changes to address this:
    1. Be able to target software update groups/updates in task sequence.

    2. Add the ability to put computer into specific collections as part of the task sequence.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  15. Add the ability to disable a deployment on a per computer basis

    In the computer properties we can see all deployments to a system. It would be helpful to have enable/disable options at this level.

    Use case: a new SUG is deployed to an all servers collection each month. For some reason, a subset of the targeted systems need to be removed for the current month's deployment, but removal from the collection as a whole is not desired due to all other 'good' deployments to that collection. If that one deployment to that server or set of servers can be toggled to disabled, the deployment as a whole can continue except forā€¦

    8 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  16. Uninstall feature in Software Updates

    If we would be having an option to automate any of the issue patch would be grateful, which is time consuming and manual effort involved to create it as a package in SCCM.
    Which is a pain in general to uninstall(Back-out) it from the estate when an issue patch has been rolled out.

    7 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  17. Re-downloading an existing update should re-download if it's marked Downloaded but the actual content is missing in the Package Source.

    If the update has been marked as downloaded but the source folder is missing it will not download the file. It would be nice if it verified the source folder.

    2 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  18. Allow Periods in Software Update Group Names

    When creating a Software Update Group, you cannot currently use periods in the name. For example, if you tried to create a Software Update Group named "Special Handling - .NET Framework 4.6.1" it would fail as periods are not allowed.

    For bonus points, find any other disallowed characters and make the reason they are blocked go away.

    Thanks for the help!

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  19. Office 365 ProPlus Build Rollback

    Love the integration with Office 365. Can we add the ability to rollback to a previous build and disable the automatic update? The use case here is, if a build is tested and deployed because no issues were detected and if an issue is discovered, there is no easy way to rollback to the previous build. Having such ability would empower administrators to quickly react.

    53 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    3 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  20. Add MSP as an Application type/detect presence of application type

    I would love to be able to push MSP's as an "application" but it only detects MSI's when going through the setup. It would be awesome to be able to use MSP's in the same manner as MSI's in the UI (detect presence of the MSP, etc.).

    24 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    3 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base