Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we canā€™t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the šŸ™‚ button in the top right corner and choose ā€œSend a Frownā€. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer ā€“ our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Software Updates Required View Status

    Software Updates Required View Status

    Can we get an option to view status like in deployment status to view machines that are required and installed? We have no idea what does machines are.

    Thanks.

    14 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    3 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  2. Fix extremely prolonged software updates synchronization time with Surface category enabled

    When the Surface driver category is enabled at the Software Update Point role, currently here a software updates synchronization cycle takes around 100 minutes. When disabling the Surface category, even with 3rd party drivers and -updates enabled, the sync time including Microsoft product updates is only 10 minutes.
    We expect that the Surface sync works differential, same as it does for any other updates. So it does not make sense why it runs so unnecessarily long, even if one runs 2 syncs in a row where surely no changes happened at Surface drivers.

    14 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  3. Prevent A SUP Package from Overwriting a SUP Directory tree

    At 3 customer sites, someone has mistakenly entered in an incorrect path for a SUP package and overwritten the package source for other packages. For example, it's common practice to use \server\share&lt;year>&lt;month> for package source. If I Package A uses \server\share&lt;year>&lt;month>, and then a Package B is created and uses \server\share&lt;year> as the package source, the <month> folder is overwritten and Package Source A has been corrupted. Might it be possible to prompt for "Are you SURE - this will overwrite the source for these packages:..." in such a scenario?

    14 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  4. Content Size (KB) Column in SCCM Console

    In SCCM console, Software Library --> Software Updates, I have never seen the 'Content Size (KB) column' ever populated with the size of an update, why is this? Would it be possible for this information be passed through? Individual patches have developed into becoming cumulative updates, rollups etc and are considerably larger in size e.g. over 1 Gb each. In some instances they fail to install on low spec servers because they are marked with what seems to be the standard 'Maximum Run Time' of 10 Min. Knowing the update size and the MTU set within the view of theā€¦

    14 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  5. Add installation progress to the Feature Updates

    The lack of an "Installation Progress" indicator for most updates isn't an issue. But given the Feature Updates can take quite a while, it would be nice to have that progress percentage (perhaps just the "Mapped Global progress" form the setupact.log) displayed in Software Center.

    14 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  6. Show The Chain of Expired/Superseded Updates in the Console

    When I search for a KB in the SCCM Console, there should be a tab, likely at the bottom pane of the console (e.g. a part of Summary, Deployment, Phased Deployments), that shows what updates a given KB superseded or what has superseded that KB. This is better than having to go to search this out on the web.

    13 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  7. Add deployment setting-Allow enforcement outside of maintenance window for deferred update (updates that have missed one maintenance window)

    There are many benefits to having one deployment for all of our workstations. We have an ADR that approves our patches and deploys them to a singular collection. Our update schedule is segmented so that not all locations go at once. Since we only have one deployment, this assignment is carried through by maintenance windows. We would love a setting that allows the workstations to wait for their maintenance window after our approval, but as soon as it has missed one window "and is now a deferred update" then enforce outside of maint. windows. We know we could go backā€¦

    13 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  8. Service Plans - define search for feature updates to save disk space

    At the moment when creating a service plan in SCCM e.g. for Windows 10 Fall Creators Update (1709) there are several versions downloaded. Like the x86, x64, consumer and business files. So if you need the update only for Win 10 x64 Enterprise EN, you will still get all 4 versions: the x86, x64, consumer updates (Win 10 Home) and business updates. That results in pretty much wasted disk space which would not be necessary since the x64 business files would suffice.

    It would be great if we can define the search better so you can choose what files willā€¦

    13 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  9. Add 'OS Build' Column in Updateinfo for each update

    The UBR is also used to identify a machine is complaint to cumulative monthly patch or not.

    Now that we have OS build (Buildext or UBR) info add to VRSystem via DDR, it would be great if the same UBR or OS Build is added to each update in V_Updateinfo table in SCCM Database
    when the new updates released by Microsoft on MSPD, so that the win 10 compliance reporting would be much simpler.

    13 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  10. SCCM ADRS: Cannot setup ADR for a Date Range, Only out to 1 Year.

    Currently you can search for patches for a range, for example:
    AND Date Released or Revised is between 1/1/2001 and 5/1/2019
    AND Required is greater than or Equal to = 1
    Expired=No
    Superseded=No

    But When Creating an ADR you cannot specify the date range for Needed\Required Patches that meet that same criteria. You can only deploy Patches released within the Last Year in an ADR.

    This is a Patching requirement for us, and most Fortune 500 Companies. We have to be able to deploy Patches that might be needed that are older than a Year. ADR's need to be ableā€¦

    13 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  11. Allow WSUS servers to download updates only on HTTPS

    Currently, the WSUS servers connect to the URLs (both HTTP and HTTPS) to download the updates, as mentioned in this link: https://docs.microsoft.com/en-us/sccm/sum/plan-design/plan-for-software-updates#BKMK_ConfigureFirewalls

    This means allowing HTTP traffic to come down to internal servers (by creating exceptions in the proxy settings), causing serious audit failures and security concerns.

    Also, a lot of proxy solutions also have a capability to block the content from whitelisted HTTP URLs if the file size is too large, thinking that it might be malicious content. This again causes problems when Windows 10 Feature and Express Updates are downloaded!

    Hence, it would be great to publish allā€¦

    13 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  12. Bitlocker aware updating - Suspend bitlocker automatically

    Now that Surface drivers and firmware are available to download as software updates it would be great to be able to deploy them without worrying about Bitlocker and having our users locked out.

    So far it seems that we have to do a lot of testing to see whether or not a driver or firmware will lockout bitlocker, and then give up and deploy them using a TS, so we can suspend Bitlocker, update, reboot and reenabled bitlocker.

    Could all drivers/firmware from the Surface update category automatically have bitlocker suspended when deployed as an update? or give us a tickā€¦

    13 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  13. SCCM - Add Modern App updates into SCCM like IE or Windows Updates. Patients affected

    We support 86,000 health care Windows 10 clients. Built IN Modern apps like Photos update randomly in the middle of the day TAKING down our entire WAN and LAN forcing emergency rooms to stop working.

    This is due to 300MB per App per machine x 80,000+ machines = 24,000,000 MB of data coming through the Internet Gateway regularly with EACH app update. We have tracked this data all coming from the Microsoft App update servers.

    We have to patch built in apps like Edge and Photos for health care security. Redundant apps have been uninstalled and Windows Store is blocked.

    ā€¦

    12 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  14. Send message personalizade in Updates

    In my company when sending updates we want to send personalized messages, that they are sending patches and it is from the company that we must restart. Example: The administration of _____ we have applied patches to restart your computer. Atte enterprise

    12 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  15. Add Conditions for Patching

    Add conditions to Patches, such as certain processes not running, user not logged on, etc. Just like we've added for applications.

    This is especially needed for certain 3rd-party updates. [cough] Adobe... [cough]

    12 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  16. Different business hour for different days

    It will be good to allow options for users to select different timing for different days in the business hour setting Eg. 10am to 4pm on Monday, 12pm to 6pm on Tuesday, etc

    12 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  17. Inbuilt Mechanism To Uninstall Patch via SCCM

    Hello,

    Not sure why SCCM doesnt have an inbuilt mechanism to uninstall a patch from the SCCM console. We do have this feature to remove (Disapprove) a patch in WSUS which is a freeware.

    It is really a beneficial feature to be included as this comes up into use very frequently.

    Many Thanks
    Vikram Midha

    11 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  18. Automatic Deployment Rules create 'available' deployment.

    I would like to create my ADR deployments for servers as available instead of required. This allows more control over server patching. Currently I create the package as required and then I have to alter it for servers that I do not want unattended installations.

    11 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  19. "Cluster Aware" Patching Variables

    With the new Cluster Aware patching in TP3, I would like to see dynamic variables that you can call into your pre and post scripts that would tell you which machines are currently getting patched, and which machines are currently up. This would allow admins to write a more simplistic script where it queries a variable instead of having to build a script that test connections and make sure its not installing software updates. Example scenario would be patching Hyper-V clusters, where you need to keep all VM's up and running. We could query the variable, to move the VMsā€¦

    11 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  20. ADR for servers need some love

    We are using ADR for a pilot group and then for two different automatic groups, but we cant use it for our manual group.

    What i would love to see:

    1: Be able to configure multiple deploys within the same ADR. today we are using three ADR just because it deploys to different collections with different maintenance windows.

    2: Be able to use the ADR for our manual group, deploy the patches to our collection for manual servers as Available! When we need to go in to CM just to deploy patches already deployed just to get them as availableā€¦

    11 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    2 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
1 2 5 7 9 25 26
  • Don't see your idea?

Feedback and Knowledge Base