Microsoft

System Center Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building System Center Configuration Manager, though we can’t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the ? button in the top right corner and choose “Send a Frown”. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer – our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the System Center Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Microsoft Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.

How can we improve Configuration Manager?

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Apply Boundary Groups to WinPE Management Point selection

    Currently it appears that when the SCCM agent in the WinPE boot image connects to a Management Point, it selects one without using the Boundary Group rules, instead selecting one from the AD published list, starting with the first alphabetically.
    Instead this should behave like the full blown Windows SCCM Client and select a Management Point based on Boundary Groups such as IP range.
    It is worth noting that Distribution Points are selected correctly according to Boundary Group by the WinPE client, for OSD content.

    54 votes
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
    • Create an OSD variable for Secure Boot - _SMSTSSecureBootState

      Create an OSD variable for Secure Boot called _SMSTSSecureBootState. It should have three values depending on the state and the currently running OS: Enabled, Disabled, NA. This can be used during a TS to determine if Secure Boot should be enabled. Currently, a TS variable has to be defined and set based on if the registry key exists or not.

      53 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
      • Task Sequence - View Only option

        Add Option to View TS, instead of "edit". Often times I just want to look at a TS for reference, and not edit it. Just safe guarding the TS from my accidental clicks.

        53 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          4 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
        • Add the option to run a package and Run Command line from DP

          We have the possibility to select to "Access content directly from the DP" when deploying a operating System image in a Task Sequence. It would be great to be able to do this for "Run Command Lines" as well.
          Example scenario, you want to run a Powershell script from a package before the disk is formatted in a scenario where we use Bitlocker for instance.

          50 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
            Noted  ·  sangeev responded

            Updated by bobmn for sangeev/OSD

          • Fix Application Supercedence in Task Sequence during OSD

            Application A and Application B. Application B supersedes Application A. The content is removed off the DPs for Application A.. A task sequence (non-OSD TS) deployment of Application B fails with "The software could not be found on any servers at this time." After reading the logs, it is looking for Application A. BUT a regular application deployment Application B, it works fine, so this issue is ONLY occurring in TS.

            49 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
            • Remove from Collection / Move to Collection in OSD

              Sometimes it might be handy to remove a computer from the OSD collection as a final step during the task sequence. Or additionally add the computer to additional collection(s) for for example extra software deployment or another task sequence.
              Now scripts need to be created therefore and in my experience this doesn't always work well.
              A predefined step where the collectionname or collectionID needs to be added to add (or remove) the computer to (or from) would be much appreciated.

              48 votes
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                3 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
              • Mac

                Provide Mac Provisioning with CM12.

                Other vendors provide the ability to image and fully manage the Mac device, when will Configuration Manager provide this feature? Imaging Windows platforms is only part of a corporation desktop landscape, we also support Mac, having a single solution would make logical sense.

                46 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  4 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                  Noted  ·  sangeev responded

                  Updated by bobmn for sangeev/OSD

                • Task Sequence Version Control

                  Please create a function to enable task sequence versioning. This feature would be very helpful for reverting back to a previous task sequence as well as accountability for the last user that modified the task sequence.

                  We write a lot of WMI queries as well as set various task sequence variables. These settings change over time and it would be a great feature to look back on a previous version to view the changes as well as the last user modification.

                  We currently make copies of our task sequences for this archival purpose. This process works for us now, but…

                  45 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    3 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                  • Allow OS Upgrade and Custom Task Sequences to queue status messages during offline execution

                    When OS Upgrade and Custom task sequences are running offline (such as following a reboot while on VPN) all task sequence manager status messages are discarded. While this is expected in WindowsPE, it would be beneficial for troubleshooting/reporting if OS Upgrade and Custom task sequences would queue status messages locally just like Executive Manager does with software installation status.

                    44 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                    • Option to direct import images from MS VLSC

                      It would be convenient to have a method to enter/save your volume licensing credentials to have it directly download an iso from the volume licensing site, extract the wim into a designated storage location, and then import it directly into the console. This would especially be nice considering the more frequent release of new Windows 10 builds. I like running my B&C from the newest image available.

                      43 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                        Noted  ·  sangeev responded

                        Updated by bobmn for sangeev/OSD

                      • OSD Task Sequence (1703) Not Displaying

                        When running a task sequence to deploy a 1703 based image, the second part of the task sequence: "Setup Operating System" does not display.

                        The screen saying "Just a moment..." is displayed instead of the SCCM task sequence screen, meaning you cannot see the progress.

                        If the machine is left, it does actually complete the steps, but it would be nice to see the SCCM screen once again!

                        42 votes
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →

                          Thanks for your feedback. Updating status to Noted and apologies for not getting to this one till now.

                          From my testing this appears to be limited to 1703 (Redstone 2) or 1709 (Redstone 3). All tests with 1803 (Redstone 4) and 1809 (Redstone 5) have been fine also with Task Sequence Progress UI shown. The ‘Just a moment..’ is not something under task sequence control, installing manually shows the same behavior.

                          Is this still an issue for you all with the more recent Windows releases?

                        • Task Sequence deployment option of "While no user is logged on"

                          Give us the option to restrict a required Task Sequence to "When no user is logged on" This would be particularly helpful when using Task Sequences to push out Application updates. That way if the TS tries to run while a user is logged on it won't fail as soon as it hits the applications which are set to "When no user is logged on"

                          41 votes
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                          • Use SMSTSRebootDelay value during 'Install Application' Step

                            Use the value from the built-in variable SMSTSRebootDelay for reboots that occur during the 'Install Application - Install applications according to dynamic variable list' step. This would reduce the time for OS deployments.

                            41 votes
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                              Noted  ·  sangeev responded

                              This is also similar to ‘Allow suppression of exit codes during Install Application Task Sequence Step’
                              Updated by bobmn for sangeev/OSD

                            • OSD Task Sequence Restart Computer step needs "if reboot pending" option

                              Please add to the Restart Computer OSD task sequence step an option that will check if the system requires a reboot and then only restart the computer if it needs to. Right now to work around this need, we have to execute a PowerShell script and write the results to a custom task sequence variable and then use that variable as a condition on the Restart Computer step. Adding this option natively would be much more elegant. Attached is the script we're using.

                              40 votes
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                                1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                              • Make the SMSTSPreferredAdvertID feature work without requiring all systems having to be targeted

                                It would be really useful if the SMSTSPreferredAdvertID feature would work without every CM Client (known or unknown) needing to have the policy for the hidden deployment. This is usually set using a front end menu by a technician or end user driven deployment. If there are multiple task sequence deployments that need to be available, this could result in a large amount of unnecessary policies. The other option is to have a webservice drop a system in a collection prior to kicking off the task sequence engine, however this has drawl backs and can result in a delay in…

                                39 votes
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                  0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                                • Offline Servicing - Select Indexes to Update

                                  At the moment, when you do Offline Image Servicing on a Server WIM - it applies it to all image indexes (Standard, Standard Core, Datacenter, Datacenter Core, etc...)

                                  Can we have an option to select which index (or indexes) we would like to service?

                                  If someone only deploys Standard (gui) and never Datancentre, they don't really need to patch it..

                                  It would also save some time

                                  37 votes
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    4 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →

                                    Updating status to started.

                                    We’ve made some changes to image import so that a single index can be selected.

                                    These changes and other improvements to Offline Servicing are available in our 1901 Technical Preview

                                    Doc: https://docs.microsoft.com/sccm/core/get-started/2019/technical-preview-1901
                                    Blog: https://techcommunity.microsoft.com/t5/Configuration-Manager-Blog/A-New-Perspective-on-Client-Health-in-ConfigMgr-Technical/ba-p/324621

                                  • Have a Task Sequence Step to call the Uninstall of an Application and support both the Standard Install and Dynamic Install.

                                    While a Step for Run Command line can be used for most Windows Installer, if an application uses a EXE it would be nice for the application to be downloaded and the exe used.

                                    35 votes
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                      3 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                                      Noted  ·  sangeev responded

                                      Updated by bobmn for sangeev/OSD

                                    • Native Certificate TPM Attestation during deployment

                                      at the moment we need to use scripts with passwords in it against a CES/CEP because SMS Agent is in provisioning mode. It would be great to do certificate enrollments during deployment with the certificate enrollment point as the proxy. we use tpm attested certificates to check if the machine is known to increase security

                                      35 votes
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                        4 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                                      • MVP-Task Sequence join azure AD

                                        With more and more devices being connected to azure AD, SCCM should have an option to perform a zti deployment and join the newly deployed Windows 10 to azure AD only. not hybrid where GPO needs to exist, but a native support where the connection to SCCM already exist but the computer will not be connected to the onprem domain.

                                        35 votes
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                          4 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                                        • AD Authentication for PXE boot

                                          It would be useful to integrate AD authentication in the WinPE boot image for PXE boot OSD.

                                          When deploying operating systems with MDT and WDS, users are prompted to authenticate against AD when PXE booting. However, in SCCM the only supported way to secure the PXE point is with a DP password that all users share.

                                          There are third party "hacks" which can integrate AD authentication in the WinPE boot image (Johan Arwidmark's ADSI drivers) but it seems like this would be simple to implement within the product itself since it is already done in MDT/WDS.

                                          34 votes
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                            0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                                            Noted  ·  sangeev responded

                                            Updated by bobmn for sangeev/OSD

                                          • Don't see your idea?

                                          Feedback and Knowledge Base