Microsoft

System Center Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building System Center Configuration Manager, though we can’t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the 🙂 button in the top right corner and choose “Send a Frown”. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer – our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the System Center Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Microsoft Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Choose subfolder when creating a new collection from the right-click menu

    When you use the right click menu to add a user or device to a new collection (which opens the wizard to create a new collection), it defaults to the root collection node. We manage our collections with multiple folders and sub-folders, and it would make management easier if we could change the location where the new collection will be created instead of tracking it down after creation and manually moving it to the desired location.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  2. Maintenance Windows for select applactions

    Apply Maintenance Windows to Select applications. Example you have a collection of machines that have VPN client installed. You apply Maintenance window to enforce updates at night while ensuring that it doesn't during the day.

    As the same time this machine is part of another collection that has applications you don't mind it updating in the middle of the day.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  3. SCCM Collection Alert

    Add a Collection Alert that allows you to generate an alert if Collection Membership falls below threshold (% or Count).

    This will be useful, for example, if we have a pilot group collection that isn't dynamic and machines get removed because they were replaced and don't get put back in the collection. This way we know that more device resources need to be added to the collection.

    13 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  4. Maintenance Windows to allow Exploit Guard Settings

    Provide additional option for Exploit Guard in drop-down list of Maintenance Windows in addition to the existing options (Software Updates, Task Sequences, All).

    As the existing Maintenance Windows restrict Exploit Guard Settings to be applied unless ALL or no Maintenance Window is configured. This means that instant changes cannot be applied if the organisation has maintenance windows defined. If a new maintenance window is created with ALL settings then it can lead to reboots and Software updates applying to Windows 10 devices as well.

    9 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  5. Allow export of Collection queries to a Query

    We, like many institutions, have experienced "Collection Creep", over the years, that is, we have accumulated many collections which are no longer necessary for software distribution. The logic used in these collections however is still valid and can occasionally be useful, so it would be very handy if we could simply export the logic to a query, which could then be run as required. It could be designed so that an include or exclude could also include the logic from those collections, and restricted to only work on Query-based collections.

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  6. Have “Last Boot Time/date” option available to pick for a column when you’re in Devices or Device Collections.

    Have “Last Boot Time/date” option available to pick for a column when you’re in Devices and/or when you have Sub device collections.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  7. Have Server Groups also apply to Software Distribution, OSD, and Compliance Settings remediation, in the same way as Maintenance Windows

    Presently, we have to have separate maintenance windows for each node of a cluster to prevent them from rebooting at the same time. I got excited when I noticed the Server Groups feature and thought we might finally be able to ditch the separate maintenance windows, but it turns out Server Groups only apply to Software Updates only.

    If I were to move away from using separate maintenance windows and implement Server Groups instead (which I really want to), there would be nothing stopping someone from creating an app deployment or a program which reboots both nodes of a cluster…

    9 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  8. Allow using SMS_R_USER and SMS_R_SYSTEM together when making query-based collections.

    If you try to write a query to generate a collection that attempts to cross reference objects between the SMS_R_USER & SMS_R_SYSTEM databases, you will get an error.

    This prevents you from being able to create a collection of systems based on the last user that logged onto a machine. It's also just frustrating.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  9. Extend functionality of Device Categories

    Allow for multiple Device Categories per device and provide a PowerShell cmd-let to assign category(s) to devices. This would allow categories to represent 'business rules' and allow automatic assignment of devices to collections based on one or more categories. i.e. "Production" and "Application1". This would be very useful for interfacing with external systems that automatically create/deploy machines, such as HPSA or VRA/VRO.

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  10. Make "Pending Restart" available under "Add Criteria"

    Having the possibility to add Pending Restart as an option under Add Criteria for devices would be great.

    21 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  11. Add user that last modified collection

    Add column for user that last modified collection

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  12. SMP not properly detected as LOCAL during MDT OSD

    We are running 1710 and we have the following issue.
    The client is in the same boundary group as the DP and SMP (Same host).
    The client properly initiates the OSD from the local DP but once it tries to detect the SMP, it fails to see it as LOCAL (shows it as REMOTE).

    To overcome this issue, we found two workarounds but this needs to be fixed.

    1. Remove the Failback Boundary Groups from the Boundary Group
    OR
    2. Add the Primary Site Server to the Boundary group Site System Servers

    Both of the above are breaking architecture so…

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  13. Collections for machines that don't get any deployments except OS updates.

    We have digital signage that is W7 runs a java app and that's it. It is in the main collection for our company. When we push installs around we have to make sure we have this collection set as an exclusion in all 400 of our deployments. I'd like an option or let's discuss the best way that says, all this software for normal operations goes to the company, maybe it gets deployed by our HQ without local control, but we don't want ANY software going to these machines ALWAYS except for OS updates. Digital signage doesn't need app updates…

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  14. Synchronize collection with active directory group

    Assigning users to computers is not easily managed in AD but is in SCCM. I'd like to have the ability to push users' "assigned" (primary user) computers in an SCCM collection to an AD group and keep the AD group synchronized with changes in the collection. For example: I create a collection of all of the computers assigned to users in AD group Department X. I need an AD group of their computers for group policies and other third party programs. I can manually populate an AD group with their computers but the group will soon get out of date…

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  15. Add a security property to control the collection refresh schedule.

    A property within security roles needs to be made available to prevent users from making changes to the collection refresh schedule. Also it might be worth having another option to allow changes to be made within set boundaries (e.g. a minimum refresh time, preventing collections being set to every 5 minutes).

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  16. Add a security property to restrict users from enabling incremental updates on collections.

    A property within security roles needs to be made available for assignment which restricts users from enabling incremental updates.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  17. All devices are part of the same server group - Dont display any message for the client if the threshold is exceeded

    The "All devices are part of the same server Group" is a great feature, however, if you tick the check box for a collection, and the number of devices in that collection trying to install an update exceeds the threshold set, an error is displayed in Software Center saying "0x87D00666 - Software updates cannot be install outside service window". If the reason for the Update not to be installed is because of a threshold, it would be better if either no message is displayed at all, or a message telling the user that the update is queued and will be…

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  18. Fix collection update engine

    The way collection membership updates are handled is completely flawed. Should this be fixed, the (soft) limit of collections that can have incremental updates enabled should also be changed.

    We all know that when a collection is updated, all collections limited to it are also updated. And should any of the children collections be updated, then so will the children of the children, and so forth and so on.

    However, there is a massive design flaw that in this system that means a huge number of collections that should *never* be updated are being updated.

    Imagine this scenario:

    CollA is…

    19 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  19. Schedule a deployment for X days after the 2nd Tuesday of the month (example)

    Sometimes the the second Tuesday (as an example) could be 7 days into the month, other times it could be much longer. Allow all schedules to be X days after a 1st/2nd/3rd mon/tue/wed/thur etc

    5 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  20. Correct behavior of the "Add Resources" button (SCCM all versions).

    Correct behavior of the "Add Resources" button (SCCM all versions).
    When you use the "add resources" (to collection) button it uses the RBAC_InstancePermissions and does not take into account the limiting collection.
    This is a problem in an environment where people take up different roles. For instance when you have different geographical units (each with limiting collections) and people have an additional read-only role for example for everything.

    In this case the code behind a "direct membership" rule has the correct behavior, while the code behind the "add resources" button allows to add any resource.
    Since the "add resources" button…

    9 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base