Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we canā€™t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the šŸ™‚ button in the top right corner and choose ā€œSend a Frownā€. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer ā€“ our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Have Server Groups also apply to Software Distribution, OSD, and Compliance Settings remediation, in the same way as Maintenance Windows

    Presently, we have to have separate maintenance windows for each node of a cluster to prevent them from rebooting at the same time. I got excited when I noticed the Server Groups feature and thought we might finally be able to ditch the separate maintenance windows, but it turns out Server Groups only apply to Software Updates only.

    If I were to move away from using separate maintenance windows and implement Server Groups instead (which I really want to), there would be nothing stopping someone from creating an app deployment or a program which reboots both nodes of a clusterā€¦

    9 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  2. Allow using SMS_R_USER and SMS_R_SYSTEM together when making query-based collections.

    If you try to write a query to generate a collection that attempts to cross reference objects between the SMSRUSER & SMSRSYSTEM databases, you will get an error.

    This prevents you from being able to create a collection of systems based on the last user that logged onto a machine. It's also just frustrating.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  3. Extend functionality of Device Categories

    Allow for multiple Device Categories per device and provide a PowerShell cmd-let to assign category(s) to devices. This would allow categories to represent 'business rules' and allow automatic assignment of devices to collections based on one or more categories. i.e. "Production" and "Application1". This would be very useful for interfacing with external systems that automatically create/deploy machines, such as HPSA or VRA/VRO.

    6 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  4. Add user that last modified collection

    Add column for user that last modified collection

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  5. SMP not properly detected as LOCAL during MDT OSD

    We are running 1710 and we have the following issue.
    The client is in the same boundary group as the DP and SMP (Same host).
    The client properly initiates the OSD from the local DP but once it tries to detect the SMP, it fails to see it as LOCAL (shows it as REMOTE).

    To overcome this issue, we found two workarounds but this needs to be fixed.


    1. Remove the Failback Boundary Groups from the Boundary Group
      OR

    2. Add the Primary Site Server to the Boundary group Site System Servers

    Both of the above are breaking architecture so this shouldā€¦

    3 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  6. Collections for machines that don't get any deployments except OS updates.

    We have digital signage that is W7 runs a java app and that's it. It is in the main collection for our company. When we push installs around we have to make sure we have this collection set as an exclusion in all 400 of our deployments. I'd like an option or let's discuss the best way that says, all this software for normal operations goes to the company, maybe it gets deployed by our HQ without local control, but we don't want ANY software going to these machines ALWAYS except for OS updates. Digital signage doesn't need app updatesā€¦

    3 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  7. Synchronize collection with active directory group

    Assigning users to computers is not easily managed in AD but is in SCCM. I'd like to have the ability to push users' "assigned" (primary user) computers in an SCCM collection to an AD group and keep the AD group synchronized with changes in the collection. For example: I create a collection of all of the computers assigned to users in AD group Department X. I need an AD group of their computers for group policies and other third party programs. I can manually populate an AD group with their computers but the group will soon get out of dateā€¦

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  8. Add a security property to control the collection refresh schedule.

    A property within security roles needs to be made available to prevent users from making changes to the collection refresh schedule. Also it might be worth having another option to allow changes to be made within set boundaries (e.g. a minimum refresh time, preventing collections being set to every 5 minutes).

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  9. Add a security property to restrict users from enabling incremental updates on collections.

    A property within security roles needs to be made available for assignment which restricts users from enabling incremental updates.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  10. All devices are part of the same server group - Dont display any message for the client if the threshold is exceeded

    The "All devices are part of the same server Group" is a great feature, however, if you tick the check box for a collection, and the number of devices in that collection trying to install an update exceeds the threshold set, an error is displayed in Software Center saying "0x87D00666 - Software updates cannot be install outside service window". If the reason for the Update not to be installed is because of a threshold, it would be better if either no message is displayed at all, or a message telling the user that the update is queued and will beā€¦

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  11. Correct behavior of the "Add Resources" button (SCCM all versions).

    Correct behavior of the "Add Resources" button (SCCM all versions).
    When you use the "add resources" (to collection) button it uses the RBAC_InstancePermissions and does not take into account the limiting collection.
    This is a problem in an environment where people take up different roles. For instance when you have different geographical units (each with limiting collections) and people have an additional read-only role for example for everything.

    In this case the code behind a "direct membership" rule has the correct behavior, while the code behind the "add resources" button allows to add any resource.
    Since the "add resources" buttonā€¦

    9 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  12. Send E-mail directly to people in collections

    It is often during patching and upgrading, wanted to send a Notification mail to People in a special build Collection. This would simplify operations, and prevent a lot of extra incidents during maintenance.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  13. Search for a collection using the collection ID

    Search for a collection using the collection ID

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  14. Resultant set of Maintenance Windows

    Ability to get a resultant set of maintenance windows. There are some third party powershell scripts that can be used, but this would be a nice feature in the console

    http://www.scconfigmgr.com/2014/04/13/show-maintenance-windows-information-for-a-device-in-configmgr-2012/

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  15. Put the "Create new collection" option similar to the one already used in the complice for all deployments.

    Put the "Create new collection" option similar to the one already used in the complice for all deployments.

    6 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  16. Ability to disable some AD system discoveries.

    Our current AD Sys Discovery takes over 2 days to process. It would be great to be able to disable some or all of them without deleting the configuration from the discovery method so that I could target specific domains. Currently if I need to target a specific, I have to delete all of the other ones. Or leave it, and wait 2 days for it to finish.

    32 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  17. "Primary User" or "Last Logged on User" in the NON SERVER COLLECTION?!

    Right now while your looking at any collection there no way to add a drop down for "last logged on user" or "primary user"

    IF you check the properties for individual devices you can get this info. Its very frustrating we cannot see this info in the console page!

    PLEASE let me know if there is any workaround or if you can add this - Ive literally seen 10's if not 100's of forum threads asking for this exact same thing to be added!!!!!

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  18. Set or remove scheduled full update time to a selected group of collections

    When creating multiple collections, unchecking the schedule full update time, is sometimes overlooked. It would be nice to be able to select several collections and either set or remove scheduled update settings. Or add a column option to show the scheduled update times to avoid having to go into properties for each collection. TY!

    > Collection Properties/Membership Rules/Schedule a full update on this collection

    2 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  19. Increase results displayed or enable a filter window for criterion selection when creating a query for collection membership.

    Currently when creating a collection based on installed software or software version there is a limit to the returned results based on criterion. If the item you are looking for is far enough down the list, you can't see it to select it. Adding additional rows to display on the return or a filter window would be greatly beneficial

    2 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  20. Limiting Collection Notification

    When a device is added to a collection but is not a member of the limiting collection(s), there should be a prompt that notifies the user of this and what collection(s) the device needs to be a member of first.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base