Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we can’t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the 🙂 button in the top right corner and choose “Send a Frown”. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer – our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Delete Collection UI Issue

    When an administrative user who does not have permission to delete resources tries to delete a collection, the confirmation UI displayed reads as though the resources WILL be deleted due to the missing checkbox. Perhaps changing the UI so that the checkbox is there but grey'd out as unchecked or remove the "Delete each collection member from the database" text.

    0 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  2. Maintenance window recurrence pattern offset from a base day

    Allow the recurrence pattern for maintenance windows to be scheduled with an offset from a base day.

    Meaning, if we want a maintenance window on the Wednesday following the Second Tuesday of every month, we could configure a maintenance window for the Second Tuesday with a +1 offset.

    (This would be similar to the offset option added to ADRs in 1802.)

    597 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Noted  ·  23 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  3. Override maintenance windows

    Allow local admins to bypass the maintenance windows for deployments even if the deployment is hidden in the Software Center. Allow this on collections and individual clients. Usually needed for short notice deployments in education.

    5 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  4. Right-click Collection Deployments to View Deployment Status

    I find it would be handy when viewing deployments to a collection, if a Right-Click option existed to view status - i.e. open the deployment status (Monitoring/Deployments/[Deployment]/Status).

    16 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  5. 1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  6. SCCM Collection Alert

    Add a Collection Alert that allows you to generate an alert if Collection Membership falls below threshold (% or Count).

    This will be useful, for example, if we have a pilot group collection that isn't dynamic and machines get removed because they were replaced and don't get put back in the collection. This way we know that more device resources need to be added to the collection.

    13 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  7. Maintenance Windows to allow Exploit Guard Settings

    Provide additional option for Exploit Guard in drop-down list of Maintenance Windows in addition to the existing options (Software Updates, Task Sequences, All).

    As the existing Maintenance Windows restrict Exploit Guard Settings to be applied unless ALL or no Maintenance Window is configured. This means that instant changes cannot be applied if the organisation has maintenance windows defined. If a new maintenance window is created with ALL settings then it can lead to reboots and Software updates applying to Windows 10 devices as well.

    9 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  8. "server group"

    Add a confirmation window when enabling the Server Group setting on a collection. The placement of the checkbox is very similar to the Incremental Updates checkbox on the following tab. Have seen some admins enabling it by mistake, which causes problems.

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  9. Have “Last Boot Time/date” option available to pick for a column when you’re in Devices or Device Collections.

    Have “Last Boot Time/date” option available to pick for a column when you’re in Devices and/or when you have Sub device collections.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  10. Phased deployments - Parent/Limiting and Child Collections

    When creating a phased deployment, I would like to define a parent collection (for example, “All Win7” workstations) that will serve as a limiting collection for the collections defined on each phase. This would allow me to create collections for each phase (like rings; for example: Canary, Pilot, Production) that could be used across various phased deployments.

    That way, if I target a Windows 10 Upgrade TS to my “All Win7” collection, with phases targeting the Canary, Pilot, and Production collections, it would go like this:
    - PCs in the Canary collection that are also in All Win7
    - PCs…

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  11. Allow using SMS_R_USER and SMS_R_SYSTEM together when making query-based collections.

    If you try to write a query to generate a collection that attempts to cross reference objects between the SMSRUSER & SMSRSYSTEM databases, you will get an error.

    This prevents you from being able to create a collection of systems based on the last user that logged onto a machine. It's also just frustrating.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  12. Allow export of Collection queries to a Query

    We, like many institutions, have experienced "Collection Creep", over the years, that is, we have accumulated many collections which are no longer necessary for software distribution. The logic used in these collections however is still valid and can occasionally be useful, so it would be very handy if we could simply export the logic to a query, which could then be run as required. It could be designed so that an include or exclude could also include the logic from those collections, and restricted to only work on Query-based collections.

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  13. Collections should have a column for IP address

    When a collection of computers is opened we should have the option of displaying a column with the machines IP address. Or 2 columns, one for IPV4 and another for IPV6.

    119 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    13 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  14. Collection membership history for Client Computers

    It would be great to be able to see the membership history of individual client computers. This way we can check to see why certain deployments happened in the past. Personally have had this situation where we get a deployment to a PC mistakenly but the PC was removed from the collection so we have no evidence to report on why the deployment took place.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  15. Add user that last modified collection

    Add column for user that last modified collection

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  16. Have Server Groups also apply to Software Distribution, OSD, and Compliance Settings remediation, in the same way as Maintenance Windows

    Presently, we have to have separate maintenance windows for each node of a cluster to prevent them from rebooting at the same time. I got excited when I noticed the Server Groups feature and thought we might finally be able to ditch the separate maintenance windows, but it turns out Server Groups only apply to Software Updates only.

    If I were to move away from using separate maintenance windows and implement Server Groups instead (which I really want to), there would be nothing stopping someone from creating an app deployment or a program which reboots both nodes of a cluster…

    9 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  17. Extend functionality of Device Categories

    Allow for multiple Device Categories per device and provide a PowerShell cmd-let to assign category(s) to devices. This would allow categories to represent 'business rules' and allow automatic assignment of devices to collections based on one or more categories. i.e. "Production" and "Application1". This would be very useful for interfacing with external systems that automatically create/deploy machines, such as HPSA or VRA/VRO.

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  18. Trigger the Approval Workflow engine on a software deployment or collection count change

    In our organization, we really like what we've seen for the Scripts Approval Workflow, where we are able to select 'Approvers' to authorize changes to a Script before deployment.

    This is a powerful mechanism, we'd love to trigger the workflow mechanism in two other situations:

    1.) We want to require Approval when a new deployment is created, and especially when a new OSD Task Sequence is deployed to a collection.

    2.) What if we have an existing Deployment that targets a collection? Someone could edit the collection and then add an Include rule for 'All of Our Super Prod Servers…

    19 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  19. SMP not properly detected as LOCAL during MDT OSD

    We are running 1710 and we have the following issue.
    The client is in the same boundary group as the DP and SMP (Same host).
    The client properly initiates the OSD from the local DP but once it tries to detect the SMP, it fails to see it as LOCAL (shows it as REMOTE).

    To overcome this issue, we found two workarounds but this needs to be fixed.


    1. Remove the Failback Boundary Groups from the Boundary Group
      OR

    2. Add the Primary Site Server to the Boundary group Site System Servers

    Both of the above are breaking architecture so this should…

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  20. In Depth Security role permission classification for SCCM administrator

    Currently if we are providing collection modify permission within any security role, it allows SCCM user to opt Direct, Include, Exclude or query option to add/remove resources into the collection. Can we segregate these addition method to limit permissions for operations team ?

    7 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base