Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice - Update: Microsoft will be moving away from UserVoice sites on a product-by-product basis throughout the 2021 calendar year. We will leverage 1st party solutions for customer feedback. Learn more

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we canā€™t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the šŸ™‚ button in the top right corner and choose ā€œSend a Frownā€. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer ā€“ our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Lock down of Good Client Health State for later restores

    Client health issues are one of main pain areas admins deals. Post client install, registration, policy download succeeds, client should create a golden state of its own on WKS and similarly one golden info of client at SCCM server level also in DB in separate table or so,... in case of client broken situation, using these two copies we can restore back. This way may prove much better than current situation where enormous amount of time, dealing different components with still no guarantee to fix it.

    19 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  2. Get MAC Address from AD

    It would be useful to get the MAC address (or convert the netbootGUID attribute to MAC address) from computer objects discovered in AD.

    In our environment, new computers are prestaged in AD which then end up discovered by system discovery and added to SCCM. Existing computers which have not had the SCCM client installed are also discovered and added to SCCM. However, when either a brand new machine or existing machine without the client installed needs imaged, the existing object in SCCM needs deleted, and then a new object needs imported with the MAC address so the machine can PXEā€¦

    18 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  3. FIX Bitlocker Recovery if, PXE boot is in the first place.

    The abortpxe.com is somehow "untrusted" by the Bitlocker boot process. If UEFI changes the boot order to PXE boot, Bitlocker Recovery comes along.
    https://techcommunity.microsoft.com/t5/System-Center-Configuration/Bitlocker-Recovery-with-PXE/m-p/224704

    18 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  4. When configuring cache size via client settings - cache cannot be deleted

    When using the new option in 1606 branch for configuring client cache size - the options to delete cache from the client's size is grayed out.
    either it's by design or not - it blocks the reason to use this feature as deleting cache is one of the most basic troubleshooting tasks for deployments and it is not possible to be done unless deploying a custom script...

    18 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    3 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  5. User based maintenance windows

    When machines are being shared across different regions and departments it becomes difficult to manage maintenance windows as users have different usage requirements. Having a User MW might help manage this problem better. SCCM would first have to check if an active user was on a machine and if so use the "User MW" and then fall back to the machine MW is a user wasn't logged in. It should also be possible to have a user who has no MW. A client setting would also be required to disable this functionality on subsets of machines.

    17 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  6. Allow the ability through Config Manager Client Settings to set Deferral of Upgrades (CB/CBB) for Windows 10 Clients

    It would be ideal to be able to defer feature upgrades for Windows 10 via Client settings to avoid having to use a GPO. This would avoid the current dual scan issue with GPOs and WUfB Policy Settings.

    15 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  7. CSS : Need an option to discover objects from Secure LDAP domains

    In ConfigMgr till 1610, we just have option to discover object from LDAP but My customers are looking for an option to discover objects over Secure LDAP where the domains are installed in DMZ.

    14 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  8. Changing Internet-based MP of SCCM client

    Rather than having to change the Internet-based Management Point for the SCCM client manually, it would be good to have a way to change them all automatically.

    We attempted to make changes using the process under CCMHOSTNAME in the URL below but couldnā€™t make it work.

    https://docs.microsoft.com/en-us/configmgr/core/clients/deploy/about-client-installation-properties#ccmhostname

    14 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  9. Report - What Specific Distribution Point a Client Downloaded a Package

    Would like to have a report that displays what Distribution Point a client

    • could download a package from (available DPs)
    • currently downloading from
    • finished downloading from
    14 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  10. Certificate selection tool

    I think a simple certificate selection tool for clients would be really handy. I am thinking in exactly the same way as momcertimport.exe in SCOM where you can run the exe either as GUI or cmd line and choose a specific certificate to use.
    As we know, current certificate selection is not fool proof and can be very tricky when multiple certificates are installed on one device. A simple certificate picker or override tool would assist massively when dealing with HTTPS environments, particularly in DMZs. Numbers are often much smaller and we are dealing with the final 5% which canā€¦

    13 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  11. Active Directory Group Discovery

    Active Directory Group Discovery
    As the title states it's a discovery method meaning it simply creates new resources (and/or updates values of attributes).
    It never deletes groups that no longer exist in AD.
    Wouldn't it be good to have a mechanism that keeps the SCCM in sync with AD (especially for groups and users)?
    Thanks for taking this into consideration.

    13 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  12. ACP functionality with Automatic Client Upgrade

    ACP functionality with Automatic Client Upgrade - it would be nice if the automatic client upgrade would utilize the deployment methods available to alternate content providers to reduce WAN impact

    12 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  13. change automatic agent upgrade behaviour

    currently using the automatic client upgrade process on servers causes the SCOM agent to be stopped ahead of the upgrade causing hundreds of SCOM alerts that then need closing or investigating. The option of "don't upgrade servers" still causes the SCOM agent to be stopped.

    Either provide the option not to stop the SCOM agent during client upgrade or honour the "don't upgrade servers" check before you stop the SCOM agent.

    12 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    3 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  14. Filter discovery based on AD Attributes

    Add the option to filter out objects based on attributes.
    examples:
    where "Operating System Name" -notlike "%2003" and"Operating System Name" -notlike "%5.1" and -notlike "%OSX%"
    where "Description" -notlike "%Physical%"
    Where "OrganizationalUnit" -ne "OU=Disabled Objects,DC=contoso,DC=com"

    it might delay the scan for each object and cause the discovery to take more time, but on the other hand make it more useful and stop discovering unwanted objects to the DB

    12 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    3 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  15. Client Push installation status in ConfigMgr console

    It would nice to have a client push installation status in the console. We already have client installation status messages (FSP), so why not display them in the console? As a consultant I always see a disappointment in the admins faces when I try to explain that they have to wait for the client flag, search client logs or use reporting for client installation status.

    11 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    2 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  16. Do not enforce software apps or packages at shutdown

    Client should not enforce any application or package when shutdown is initiated. It can cause delayed shutdown on few occasions which is not suitable.
    Client agent should be able to differentiate a user logoff and a logoff caused by shutdown.

    10 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  17. Client does a full uninstall and forces deletion of CCM,CCMSetup and CCMCache directories

    On SCCM CB 1702
    Currently when you do:
    A client push from the Console and select ā€œUninstall firstā€
    A manual CMSetup /uninstall
    Neither will fully delete all 3 directories, leaving corrupted SQLCE/SDF files ( there may be others , but you get the idea)
    I have had to resort to a rough script to meet my goals
    http://britv8.com/powershell-sccm-client-sledgehammer-aka-reset-cmclient/
    A switch to nuke from orbit would be very useful in GUI and for CCMSetup

    10 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  18. Fix this problem Software Center not working after SCCM Client update from 5.00.8540.1007 to 5.00.8540.1611

    Fix this problem Software Center not working after SCCM Client update from 5.00.8540.1007 to 5.00.8540.1611 also the clients are not upgrading properly. You have to run a repair to get the ner client to finish installing.

    https://social.technet.microsoft.com/Forums/en-US/98f762ac-6367-4705-a2b4-b6af2ee844a7/software-center-not-working-after-sccm-client-update-from-50085401007-to-50085401611?forum=ConfigMgrAppManagement

    10 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  19. AD forest discovery fails with "unexpected exception"

    AD forest discovery fails and does not continue parse through the other forests after and "Discovery is being aborted due to an unexpected exception".

    We would like to see where the discovery sees that it cannot contact or reach any given forest but is able to continue with the other forests to collect the data.

    10 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  20. Azure Automation runbooks during task sequence

    Implement a similar MDT integrated feature as executing Orchestrator runbooks but for Azure Automation runbooks during task sequence.

    10 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base