Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice - Update: Microsoft will be moving away from UserVoice sites on a product-by-product basis throughout the 2021 calendar year. We will leverage 1st party solutions for customer feedback. Learn more

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we can’t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the 🙂 button in the top right corner and choose “Send a Frown”. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer – our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Allow the Client Upgrade to be performed outside maintenance windows

    We would like the Client Upgrade feature to allow the client to be upgraded outside of maintenance windows but also give the option to only install when no user is logged in, like deploying Applications allow.

    491 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    under review  ·  26 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriate…  ·  Admin →
  2. Emergency/Immediate halt or pause of a software deployment then resume a software deployment when needed.

    In SCCM, there should be a way to stop or discontinue a software deployment should there be an emergency or issue and then resume the deployment when desired. For example, if software has been deployed to the environment and in an event of an emergency or major issue, SCCM should allow the administrator to stop or pause the software deployment in real time, resolve the issue then restart the software deployment again. Ideally, this would accomplish in one push of a button. Unlike now, the administrator goes and deletes the deployment and recreates the deployment again leaving the inability to…

    174 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    planned  ·  9 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriate…  ·  Admin →
  3. Change target computer mapping for state migrations (USMT)

    Please make it possible to change the target computer when using state migration points as a means of transferring user data to one pc to another.
    The scenario would allow the backup (scanstate) of the old pc data, utilizing all positive aspects of SMP (centralized, encrypted, storage based on boundaries). IT could then later set target computer, which may not be known at the time the data gets saved.
    Ideally this should be possible in the admin console by “editing” the state item to map to a new computer, just after it has already been created. “Late mapping” so to…

    137 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriate…  ·  Admin →
  4. More criteria for client certificate selection

    Currently the selection criteria when more than one certificate is available are limited to the options “Client authentication capability”, “Certificate Subject contains string”, “Certificate Subject or SAN includes attribute”. This really limits the usability of the feature.
    It would be great if there are additional selection criteria like “Issuer” or “Certificate Template”.

    118 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    8 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriate…  ·  Admin →
  5. The ability to tell an SCCM client to IGNORE specific NICS for site determination or SCCM Client communications

    The ability to tell an SCCM client to IGNORE specific NICS for site determination or SCCM Client communications.

    We have a number of clients that are multi-homed, the SCCM client is often choosing interface that cannot communication with the SCCM infrastructure to determine site membership.

    Our clusters fall into this category. 'secure web application servers' that have a "Client Network", "Admin Network", "Backup Network" and "Management Network" connections.

    May something similar to the NOSMS file, that will tell the client to not use specific interfaces but continue to inventory, configure, etc.

    113 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Noted  ·  3 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriate…  ·  Admin →
  6. Allow Users to defer installation until some date/time during Enforcement Grace Period

    When users receive notification of upcoming required deployment, allow users a 4th option to defer install date to be sometime during grace period. This could be a date input field with a drop down calendar. Available dates should be between deadline and end of grace period.

    The notification would have 4 options:
    1. Install Right Now
    2. Install After Business Hours
    3. Defer Install on a specific date during grace period <-- This being new
    4. Snooze notification

    Additionally, when notification appears for deferred install date...user can choose a new deferred install date as long as the user is within…

    100 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriate…  ·  Admin →
  7. AD System/User discovery on disabled accounts

    SCCM is not synchronizing disabled accounts, so it is not synchronizing the change in the UserAccountControl-attribute, so from SCCM perspective every machine/user is active. This creates problems e.g. in Software Asset Management since collections can’t select AD active accounts only. SCCM should synchronize changed attributes or at least UserAccountControl of AD disabled accounts if the account exists in SCCM

    97 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    5 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriate…  ·  Admin →
  8. AD Group discovery discovering group members

    AD Group discovery automatically discovers all computers and users that are members of the group (and nested groups). Sometimes it is not desired, as we choose what computers/users we want to discover via AD System/User Discovery. AD Group discovery should update group membership information for existing resources in the site. Or, ideally, provide an option to choose if we want to also discover group members, or not.

    97 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    9 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriate…  ·  Admin →
  9. More Intelligent Client Cache

    With SCCM 2012 we got the single instance store on the back end which reduces the need for storage significantly on the server side but on the client side there's no optimization whatsoever.
    If you for example have 2 applications or deployment types which are using the same or almost the same content they are downloaded both separately. This has a negatively impact on the disk space you need to reserve for the client cache but also on the bandwidth used to download almost twice the same content. I believe this can be done better.
    Many folks had to configure…

    95 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Noted  ·  4 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriate…  ·  Admin →
  10. Client Upgrade via Software Updates

    Each branch update should offer an MSP for the CM client or offer the client as a software update so that we can more easily stay current with the latest client. When we had CUs in software updates we stayed current all the time. But these full MSI installs for the client slow us down considerably.

    89 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    4 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriate…  ·  Admin →
  11. AD System Discovery - Skip the DNS Check Please!

    Please add a check box which would enable me to have the DNS check skipped during computer system discovery. There are situations when a system may not resolve in DNS from the CM server, however I would still like to have the attribute data (LastLogon, pwdLastSet, etc) from Active Directory updated by the discovery process regardless of the DNS check. Currently these values are not updated if the system is not found.

    80 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Client deployment and discovery  ·  Flag idea as inappropriate…  ·  Admin →
  12. Make WOL Addressdata configurable

    For our environment it would be great if we can specify the IP-address where the Packets are send to. Because we use Switches with 802.1x the Computer is not in the same vlan that it is when it runs. Because of "control-direction in" the packages of the isolate-vlan will be broadcasted if the device is not authenticated. If we can specify the destinationadress, we can set the address to the network-broadcast of the isolate-network and the packages will be delivered correctly by routers and switches. This is already working with other tools.

    73 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriate…  ·  Admin →
  13. Add firmware property to Win32_Diskdrive in hardware inventory

    We have had a number of cases where old firmware versions of SSD drives caused computer failures - so being able to report on these is important.
    OOTB the Win32_DiskDrive class is available but doesn't include the firmware property.
    This means you need to add a custom class to enable discovery of this data.
    Can we extend the existing class to have the firmware able to be enabled without any customization?
    More info on an unsupported way to achieve the same result: https://timmyit.com/2017/03/13/hardware-inventory-disk-name-and-firmware/

    70 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriate…  ·  Admin →
  14. Auto Client Upgrade – possibility to use default boundary/fallback DPs and ignore maintenance Windows

    The auto client Upgrade would be a nice feature if the admin would have more possibilities to configure it. Actually the feature can’t be used for clients which has no matching boundary or has got a maintenance window. It is not possible to use the feature for the client deployment for all clients in the environment if the fallback option or a maintenance window is used. So it would be helpful for the client agent update process, to implement two additional features.

    • Allow clients to use distribution points from default site boundary group
    • Ignore Maintenance windows and force the installation.
    62 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriate…  ·  Admin →
  15. Remove Custom Discovery Data

    When creating custom discovery data using the smsresgen class there is no way to remove this from the discovery related tables in ConfigMgr. Since there is a supported way to add this data, there should be a supported way to remove it. This is necessary as a rollback option, to return ConfigMgr to its default state, before the custom discovery data was added.

    60 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Noted  ·  1 comment  ·  Client deployment and discovery  ·  Flag idea as inappropriate…  ·  Admin →
  16. Wake-up proxy support for 802.1X networks

    In our enterprise we have quite a few locations where 802.1X is impelemented, e.g. networks port-based network access control and/or VLANs. Some locations even use DHCP snooping.

    We would like to implement SCCMs wake-up proxy feature in these locations but it is not currently supported. Also, network administrators are concerned about the IP-to-MAC mapping (MAC flapping) feature used in wake-up proxy.

    Please provide us with wake-up proxy support that will work on any type of network.

    54 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriate…  ·  Admin →
  17. Improve Client Upgrade Mechanism

    There is SCCM CB 1806 (5.0.8692.1509) with the update "kb4462978" in the console installed.
    When using automatic upgrade and package deployment to provide CM client version upgrades,
    From the distribution point, although "client.msi" can be acquired, if "configmgr 1806-client-kb4462978-x64.msp" can not be acquired for some reason, a scenario occurs that results in "5.00.8698.1008" version did.
    If the MSP file can not be obtained, CM client version upgrade is expected to fail, but the result is not "5.00.869. 1509" but the "5. 08. 692. 1008" version.
    Success itself is a problem. The administrator misunderstands that the version upgrade of the CM…

    49 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriate…  ·  Admin →
  18. Azure AD Group Discovery - Discover Intune Enrolled Devices

    Today in the Modern workplace of Autopilot provisioning; Organizations decide to keep everything on Azure Active Directory (Device Identity and User identity) with co-management capabilities.

    Currently Azure AD Group Discovery does support to discover only cloud based resources.. But to enable Advanced deployment targeting; it would be better to enable these discovery methods.

    (i) Able to discover Hybrid Users as well not only for Cloud Users
    (ii) Able to discover AAD Joined devices through Device Discovery especially Intune and Autopilot enrolled.

    Through this; organizations will be able to create SCCM Deployments with Device and User Group Membership through Advanced customized…

    47 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Client deployment and discovery  ·  Flag idea as inappropriate…  ·  Admin →
  19. Add option to exclude containers/OUs from Group Discovery

    Here’s the problem. Systems exist in the Domain Computers group and other groups, so any recursive discovery of groups for the domain will put the partial system discovery back in the system.

    https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/configure-discovery-methods#bkmk_config-adsd
    Starting in version 1806, select subcontainers (and/or OUs?) to exclude from this recursive search. This option helps to reduce the number of discovered objects. Select Add to choose the containers under the above path. In the Select New Container dialog box, select a child container to exclude. Select OK to close the Select New Container dialog box.
    Tip
    The list of Active Directory containers in the Active…

    44 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriate…  ·  Admin →
  20. Check ccmexec service health to avoid stuck SCCM agent based on long sleep/hibernate usage

    Issue:
    SCCM clients get stuck after a while when devices use only sleep/hibernate mode instead of restart. The ccmexec service still show running but logs are not updated anymore and not reporting at all. Only killing service and restart solve the problem. Two times showed during MS cases.
    Idea: Improve Client health to check for instance once per day the health of ccmexec service and logs timestamp and restart service if required.

    41 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriate…  ·  Admin →
← Previous 1 3 4 5 10 11
  • Don't see your idea?

Feedback and Knowledge Base