Microsoft

System Center Configuration Manager Feedback

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building System Center Configuration Manager, though we can’t promise to reply to all posts.

Standard Disclaimer – our lawyers made us put this here ;-) Please note that the System Center Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please do not send any novel or patentable ideas, copyrighted materials, samples or demos which you do not want to grant a license to Microsoft. See the “User Voice Terms of Service” link below for more information.

How can we improve Configuration Manager?

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Make automatic client upgrade more intelligent to not break other running installations

    Right now, the automatic Client upgrade scheduled Task is not aware of any running installations. So if appenforce.log shows a running Installation and at the same time the randomly timed scheduled tasks kicks in, the Installation cannot finish without error and will randomly leave the Installation or the SCCM Client itself in a unhealthy state. A reinstallation is the only way out.

    Repro steps
    - Activate automatic Client Upgrade in Hierarchy settings
    - Exclude some test clients from automatic client upgrade
    - Create an Application with a deploymenttype using a custom script
    - As the script, use a batch file…

    161 votes
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      I agree to the terms of service
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      3 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
    • Client Push Alternative

      Integrate an alternative for the client push account within SCCM. Rather than having an account which requires administrator access across all workstations and servers, allow alternatives such as LAPS (Local Administrator Password Solution).

      You could specify the account named used by LAPS (i.e. localadmin) and have SCCM obtain and then authenticate using the LAPS password for each individual machine.

      105 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        I agree to the terms of service
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        5 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
      • More Intelligent Client Cache

        With SCCM 2012 we got the single instance store on the back end which reduces the need for storage significantly on the server side but on the client side there's no optimization whatsoever.
        If you for example have 2 applications or deployment types which are using the same or almost the same content they are downloaded both separately. This has a negatively impact on the disk space you need to reserve for the client cache but also on the bandwidth used to download almost twice the same content. I believe this can be done better.
        Many folks had to configure…

        83 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          I agree to the terms of service
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          Noted  ·  3 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
        • Allow the Client Upgrade to be performed outside maintenance windows

          We would like the Client Upgrade feature to allow the client to be upgraded outside of maintenance windows but also give the option to only install when no user is logged in, like deploying Applications allow.

          52 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            I agree to the terms of service
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            5 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
          • Retain users settings in Software Center. i.e. Business Hours, after client upgrade.

            When ever the client is upgraded our users have to reset their Business Hours in Software Center. This is extremely difficult in a 60000+ environment to get the communication out. Why can't the users settings in the client upgrade process be retained?

            50 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              I agree to the terms of service
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
            • Client Upgrade via Software Updates

              Each branch update should offer an MSP for the CM client or offer the client as a software update so that we can more easily stay current with the latest client. When we had CUs in software updates we stayed current all the time. But these full MSI installs for the client slow us down considerably.

              41 votes
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                I agree to the terms of service
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                3 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
              • Auto Client Upgrade – possibility to use default boundary/fallback DPs and ignore maintenance Windows

                The auto client Upgrade would be a nice feature if the admin would have more possibilities to configure it. Actually the feature can’t be used for clients which has no matching boundary or has got a maintenance window. It is not possible to use the feature for the client deployment for all clients in the environment if the fallback option or a maintenance window is used. So it would be helpful for the client agent update process, to implement two additional features.

                - Allow clients to use distribution points from default site boundary group
                - Ignore Maintenance windows and force…

                34 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  I agree to the terms of service
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                • Wake-up proxy support for 802.1X networks

                  In our enterprise we have quite a few locations where 802.1X is impelemented, e.g. networks port-based network access control and/or VLANs. Some locations even use DHCP snooping.

                  We would like to implement SCCMs wake-up proxy feature in these locations but it is not currently supported. Also, network administrators are concerned about the IP-to-MAC mapping (MAC flapping) feature used in wake-up proxy.

                  Please provide us with wake-up proxy support that will work on any type of network.

                  33 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    I agree to the terms of service
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                  • Limit Client Push Accounts by Collection

                    To maintain consistency with Microsoft's Securing Privileged Access guidelines, an option to limit client push accounts to a specific collection would be ideal. This collection can further be limited to specific machines, specific domains, etc. For example, a client push account that is intended for Tier1 systems should not be used for Tier2 systems. By having the option to limit to a collection, a Tier1 client push account can only be used when performing client push on Tier1 systems. The same example applies for Tier0 versus Tier1 and Tier2.

                    Reference: https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/securing-privileged-access-reference-material

                    32 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      I agree to the terms of service
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                    • Combine ClientPatch and Patch property

                      The outdated ClientPatch folder in the 'Configuration Manager Client Package' is unsupported, however it is a great combination for retrieving from a local DP (leveraging the /mp-option to retrieve content based on boundaries) and getting the patch installed.
                      Considering that CCMEval also reruns with the last command-line used the availability of a ConfigMgr patch is vital (otherwise a 1635 error is generated if the new installation attempt can't access the MSP-file) perhaps the supported Patch-property and the ClientPatch-concept can be combined into a new supported way of deploying patches?

                      The scenario would be as follows;
                      CCMSetup detects that there is…

                      29 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        I agree to the terms of service
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        Noted  ·  1 comment  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                      • Emergency/Immediate halt or pause of a software deployment then resume a software deployment when needed.

                        In SCCM, there should be a way to stop or discontinue a software deployment should there be an emergency or issue and then resume the deployment when desired. For example, if software has been deployed to the environment and in an event of an emergency or major issue, SCCM should allow the administrator to stop or pause the software deployment in real time, resolve the issue then restart the software deployment again. Ideally, this would accomplish in one push of a button. Unlike now, the administrator goes and deletes the deployment and recreates the deployment again leaving the inability to…

                        29 votes
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          I agree to the terms of service
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          3 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                        • Client Push by OU

                          Having the ability to use Client Push more granularly would be awesome. We have about 6 domains, and multiple OUs are defined in System Discovery, yet I don't want Client Push enabled on them all, so it is currently disabled. Maybe having an option in the Discovery area, for an OU that is added (right where it says "Search AD Groups and Search Child containers") that enabled Client Push on that discovered OU. Or More granular settings on Client Push itself, maybe a small GUI attached to it

                          28 votes
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            I agree to the terms of service
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            Noted  ·  3 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                          • WMI Fix integrated with SCCM Console

                            WMI Fix integrated with SCCM Console and improve client installation description error.

                            21 votes
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              I agree to the terms of service
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                            • When configuring cache size via client settings - cache cannot be deleted

                              When using the new option in 1606 branch for configuring client cache size - the options to delete cache from the client's size is grayed out.
                              either it's by design or not - it blocks the reason to use this feature as deleting cache is one of the most basic troubleshooting tasks for deployments and it is not possible to be done unless deploying a custom script...

                              20 votes
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                I agree to the terms of service
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                                3 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                              • Improve client auto upgrade options for servers

                                Enhance site auto upgrade option for servers. Provide the ability to control the schedule for server operating system client upgrade using the auto upgrade feature. Server changes in production fall under change management control. It would be great to be able to specify when the upgrade will take place so that we can align to the change process. So include schedule option for servers and collection selection

                                19 votes
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  I agree to the terms of service
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                  3 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                                • More criteria for client certificate selection

                                  Currently the selection criteria when more than one certificate is available are limited to the options “Client authentication capability”, “Certificate Subject contains string”, “Certificate Subject or SAN includes attribute”. This really limits the usability of the feature.
                                  It would be great if there are additional selection criteria like “Issuer” or “Certificate Template”.

                                  19 votes
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    I agree to the terms of service
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    2 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Include seperate client push settings for workstations and servers

                                    We would like the ability to have seperate client push settings for Workstations vs Servers, specifically the ability to have seperate installation properties.

                                    16 votes
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      I agree to the terms of service
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                      4 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                                    • Force Client Deployment on metered network

                                      We have several users who are ALWAYS on metered networks and will never get client updates.

                                      The client deployment currently does not honour the option "Client Setting - Specify how clients communicate on metered network connections".

                                      We need an option to override it for manual client deployment / update as well. (Force install checkbox doesn't work)

                                      Setting the connection to "not metered" in Windows 8.1/10 doesn't work when a 3rd party connection software is used and doesn't work at all for TCT Mobile LTE sticks so this is not a solution.

                                      14 votes
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        I agree to the terms of service
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                        8 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                                      • Please do not install Silverlight by default in vNext

                                        Please do not install Silverlight with ConfigMgr-Client by default in vNext. The new Software Center with the integrated application catalog don't need Silverlight.

                                        13 votes
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          I agree to the terms of service
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                          3 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                                        • Certificate selection tool

                                          I think a simple certificate selection tool for clients would be really handy. I am thinking in exactly the same way as momcertimport.exe in SCOM where you can run the exe either as GUI or cmd line and choose a specific certificate to use.
                                          As we know, current certificate selection is not fool proof and can be very tricky when multiple certificates are installed on one device. A simple certificate picker or override tool would assist massively when dealing with HTTPS environments, particularly in DMZs. Numbers are often much smaller and we are dealing with the final 5% which can…

                                          13 votes
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            I agree to the terms of service
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                            1 comment  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                                          ← Previous 1 3 4
                                          • Don't see your idea?

                                          Feedback and Knowledge Base