Microsoft

System Center Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building System Center Configuration Manager, though we can’t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the ? button in the top right corner and choose “Send a Frown”. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer – our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the System Center Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Microsoft Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.

How can we improve Configuration Manager?

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Automatic approval of workgroup devices for certain collections

    If sccm is set to NOT auto approve workgroup devices it would be super if there was a function to auto approve devices added to certain collections. That way organizations could choose to auto approve certain machines based on collections and their membership rules instead of either auto approving ALL machines or NO machines.

    3 votes
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      2 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
    • Require Permissions for Client Push

      Provide the option for permissions that would disallow client push. We would like to provide access to users to manage SCCM but do not want them to be able to push the client from ConfigMgr. In our particular case, client push does not work with our network setup, so if someone attempts to do a client push, the process gets stuck. I can imagine some security reasons for this setting as well.

      2 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
      • Create custom TS Variables with values depending on return code

        While running a task sequence I would like to see the option to create a custom Task Sequence Variable and it's value depending on a return code from a running step (cmdline, PowerShell script, Application, Package). This variable can be used later on in the TS to run or skip specific steps.
        Think about additional reboot steps if a BIOS flash is performed (if no flash is performed you don't want a reboot). Currently I need to create and run a powershell script to make this happen.

        1 vote
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
        • Check for running .exe that need to be closed during "removals" and give the User the option to postpone

          Microsoft provided the ability to check for and close running applications during install operations. We would really like the ability to perform the same action during removals (and include a comment field to inform the user why these applications need to be closed).

          Example: Application X is currently running which halts the removal of application Y. It would be beneficial to detect these running applications, prompt the user to close (or force close after a set time), and allow the removal of application Y to continue.

          3 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
          • Improve logging and control of automatic client upgrades

            Automatic client upgrade feature works but is painfully slow (on a 10,000 client site it's taken 3 weeks to get to 88% upgraded) and contains no consolidated logging on the server side, so progress is hard to track. It would be great if this process could address pre-req issues more easily (i.e. .Net requirement), although that's likely a ccmsetup.exe issue.

            7 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              1 comment  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
            • Allow OSD or Application Deployment to Uilitize "Please Wait" Screen (see screenshot)

              There are times where it would be very helpful to basically lock the screen with a message to the end user to please wait for an application or maybe part of OSD to complete (see screenshot).

              This would be extremely helpful for deployments that occur at startup/logon/logoff/shutdown and would prevent the issue of installations being broken due to a user logging on and launching an application while an install is in progress or powering off the device because something is holding up the process.

              As an added bonus, customization of the message on this screen would be useful so we…

              2 votes
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                1 comment  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
              • Auto Client Upgrade – possibility to use default boundary/fallback DPs and ignore maintenance Windows

                The auto client Upgrade would be a nice feature if the admin would have more possibilities to configure it. Actually the feature can’t be used for clients which has no matching boundary or has got a maintenance window. It is not possible to use the feature for the client deployment for all clients in the environment if the fallback option or a maintenance window is used. So it would be helpful for the client agent update process, to implement two additional features.

                - Allow clients to use distribution points from default site boundary group
                - Ignore Maintenance windows and force…

                66 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  2 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                • Fix BUG SMS 429592 - Thin Client / embedded stuck in servicing mode.

                  Thin clients get stuck at the "This computer is being serviced" screen when the managed write filter is off and a deployment becomes suspended because the client agent realizes it does not have enough time left in it's maintenance window, but the maintenance coordinator cannot seem to effectively communicate with the write filter to abort the execution of the program or task sequence and enable the write filter and boot out of servicing mode. The work-around for this is to have no maint window or an exceptionally large one.

                  18 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                  • Allow Users to defer installation until some date/time during Enforcement Grace Period

                    When users receive notification of upcoming required deployment, allow users a 4th option to defer install date to be sometime during grace period. This could be a date input field with a drop down calendar. Available dates should be between deadline and end of grace period.

                    The notification would have 4 options:
                    1. Install Right Now
                    2. Install After Business Hours
                    3. Defer Install on a specific date during grace period <-- This being new
                    4. Snooze notification

                    Additionally, when notification appears for deferred install date...user can choose a new deferred install date as long as the user is within…

                    75 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                    • Make automatic client upgrade more intelligent to not break other running installations

                      Right now, the automatic Client upgrade scheduled Task is not aware of any running installations. So if appenforce.log shows a running Installation and at the same time the randomly timed scheduled tasks kicks in, the Installation cannot finish without error and will randomly leave the Installation or the SCCM Client itself in a unhealthy state. A reinstallation is the only way out.

                      Repro steps
                      - Activate automatic Client Upgrade in Hierarchy settings
                      - Exclude some test clients from automatic client upgrade
                      - Create an Application with a deploymenttype using a custom script
                      - As the script, use a batch file…

                      185 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        5 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                      • Move Client to new Active Directory Organizational Unit during reinstallation

                        While migrating our existing clients to windows 10 with a reinstall TS we need to move the Clients to another OU.
                        It will be very good for us to get this realised with during the TS with a special function. "Join Domain" will not work to move the existing client to another OU.

                        1 vote
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                        • Create "sysprep" for SCCM agent

                          Microsoft does not officially support the installation of the SCCM agent on template/image operating system. I need an officially supported process to create an instance from an image and have the SCCM agent work correctly with any site.

                          2 votes
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            2 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                          • Use Winrm to install SCCM Client

                            Add the possibility to use Wirm so securely push the SCCM Client instead of use a connection to the admin$ share.

                            6 votes
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                            • collection with a deployment

                              Run download computer policy automatically when a computer is added to a collection with a deployment.

                              0 votes
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                                0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                              • ZTIGather.log

                                I like you to remove or encrypt SCCM NAA username and password in the ZTIGather.log

                                its in clear text and a BIG security vulnerability *** it on ALL Client deploy from SCCM it store in C:\Windows\CCM\Logs...

                                1 vote
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                  1 comment  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                                • Update SCCM Client install to download and install the latest WUAgent

                                  Why does the SCCM client still download the 7.6.7600.256 for Windows 7 when the latest version is 7.6.7601.23453?

                                  Would be good when the sccm installs or upgrades that it attempts to install the latest version.

                                  1 vote
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Boundary Priority

                                    Please make available we can set a Priority on Boundary, for example:

                                    Standard Boundary ist a AD-Site and use DP1 and a Boundary with special IP Subnet for staging clients in the same AD-Site, use a override for use DP2 only.

                                    6 votes
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                      0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                                    • client issues in 1610

                                      We are facing issues with the new client in 1610. mainly it is very slow to load and returns errors at time. The service does not respond to restart calls. Finally, Sorting by status for installations does not work as expected.

                                      1 vote
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                        0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                                      • SMS Agent Host Startup Type - Client Setting

                                        There should be an option in the Client Settings to select the Startup Type for the SMS Agent Host. It takes a couple minutes for the agent to start by default since it's set to Automatic (Delayed Start).

                                        While I think that this should remain the default, it should be an option in client settings to switch this to a regular Automatic startup type.

                                        1 vote
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                          0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                                        • Limit Client Push Accounts by Collection

                                          To maintain consistency with Microsoft's Securing Privileged Access guidelines, an option to limit client push accounts to a specific collection would be ideal. This collection can further be limited to specific machines, specific domains, etc. For example, a client push account that is intended for Tier1 systems should not be used for Tier2 systems. By having the option to limit to a collection, a Tier1 client push account can only be used when performing client push on Tier1 systems. The same example applies for Tier0 versus Tier1 and Tier2.

                                          Reference: https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/securing-privileged-access-reference-material

                                          37 votes
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                            1 comment  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                                          • Don't see your idea?

                                          Feedback and Knowledge Base