Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice - Update: Microsoft will be moving away from UserVoice sites on a product-by-product basis throughout the 2021 calendar year. We will leverage 1st party solutions for customer feedback. Learn more

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we canā€™t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the šŸ™‚ button in the top right corner and choose ā€œSend a Frownā€. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer ā€“ our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. blue arrow instead of green when connected with CMG/ICMB

    When clients are connected with CMG or ICMB make the green icon a different color, like blue for instance. Since we can't manage devices the same way when they are connected through the cloud, it would help knowing this by simply having a different color.

    4 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Site deployment and infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  2. SCCM Maintenance mode

    SCCM would benefit to have a setting to put the SCCM infrastructure into a "maintenance mode" to avoid needless errors being reported.

    For example, when OS patching of Infrastructure servers occurs, we get errors such as (among others):

    Message ID 515 - Could not connect to registry hive HKEYLOCALMACHINE\Software\Microsoft\SMS on computer XXXX

    Message ID 1037 - Site Component Manager could not access site system "\xxxxxx"

    Message ID 600 - Failed to get a SQL Server connection. Either the SQL Server is not running, or all connections have been used.

    etc.

    I would like to see an time likeā€¦

    20 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Site deployment and infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  3. Add TCP KeepAlive opution when Site-to-Site Communication disconected

    TCP KeepAlive to port 4022 when Site-to-Site Communication disconected. And reporting result.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Site deployment and infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  4. Add Maintenance Mode to all (or most) site roles

    I know of a few environments that set up roaming User state migration points for mass upgrades/hardware refreshes, or have an MP offline here and there. When installing a configuration manager update, site servers that are offline hold up the process. From what I understand, DPs in maintenance mode are "skipped over" until they come back online and then are upgraded. Can this same sort of concept be expanded to other site system roles as well?

    5 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Site deployment and infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  5. ADK Presence check on Remote SMSPROVIDER in SCCM CB Upgrade Setup

    MS Case : 17052664 >> Post upgrade of SCCM CB 1906 we realised that one of remote SMSPROVIDER server was not working properly. This remote SMSPOVIDER never had ADK installed on it since SCCM infrastructure was setup. Error never reported in the past in any upgrade but it stopped working post successful upgrade of 1906. In order to fix this issue in future it should be part of Prerequisite check in upgrade setup.

    7 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Site deployment and infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  6. Maximum allowed Management Points for a Primary Site.

    We use a multitenant SCCM environment with clients/customers in untrusted forests.
    Because we target users, we also deployed the Management Point role in all untrusted forests.

    At this moment Configmgr only supports up to 15 management points per primary site coming from 10 in the past.

    We would like to see the maximum allowed management points per primary site bumped to a higher level.
    This will give us the ability to stay with a single primary site setup and avoid CAS.

    35 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    8 comments  ·  Site deployment and infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
    Noted  ·  djam responded

    How many would meet your need? 10 more? Or are we talking an order of magnitude?

  7. Distribution Point with Network Bandwidth Limitation

    Hi Team,

    Based on the below article, there seems to be no control on distribution point rate limit in SCCM Client or Server DP.

    https://www.systemcenterdudes.com/dp-network-bandwith-limitation/

    For an instance, If the company wants to throttle the package transfer from SCCM primary site to remote ditrbution point at 10% available bandwidth between the specified duration. If the WAN bandwidth for the location is 10 Mbps then SCCM rate limit feature use the % you specify as to when it can use 100% of the available bandwith. In my example, Iā€™m telling SCCM to use 100% of the available bandwith 10% of theā€¦

    2 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Site deployment and infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  8. Add site setting to Automatically enable/disable maintenance mode as DPs go offline and come back online

    Currently we run a powershell script every half hour that pings all our DPs and places any that dont respond to a series of 3 pings with a 45 second wait between them into maintenance mode. This script also takes any DPs currently in maintenance mode that do respond to a ping out of maintenance mode. Can this be integrated into the console? Seems like most of the code base for this is already there with the MP showing online status for clients in the console (would obviously have to handle non-managed DPs as well).

    2 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Site deployment and infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  9. FIX Bitlocker for MPs in Untrusted Forests

    FIX Bitlocker for MPs in Untrusted Forests - We use SCCM across untrusted forests. Upon upgrading to SCCM 1910 and implementing the integrated Bitlocker Management (integrated MBAM) we cannot install the Bitlocker websites on the MPs in the untrusted forest.

    4 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Site deployment and infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  10. In-console update - add reporting step for updating boot images

    When you run the in-console updates the boot images are updated but the step is not reported which happens after "Start WMI". Problem is you get a delay of 10-15 minutes before the next step. If you are monitoring the cmupdate.log file you can see the activity but no where else.

    0 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Site deployment and infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  11. SCCM software should cater for hostname change and OS Upgrade

    SCCM is a software deployment tools. It should support at least on hostname change or OS Upgrade.

    Ultimately, the software is a design for Enterprise usage.
    To redo entire setup just not feasible for a server hostname change.

    18 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Site deployment and infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  12. Use a PKI certificate for the SQL Service Broker (SSB) instead of a self-signed certificate.

    Some enterprises are disabling the use of SHA-1 certificates in their environment. To avoid using a SHA-1 certificate for the Data Replication Service (DRS), you must move to SQL 2017 where the self-signed certificate defaults to SHA-256. The use of a PKI certificate would provide more flexibility/security going forward.

    6 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Site deployment and infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  13. Speedup Site Reset during Upgrade and Maintenance

    When doing Inplace Upgrades of Sites or Maintenance of Sites that require Site Resets (like changing Active/Passive, moving SQL, ā€¦) it takes hours or days for the Site Reset to complete in complex Environments with Site Systems behind slow (low bandwidth, high latency) links. And the worst Thing About that is, that PXE mostly is down during that Phase until the reset is finished. I would appreciate to Speed that up, prio1 make PXE stay available during reset, prio2 only copy binaries over WAN links when needed (Upgrade) and maybe use WinRM for Controlling the remote Servers. Also making theā€¦

    2 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Site deployment and infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  14. Ability to view and export boundaries with Network and Subnet Mask information

    Need a method to view and export the boundaries with all of the information entered at the time of creation. The inability of viewing and validating this information makes troubleshooting very difficult.

    3 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Site deployment and infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  15. Service connection tool should validate the downloaded content.

    When Service Connection Point is offline (No internet) and you need to use the ServiceConnectionTool.exe this process should be as solid as possible.
    Had a case where the 1902 update where downloaded and imported to the SCCM 1810. Everything looked good. Installation started and went all the way to Install File step. Installation failed since the initial import did not include all prereq files in the redist -folder.

    This could have been avoided if there would be some kind of content validation e.g. after the download or during the import or during the pre-req check.

    There are different "manifest..xml" filesā€¦

    22 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Site deployment and infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  16. suport Group Managed Service Account gMSA same as in SC 2019 products

    gMSA is more secure and all customers request for it, System Center 2019 now support gMSA except Configuration Manager.

    17 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Site deployment and infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  17. Allow the downloading of the SCCM version upgrade hot-fix files

    Every time we have an upgrade to complete there hot-fixes to apply. The process at this time is to wait for SCCM to finalize the update process. Re-install the console, and then request Updates and Servicing to check in for an update then download this process can take a long time. Then we can sit and the hot fix to complete the job. Sometimes there multiple hot-fixes to apply.
    If there was the ability to download the hot fixes in advance this would cut the time on update date by 90 minutes in my environment.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Site deployment and infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  18. Service Connection Tool - don't overwrite log after each run

    By its very nature the ServiceConnectionTool requires several runs in order to fully complete its job. Prepare ā€¦ export ā€¦ connect ā€¦ import. Each run of the tool overwrites the log file.

    It would be preferable (imho) that the tool appended to the log file instead, so that a full record of the entire offline transaction is available.

    Thanks in advance, and you're welcome.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Site deployment and infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  19. PreReqCheck for WindowsManagementInstrumentation Service Dependencies

    Would be nice to have a PreReqCheck that checks for Services that depend on WindowsManagementInstrumentation (Winmgmt). If other Services are detected than the ones coming with Windows (like TrendMicro TMListen), log a warning, that this may interfere with Setup, Upgrades and Site Resets, if the Service cannot be stopped the normal way (i.e. because AV TamperProtection requires a Password to stop it). Seen several Environments, where this brought Maintenance to fail or take uneeded Long. The warning should inform, that the Admin Needs to make sure, that the Service can be stoped, or to stop it by himself before theā€¦

    2 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Site deployment and infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  20. SQL Usage rights comes along with SCCM license allows to setup SQL Always On AG ???

    My understanding is the SQL usage rights comes along with SCCM license will be Standard Edition only. Please correct me if I'm wrong. So does the SQL usage rights comes along with SCCM license allows to setup SQL Always On AG???

    As per below link, I could see that SQL usage rights of SCCM allows SQL Always On. But SQL Always on with SCCM requires Enterprise edition. This is were I'm confused, please help !!!

    https://docs.microsoft.com/en-us/sccm/core/understand/product-and-licensing-faq#bkmk_sql

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Site deployment and infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base