Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice - Update: Microsoft will be moving away from UserVoice sites on a product-by-product basis throughout the 2021 calendar year. We will leverage 1st party solutions for customer feedback. Learn more

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we canā€™t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the šŸ™‚ button in the top right corner and choose ā€œSend a Frownā€. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer ā€“ our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Migration Wizard filter by security scope

    The migration wizard needs several improvements:
    Allow for filtering by source hierarchy security scope - We use security scopes for all RBA settings, but when importing objects I have to assign the same scope to all objects which is impractical when importing thousands of objects. There is no practical way to only select items with the same scope from within the wizard either as scope isn't displayed.

    Other improvements:
    Allow for resize of the wizard
    Allow for filtering of objects
    Allow for multi-select of objects in the available objects pane (shift-select)

    3 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  2. Use IIS for RestfulAPI Admin Service

    Use an IIS web application to handle the Admin service queries and calls instead of using the SCCMProviderGraph.exe. This would allow better control of the Admin service and make it more consistent with the other CM services. This would also allow the admin service to handle more queries and allow it to be a webservice that can be used by endpoints for querying live data from CM. Right now the Admin Service cannot handle thousands of connections to it.

    2 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  3. Make SCCM Database Page Compression Check Enabled Part of Pre-req check

    Just upgraded from 1910 to 2002 and the upgrade failed and had to open a support case. Bottom line our SQL DBA made unauthorized changes to SCCM database and enabled PAGE compression on 370 tables in the SCCM database.

    Please add to the pre-req check the running of this SQL query if any tables are set to PAGE data compression fail the pre-req.

    SQL to Check: SELECT t.name AS tablename,

       i.name AS indexname,
    
    p.data_compression_desc

    FROM sys.tables AS t
    INNER JOIN sys.indexes AS i

     ON t.object_id = i.object_id
    

    INNER JOIN sys.partitions AS p

     ON i.object_id = p.object_id
    
    AND i.index_id = p.index_id
    ā€¦
    0 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  4. Approved workstations / servers for management

    Now that we can see connected consoles in Configuration Manager, then the next step should be approved servers or workstations for management only.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  5. Allow Site system proxy to be configured as Winhttp proxy when we enable PullDP to fetch the content from CDP

    Hello, When we try to configure the PullDP to use CDP as Source, the pullDP only uses the proxy configured on Winhttp service, neither the proxy configured in site system property or the Configmgr control panel applet are used. Seems at moment the admin has to configure Winhttp proxy manually to allow the pullDP to get the content from CDP, whereas this should be handled by sccm, whenever the Pulldp is being enabled in the console, the proxy configured on the Site system props has to be applied in the winhttp service on the system context as well.

    Got toā€¦

    7 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  6. Upgrade SCCM Order server roles

    When updating the infrastructure, the server update order by selecting the servers to put first.
    At a minimum, start with the infrastructure servers:
    - Connection Point Service
    - Provider
    - MP
    - ...

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  7. Hotfix to address query that is part of stored procedure "spTask_SUM_UpdateStatusSummarizer" which is causing CPU spikes on Primary site

    Query that is part of stored procedure "spTaskSUMUpdateStatusSummarizer" is causing CPU spikes on Primary site. Provide hotfix or a way to schedule summarization on a specific day.

    2 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  8. MBAM integration: Support non-HTTPS infrastructures

    At present time (MECM 2002) integrated MBAM support is only available for infrastructures in HTTPS mode (a.k.a. Native Mode).
    Since most of the customers most likely operate their SCCM/MECM in HTTP mode, we request the support of integrated MBAM in HTTP mode (a.k.a. Mixed Mode)

    11 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  9. Allow the exclusion of security groups or OU's in Group Discovery

    The system discovery is great but still allows for unwanted systems to be discovered within group discovery. Group discovery is needed to create query based collections based off of AD groups. Allowing Group Discovery Exclusions would be very beneficial to exclude non windows systems that are inAD.

    3 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  10. raise base .NET Framwork of CM from 4.0 to 4.6.x

    currently all file system operations only accept filepaths with maximum length of 256 chars which is related to the used .NET Framework within CM.
    Starting with .NET 4.6 this limitation is now raised to 32.767 chars which is very usueful if you for eample manage driver and driver packs, applications and so on per script and file systems within a domain network. (Servernames FQDN could be longer than 8 chars in our case at minumum 30 chars)

    10 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    4 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  11. In-console update - add reporting step for updating boot images

    When you run the in-console updates the boot images are updated but the step is not reported which happens after "Start WMI". Problem is you get a delay of 10-15 minutes before the next step. If you are monitoring the cmupdate.log file you can see the activity but no where else.

    0 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  12. Distribution Point with Network Bandwidth Limitation

    Hi Team,

    Based on the below article, there seems to be no control on distribution point rate limit in SCCM Client or Server DP.

    https://www.systemcenterdudes.com/dp-network-bandwith-limitation/

    For an instance, If the company wants to throttle the package transfer from SCCM primary site to remote ditrbution point at 10% available bandwidth between the specified duration. If the WAN bandwidth for the location is 10 Mbps then SCCM rate limit feature use the % you specify as to when it can use 100% of the available bandwith. In my example, Iā€™m telling SCCM to use 100% of the available bandwith 10% of theā€¦

    2 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  13. Add Maintenance Mode to all (or most) site roles

    I know of a few environments that set up roaming User state migration points for mass upgrades/hardware refreshes, or have an MP offline here and there. When installing a configuration manager update, site servers that are offline hold up the process. From what I understand, DPs in maintenance mode are "skipped over" until they come back online and then are upgraded. Can this same sort of concept be expanded to other site system roles as well?

    5 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  14. Add site setting to Automatically enable/disable maintenance mode as DPs go offline and come back online

    Currently we run a powershell script every half hour that pings all our DPs and places any that dont respond to a series of 3 pings with a 45 second wait between them into maintenance mode. This script also takes any DPs currently in maintenance mode that do respond to a ping out of maintenance mode. Can this be integrated into the console? Seems like most of the code base for this is already there with the MP showing online status for clients in the console (would obviously have to handle non-managed DPs as well).

    2 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  15. Ability to view and export boundaries with Network and Subnet Mask information

    Need a method to view and export the boundaries with all of the information entered at the time of creation. The inability of viewing and validating this information makes troubleshooting very difficult.

    3 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  16. FIX Bitlocker for MPs in Untrusted Forests

    FIX Bitlocker for MPs in Untrusted Forests - We use SCCM across untrusted forests. Upon upgrading to SCCM 1910 and implementing the integrated Bitlocker Management (integrated MBAM) we cannot install the Bitlocker websites on the MPs in the untrusted forest.

    4 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  17. Service Connection Tool - don't overwrite log after each run

    By its very nature the ServiceConnectionTool requires several runs in order to fully complete its job. Prepare ā€¦ export ā€¦ connect ā€¦ import. Each run of the tool overwrites the log file.

    It would be preferable (imho) that the tool appended to the log file instead, so that a full record of the entire offline transaction is available.

    Thanks in advance, and you're welcome.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  18. ADK Presence check on Remote SMSPROVIDER in SCCM CB Upgrade Setup

    MS Case : 17052664 >> Post upgrade of SCCM CB 1906 we realised that one of remote SMSPROVIDER server was not working properly. This remote SMSPOVIDER never had ADK installed on it since SCCM infrastructure was setup. Error never reported in the past in any upgrade but it stopped working post successful upgrade of 1906. In order to fix this issue in future it should be part of Prerequisite check in upgrade setup.

    7 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  19. PreReqCheck for WindowsManagementInstrumentation Service Dependencies

    Would be nice to have a PreReqCheck that checks for Services that depend on WindowsManagementInstrumentation (Winmgmt). If other Services are detected than the ones coming with Windows (like TrendMicro TMListen), log a warning, that this may interfere with Setup, Upgrades and Site Resets, if the Service cannot be stopped the normal way (i.e. because AV TamperProtection requires a Password to stop it). Seen several Environments, where this brought Maintenance to fail or take uneeded Long. The warning should inform, that the Admin Needs to make sure, that the Service can be stoped, or to stop it by himself before theā€¦

    2 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  20. Use a PKI certificate for the SQL Service Broker (SSB) instead of a self-signed certificate.

    Some enterprises are disabling the use of SHA-1 certificates in their environment. To avoid using a SHA-1 certificate for the Data Replication Service (DRS), you must move to SQL 2017 where the self-signed certificate defaults to SHA-256. The use of a PKI certificate would provide more flexibility/security going forward.

    6 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base