Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice - Update: Microsoft will be moving away from UserVoice sites on a product-by-product basis throughout the 2021 calendar year. We will leverage 1st party solutions for customer feedback. Learn more

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we can’t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the 🙂 button in the top right corner and choose “Send a Frown”. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer – our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Microsoft 365 Apps Update fail to download by DownloadError = 30101 before client don't exhaust all content locations

    M365 Apps Update fails to download by DownloadError = 30101 when unable to download from peer cache source.
    The expected behavior is fallback to DP and continue to download even if fails to download from peercache, however an error occurs before fallback and client cannot continue to download from DP.

    The Peer Cache cannot be used effectively, so we request improvement.

    Enviroment

    ConfigMgr version 2006 , 2010 and 2103
    Microsoft 365 Apps Update in March, April and May.

    Repro Step

    1. Peer cache client's AlternateHandler begin to download.

    BeginDownload: contentID =750d04a4-8178-4cb6-9c72-f8bf2a096a7a and contentVersion=1 AlternateHandler

    1. Data Transfer Service download error from peer…
    24 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  2. Add Delivery Optimization and Connected Cache Monitoring to Endpoint Analytics

    An extra log workspace in azure is required to monitor delivery optimization. It would make sense to integrate the monitoring of DO and MCC into the endpoint manager. In addition, it would be helpful to get suggestions in which group do/mcc is not working well and something needs to be optimized.

    Endpoint Analytics would be the right place to collide the monitoring data with the other client data.

    Monitoring is the basis for building an efficient DO network.

    57 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  3. change request to support “Allow basic authentication (password is sent in cleartext)”

    Design change request to support WSUS option “Allow basic authentication (password is sent in cleartext)” within SCCM.
    From the MS support team I got the script BasicAuth.vbs to do this with an unsatisfying disclaimer: This script is not supported under any Microsoft standard support program or service.

    9 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  4. Install Servicing Stack Updates (SSU) Before Other Updates When User Initiated

    The Current Branch 2002 release introduced a feature to install SSUs first but only when triggered by the deadline.
    From the docs:
    "SSUs are installed first only for non-user initiated installs. For instance, if a user initiates an installation for multiple updates from Software Center, the SSU might not be installed first."

    A lot of work has been put into encouraging user-participation in the patching process. I want the user to decide when they're ready to install the updates and avoid situations where the deadlines impact their work. In those scenarios the behavior introduced in 2002 therefore not helpful.

    I…

    155 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    4 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  5. Add cleanup of WSUS update files to WSUS maintenance

    Consider adding cleanup of WSUS update files on default SUP to WSUS maintenance feature/capability. This would be similar to running “Unneeded update files” option from WSUS Server Cleanup Wizard on default SUP and it would facilitate cleanup of expired/declined third party update content from WSUS content location. This option could be made available only when third party updates are enabled and/or there are published third-party updates. The option could be added to either existing WSUS Maintenance options or as a Third Party Updates option in the UI that becomes available with other third party update options when third party software…

    40 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  6. Include "ODBC Driver for SQL Server" in Windows Server Update Services (WSUS)

    It would be great if Microsoft could include updates for the "ODBC Driver for SQL Server" (https://docs.microsoft.com/en-us/sql/connect/odbc/download-odbc-driver-for-sql-server) in Windows Server Update Services (WSUS)

    Thanks a lot for votes!

    24 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  7. Unified Write Filter Reboot Warning

    When the unified write filter is enabled on an endpoint and a deployment is received, users receive a warning for the reboot as defined below. However when the unified write filter is disabled, it would be ideal to suppress this warning for the reboot and reboot instantly as the UWF Servicing screen saver is present preventing users from logging in.

    We currently set the 'Client Policy' for 'Computer Restart' to 10 minute restart, but 2 minute final notification however this occurs before disabling the write filter, every time a software update needs a reboot regardless if the UWF is disabled…

    4 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  8. Possibility to update feature updates more often in ConfigMgr/WSUS

    When using feature updates to upgrade Windows 10 from one version to another there is no possibility to include cumulative updates to the feature updates (esd files). It is only possible if dynamic updates are enabled. It is also possible to offline service image files (.wim) but then you have to use a task sequence to upgrade Windows 10 from one to another version.

    When using feature updates instead of in-place-upgrade wim files it is necessary to get a possibility to do an offline servicing for feature updates (.esd files) or at least update them more often (every 2 months…

    7 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  9. Is there a way to remove all languages from OfflineUpdateExporter

    While the OfflineUpdateExporter respects approved/decline through WSUS from the documentation, can this be configured to also respect the language selections? The download of 3 office 365 approvals, with all others declined in wsus has taken over 24 hours (from an azure vm fully open to CDN etc). I would love to suggest this as an option to update offline systems that cannot reach the internet but after 24 hours and all the updates have not completed, cannot do so in confidence. It's almost quicker to simply download the new 0365 bits and redeploy.

    7 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  10. child SUP content version

    Currently a client receives an 'available' SUP list to select a SUP to sync from with the sproc MPGetWSUSServerLocationsWithBGR. This sproc requires a parameter called iContentVersion, which the client receives through machine policy and is the ContentVersion of the Primary SUP, even if the client is using a secondary SUP. The sproc however does not offer SUPs with lower ContentVersions, thus if the client's secondary SUP is at least 1 version behind its Primary's the current secondary (Boundary Group local) SUP won't be offered for the client. Also, if Fallback is enabled and due to the ContentVersion mismatch…

    26 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  11. Child SUP sync notification

    At the moment a child SUP syncs with the parent by receiving a notification file which is sent from the parent via standard file replication. This is sub-optimal because if other files like packages are already maxing out the enabled sender threads, or if the sender is limited or closed via sender settings, the child SUP sync will be delayed.
    Suggestion is to notify the child SUP via DB replication.

    26 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  12. orchestration groups should allow install of 'available' update deployments

    either when running orchestration manually, or automatically, orchestration group members should be able to install updates that are deployed as available, either by default or by an option

    7 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  13. Add ability to reset Orchestration Group

    Right now when a member of an Orchestration Group fails, it leaves the Orchestration Group as a whole in a failed state that won't recover until you manually press the Start Orchestration button. Resetting all the failed members won't clear the failed state of the group and any future updates will not orchestrate unless manually started.

    This is particularly frustrating as Security Intelligence Updates for Microsoft Defender will trigger orchestration. It also seems that update has an issue with reporting successful installation, so it fails to move on to the next server which will cause the whole group to timeout.

    5 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  14. SCUP has a package limit of 2GB

    SCUP has a package limit of 2GB built into the code:

    newItem.FileSize = Convert.ToInt32(new FileInfo(validPackageSource).Length);
    --- This is an Int32, and the max size of an Int32 is 2GB.

    This should be changed to either UINT or ULONG to allow for larger update packages.

    34 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  15. Provide a consistent deployment strategy for updating MS applications

    Different products teams decide how they will deploy there updates and various methods are needed to control deployments.
    Example: MS 365 Apps, Edge, AIP are available as software updates which is very good. OneDrive they ask you to go out to this site and check when the update will be available to the enterprise ring. https://support.microsoft.com/en-us/office/onedrive-release-notes-845dcf18-f921-435e-bf28-4e24b95e5fc0?ui=en-us&rs=en-us&ad=us. You then have to download it and deploy it before the date to stop it from pulling down from the internet. Teams no way to control it and no idea when it will update. PowerBi have to go out download and deploy it.…

    30 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  16. SCCM Report for from where client is downloading the content (DP, peer cache or delivery optimization, etc.)

    SCCM Report to identify content download source (DP, peer cache or delivery optimization, etc.)

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  17. Add Feature updates to SUG

    Add Feature updates to SUG
    Currently not able to edit membership of feature update and add to SUG
    This improves the ability to provide overall reporting for the update.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  18. Ability to add bios password to Dell third party updates so they install via SCCM

    We have setup and are using third party updates from the Dell catalog.
    we have this working very well BUT we are only using it for drivers as bios and firmware updates will not work because we are not able to add our bios password to the Dell updates. It would be nice to have the ability to get this fixed as most enterprises that use SCCM would have there workstations protected with bios passwords.

    4 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  19. baseutil.dll [Connection-Tool] Cannot be found 2103 (0x8007007E)

    baseutil.dll cannot be found [Connection-Tool] 2103 0x8007007E

    Uploading and downloading data is in progress. {fails =}
    Error: Prerequisites for this tool do not seem to be satisfied.
    Log: baseutil.dll cannot be found [when it's file #1] Copy it everywhere

    EVERYTHING IS TOO EMBILICALLY attached to MS {CLOUD}

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  20. Orchestration Groups is by far under supported

    • We need better ways of assigning devices to OG's
    • We need PS administration.
    • Or at least we need better WMI documentation

    There are some bugs:
    * when you reset OG settings for a client, the client's status is not updated)
    * we have OG's that are listed as "failed" but where all members are Idle,
    * we have OG's where all or a lot of the clients are "waiting" and have been for a long time, and nothing happens

    8 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
← Previous 1 3 4 5 27 28
  • Don't see your idea?

Feedback and Knowledge Base