Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice - Update: Microsoft will be moving away from UserVoice sites on a product-by-product basis throughout the 2021 calendar year. We will leverage 1st party solutions for customer feedback. Learn more

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we canā€™t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the šŸ™‚ button in the top right corner and choose ā€œSend a Frownā€. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer ā€“ our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Report - What Specific Distribution Point a Client Downloaded a Package

    Would like to have a report that displays what Distribution Point a client

    • could download a package from (available DPs)
    • currently downloading from
    • finished downloading from
    14 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  2. User based maintenance windows

    When machines are being shared across different regions and departments it becomes difficult to manage maintenance windows as users have different usage requirements. Having a User MW might help manage this problem better. SCCM would first have to check if an active user was on a machine and if so use the "User MW" and then fall back to the machine MW is a user wasn't logged in. It should also be possible to have a user who has no MW. A client setting would also be required to disable this functionality on subsets of machines.

    17 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  3. If possible... it would be nice if you could push a Packages and/or Applications to a Device rather creating a Device collection

    If possible.... It would be nice to be able to push an Application and/or Package to a device rather than creating device collections. If this is possible I would love to know how to do this?

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  4. an improvement on clients

    it would be nice if MS could spend some time in improving the clients:

    • making them respond faster (receiving policies, deployments, and gather's information)
    • not to break all the time (it feels most of the time is spent troubleshooting clients issues)
    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  5. Azure AD Group Discovery - Discover Intune Enrolled Devices

    Today in the Modern workplace of Autopilot provisioning; Organizations decide to keep everything on Azure Active Directory (Device Identity and User identity) with co-management capabilities.

    Currently Azure AD Group Discovery does support to discover only cloud based resources.. But to enable Advanced deployment targeting; it would be better to enable these discovery methods.

    (i) Able to discover Hybrid Users as well not only for Cloud Users
    (ii) Able to discover AAD Joined devices through Device Discovery especially Intune and Autopilot enrolled.

    Through this; organizations will be able to create SCCM Deployments with Device and User Group Membership through Advanced customizedā€¦

    47 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  6. Create a discovery dashboard in monitoring node

    It would be helpful to have a dashboard which reports the length each discovery task takes: Grouped by Method, broken down by domain/scope.

    3 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  7. Client Push installation to pass on the /allowmetered connection option to the ccmsetup.exe to bypass metered connection error.

    Client Push installation to pass on the /allowmetered connection option to the ccmsetup.exe to bypass metered connection error.

    2 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  8. Exclude Virtual Cluster from System Discovery

    This request ( https://configurationmanager.uservoice.com/forums/300492-ideas/suggestions/8414520-exclude-virtual-cluster-and-ou-from-discovery ) was not fully completed, but it was marked as complete. People have been commenting that it is NOT done.

    We appreciate the addition of OU exclusion, but Virtual Cluster exclusion is also a big part of what we need!

    I believe most of us don't want to have to pile up our cluster objects into a junk OU just to exclude them. My AD is organized such that it makes far more sense to see these objects sitting with the real computer objects.

    Please review the request for Virtual Cluster exclusion as a separate requestā€¦

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  9. Support Mac OS 11

    Hello

    can you please support Mac OS 11.

    Thanks.

    4 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    2 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  10. Allow clients to update their own IP address into SCCM

    With many of our users working flexibly via VPN, hopping between sites etc. They may end up connecting back to our network multiple times per day and end up changing IP address frequently.

    DNS doesn't always update as quickly as we would like and therefore often when we try to perform client actions, DNS does not reflect the current IP address and client actions then fail.

    Could there be an option to allow a client to directly update SCCM with the client IP address to avoid delays in DNS catching up with current IP address?

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  11. Forest Cleanup - delete tombstoned forests and trusts

    I had a lot tombstoned forests and trusts that not exists anymore in following tables:
    ActiveDirectoryForestTrusts
    ActiveDirectoryForests

    Please clean up after xyz days automatically.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  12. Automatic Client Upgrade: Create Maintenance Window Type for Automatic Client Upgrade

    Similar to an existing post titled "Automatic Client Upgrade: Allow option to ignore maintenance windows", we too have servers in collections with defined Maintenance Windows but once all patching and reboots have occured, we have a low success rate on the auto client upgrades happening in the remaining timeframes - even though some of these have been tested with 3 additional hours tacked on for testing.

    Rather than trying to ignore the existing Maintenance Windows in the post mentioned, what would be even better for us would be to have a new Maintenance Window Type specifically for the Automatic Clientā€¦

    4 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  13. Make WOL Addressdata configurable

    For our environment it would be great if we can specify the IP-address where the Packets are send to. Because we use Switches with 802.1x the Computer is not in the same vlan that it is when it runs. Because of "control-direction in" the packages of the isolate-vlan will be broadcasted if the device is not authenticated. If we can specify the destinationadress, we can set the address to the network-broadcast of the isolate-network and the packages will be delivered correctly by routers and switches. This is already working with other tools.

    73 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  14. _SMSTaskSequence Should look at largest Local Drive

    _SMSTaskSequence designed to look at the largest drive but in the instances of Clusters, that largest drive could be a shared SAN. When the server reboots, it fails because it can not find the _SMSTaskSequence content as it is on the other failover cluster. Understand we can use variable SMSTSLocalDataDriveĀ  but the product should be looking for largest local drive as that does make sense in case of a large task sequence deployment to have that content copied to the largest local drive.

    3 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  15. Add Boundary intelligence

    It would be helpful to know if SCCM sees a machine or group of machines that do not belong to any boundary and show that result in the console or some sort of dashboard and be able to action on that. There does not seem to be any development on this as Boundary and Boundary groups seems to be static concepts with no intelligence for the administrator to leverage. Obviously there would still be some interaction from the administrators but perhaps some network intelligence concepts from appliances like the Citrix NetScaler would be helpful.

    3 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  16. Sccm reads windows security logs at startup

    The sccm client startup process is very heavy. On our machines we have a very demanding security baseline which gives us a huge windows security eventlog. Reading out this eventlog alone takes over 30 seconds at 25% CPU which makes the startup process of the computers even slower than it is. As we understand it SCCM reads pretty much the entire security log every time the service is started. Even if it's started twice in 30 minutes for whatever reason. We aren't sure what the point is of reading out 100MB of security logs, but it seems a waste. We'dā€¦

    3 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →

    Thank you for your feedback. Do you have user device affinity enabled in your environment? If you do, is it configured to automatically determine affinity? Changing user device affinity configuration may reduce this overhead.

    For more information, see: https://docs.microsoft.com/en-us/mem/configmgr/apps/deploy-use/link-users-and-devices-with-user-device-affinity

    We will consider looking into ways to improve this in the future.

  17. Allow adding read and execute access to the SCCM client install folder.

    Currently, a second shared folder has to be created and the client installer has to be copied to this folder. Everytime an update is performed to SCCM, the client has to be re-copied as well. Granting read and execute permissions are wiped out. Manual installation of the client is needed periodically for troubleshooting purposes and the extra steps to set it up are not helpful.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  18. Run Software Inventory in a seperate thread

    We often see systems where Hardware Inventory and Heartbeat are lagging because they are waiting for Software Inventory to finish.

    9 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  19. Full support for ECC Certificates

    Machines with an EEC client certificate can connect to the DP to download the content and install the agent but the client never registers with the site.

    once i suspected the ECC certs I was able to find thread on technet which confirms the same issue I was seeing
    https://social.technet.microsoft.com/Forums/en-US/cc9ec0ff-5998-4225-9ce1-2c7b5fe5677d/sccm-and-ecc-certificates-not-supported?forum=ConfigMgrDeployment

    32 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  20. Configure Active Directory Discovery Containers

    I would like to see some changes in the way containers are processed during discovery.

    1) I would like the ability to change the order and/or prioritize which containers are searched first. We have multiple forests, and it would be good to be able to set some to run before others.

    2) I would like to be able to establish multiple schedules for AD Discovery so that some containers can be run more frequently than others.

    3) I would like to be able to right click on a container and manually run discovery on that container only.
    4) Allow theā€¦

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
← Previous 1 3 4 5 10 11
  • Don't see your idea?

Feedback and Knowledge Base