Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we canā€™t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the šŸ™‚ button in the top right corner and choose ā€œSend a Frownā€. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer ā€“ our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Revamp ConfigMgr's cluster patching, and remove it from PreRelease

    Cluster patching feature was added in #SCCM CB 1602, but has been in prelease for a long time. It needs to:
    1) Have improved/revamped UI
    2) Remove dependency on collections
    3) Orchestrate patching for any machines, not just servers/clusters
    4) Remove the feature from prerelease

    680 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    31 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  2. Allow custom icons in software center for Task Sequences

    Split this item from a bigger umbrella item.
    This is to specify an icon per App Task Sequence in the Software Center.

    1,836 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    100 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  3. Improve SCCM's built in WSUS cleanup and maintenance task

    Preview SCCM versions have a basic WSUS cleanup and maintenance task. It should be evolved and expanded to include SQL index optimization, IIS configuration optimization, and deletes of declined updates.

    45 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    5 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  4. ConfigMgr Web Console

    Introduce ConfigMgr Web Console and remove the need to update the console on every device with each SCCM CB Upgrade as local admin rights are needed to update the console.

    The ConfigMgr Web Console might be similar to Azure Portal with Microsoft Intune.

    With SCCM CB updates getting released more frequently than before, this will provide benefits and ease of management. The Admins can connect to the ConfigMgr console from any computer in the organisation without the need to install it.

    762 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    27 comments  ·  Admin Console  ·  Flag idea as inappropriateā€¦  ·  Admin →
  5. Integrate a GitHub (or GitHub Enterprise) Repository/Branch as the source of "Software Library\Scripts"

    It would be great if you could specify a Git Repository and Branch as the source of the contents of the Scripts Folder. This would allow the approvals to be managed in GitHub with all the abilities around code review and testing.
    It could still require an admin approval in the console which Version of the script should be used. It would also make rollbacks to an earlier version very easy.
    If you allow having "folders" in the Script folder, each of them could be a repository. You still should need to approve which version to run, but MVPs couldā€¦

    16 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Admin Console  ·  Flag idea as inappropriateā€¦  ·  Admin →
  6. Task sequence media - compute space does not consider removed applications/packages

    When creating stand-alone media you have the option to select which Applications,Packages and driver packages it should include onto the media or not. After clicking next on the summary page the process of starting the media launches. in the createTSMedia.log you can see that at some point the process starts to compute volume layout. It seems that the compute of the volume layout does take into account the software you selected to not be on the media. Therefore you might get the message that you do not have enough space on the USBFD media altough this is not trough. Atā€¦

    7 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    started  ·  1 comment  ·  Admin Console  ·  Flag idea as inappropriateā€¦  ·  Admin →
  7. Enhance task sequence step preprovision bitlocker with encryptionmode options

    For MBAM clients I want to use preprovisioned bitlocker volumes.
    A requirement is to use the AES256 encryption mode.The pre provision bitlocker step defaults to aes128, and cannot be changed in the step itself.
    I now have a extra step before the preprovision bitlocker step with this command:
    cmd /c reg.exe add HKLM\SOFTWARE\Policies\Microsoft\FVE /v EncryptionMethod /t REG_DWORD /d 4 /f

    Thanks to this website:
    https://blog.alschneiter.com/2017/05/03/change-bitlocker-drive-encryption-to-xts-aes-256-during-osd-with-configmgr/

    199 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  8. Create an SCCM Community Catalog Feature

    Creating SCCM Collection Queries is an art, and like most art, some of us are more suited to stick-figures while others produce beautiful creations worthy of a place in the Louvre, featuring graceful sub-queries, artful tabbing and good code practices.

    When creating a collection, it would be helpful to have an optional 'Community Collection Catalogue' to choose from, which could have a user-voice style 'Most useful' collections list.

    Users could create collections here, possibly even having a community 'wish-list' area for those without skills to request from those who would like to share.

    Contributions in the community catalog could beā€¦

    159 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    14 comments  ·  Admin Console  ·  Flag idea as inappropriateā€¦  ·  Admin →
  9. Disk number variable for Format and Partition Disk step

    Sometimes OSD does not put Windows on the drive that we want in systems with multiple drives because of things like raid/SAS controllers or nVME. If you allow a variable to be used for the "disk number" in the format and partition step, a custom UI could be used to select the correct disk number from WMI and send that variable (which is just a number) to the format and partition step.

    19 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    2 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  10. Quick view devices that require an update from the Software Library

    At the moment there is no quick way to see which particular machines require an update. You can run a report from Monitoring, but that means identifying the update then going back to reports and running the appropriate report.

    You can however see the the number of devices that require an update when looking at that particular update. A simple "More Details" button here would be useful which would show the machines that require the update or are compliant etc, without needing to run a report.

    This applies to both Software Updates and Windows 10 Updates for feature updates.

    11 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Admin Console  ·  Flag idea as inappropriateā€¦  ·  Admin →
  11. Run Scripts: Need cmdlets to support feature

    Create cmdlets for the new in console Powershell scripts. Some good ones would be new Script Deployment and get script results.

    EX:
    New-CMPSScriptDeployment -Name "Script Name" -CollectionName "Collection Name"

    9 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    3 comments  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →
  12. Create a PowerShell cmdlet too add/edit/remove duplicate hardware identifiers

    New-CMDuplicateHardwareIdentifier
    Set-CMDuplicateHardwareIdentifier
    Remove-CMDuplicateHardwareIdentifier

    Please create cmdlets to add/edit/remove duplicate hardware identifiers. We have a large organization and those pesky Lenovo Yoga's get a USB to Ethernet dongle with each one. We have over 500 dongles currently, and I don't see a way to automate importing those MAC addresses. Thanks!

    64 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    9 comments  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →

    Thanks for your feedback and suggestions, updating status to started.

    We added these CmdLets in our 1910 release:
    New-CMDuplicateHardwareIdGuid
    New-CMDuplicateHardwareIdMacAddress
    Remove-CMDuplicateHardwareIdGuid
    Remove-CMDuplicateHardwareIdMacAddress

    More details here:
    https://docs.microsoft.com/en-us/powershell/sccm/1910-release-notes?view=sccm-ps

    Please try them out and share any feedback you may have, then I’ll likely close this item with our 2002 release.

  13. Include the serviceui.exe functionality in task sequence environment by default

    Many organizations create their own front-ends for ConfigMgr Task Sequences (or leverage popular third-party ones like OSD++, Pretty Good Front End, etc.). However, these only are able to be used when the task sequence is in WinPE.

    Please add the serviceui.exe functionality into the default task sequence environment so it is possible to display Light Touch prompts when starting the task sequence from an existing operating system. Including serviceui.exe would be enough, or the functionality to launch interactive UI could be added to the environment natively.

    138 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →

    Updating status to started. See https://docs.microsoft.com/en-us/configmgr/core/understand/find-help#send-a-suggestion for an explanation of each value.

    Configmgr 2003 Technical Preview released today and has a new SDK method for task sequence progress.

    For more info:
    Doc: https://docs.microsoft.com/en-us/configmgr/core/get-started/2020/technical-preview-2003#bkmk_tsapi
    Blog: https://techcommunity.microsoft.com/t5/configuration-manager-blog/onboard-clients-to-microsoft-defender-atp-using-memac-and/ba-p/1266085

    This should address some of the asks here, please try it out and let us know your feedback.

  14. Allow exclusion of OU's from Active Directory System Discovery

    Have the ability to include/exclude certain OU's from both Active Directory User and System Discovery.

    E.G. I might have an "All Users and Groups" OU at the root domain level, which may contain sub OU's containing service accounts or mailbox accounts etc. that I don't want being picked up by discovery. The ability to pick which sub OU's to discover/not discover would be really handy in this scenario. The same applies for system/computer discovery also.

    40 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    6 comments  ·  Client Discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  15. Windows 10 Servicing Dashboard: Make it clickable

    When I go to the Windows 10 Servicing Dashboard, I got a nice PieChart of the Windows 10 Clients and their Version.
    But when I click on the PieChart, nothing happens. It would be great to have the same experience on this Dashboard like on the SCEP Dashboards.
    That means, if I click on the PieChart one of the Windows 10 Version, a new collection would be opened, with the corresponding Devices.

    193 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    7 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  16. Include the Right Click tools kit as part of the Console, not as a seperate download addon

    Include the Right Click tools adon as part of the Console install, not as a seperate download addon

    1,870 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    33 comments  ·  Tools  ·  Flag idea as inappropriateā€¦  ·  Admin →
  17. Prompt users for reboot, but NEVER force it

    The reboot settings only allow for the user to postpone a reboot for up to 24 hours. Why can't we expand that time or just keep reminding them forever until they reboot themselves? The longer that they have been pending a reboot, remind (pester) them more frequently. Or auto reboot if nobody is logged on.

    1,412 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    started  ·  42 comments  ·  Compliance Settings  ·  Flag idea as inappropriateā€¦  ·  Admin →
  18. Option to uninstall an application when a user or device falls out of scope of the collection

    This is a buggy, Would we like the option to have ' Uninstall Application when Resource falls out of scope of this collection' when an application is deployed to a collection, this would save us having to create 2 collections ( install and uninstall) and to deployments. This would save SO much time and reduce the complicity of application management.

    987 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    39 comments  ·  Application Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  19. SCCM Report - Easy way to create Report & Dashboard

    Not really easy to create some SCCM report or Dashboard if your're not a SQL DBA .. even with Report Builder.
    Could be awesome to have a new tool where Reports or Dashbaord could be created easily whithout searching which SQL views I need ..ect ... Like some others concurrent application give.

    907 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    48 comments  ·  Reporting  ·  Flag idea as inappropriateā€¦  ·  Admin →
  20. Internet Based Remote Control

    Internet based remote control with options such as file transfer and reboot. This could be accomplished using a reverse connection from a client to a new site role hosted in the DMZ.

    928 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    31 comments  ·  Remote Control  ·  Flag idea as inappropriateā€¦  ·  Admin →
← Previous 1
  • Don't see your idea?

Feedback and Knowledge Base