Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we can’t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the 🙂 button in the top right corner and choose “Send a Frown”. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer – our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Install Servicing Stack Updates Before Other Updates

    Currently, when servicing stack updates and regular updates are deployed in the same software update group, the patches do not apply in a determinant order. This leads to cases where a cumulative update that requires a new servicing stack is installed before the servicing stack itself.

    While this can be worked around by separately deploying the servicing stack update before updates that require said servicing stack, it would be much more convenient if the update installation process checked if there are any servicing stack updates to be deployed and automatically installed them first

    1,672 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    49 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →

    SSUs will now be installed before other updates in the Configuration manager 2002 release, which is now released to the opt-in phase. You can opt-in and then download 2002 through their Admin Console now!

    Blog: https://techcommunity.microsoft.com/t5/configuration-manager-blog/update-2002-for-microsoft-endpoint-configuration-manager-current/ba-p/1272670
    Docs: https://docs.microsoft.com/configmgr/core/plan-design/changes/whats-new-in-version-2002
    Support Information: https://aka.ms/cmcssreleaseinfo

  2. Pause a Task Sequence when you want, as many times you want with just a variable

    By default you can pause a Task Sequence by adding a step in the TS that will display a msgbox.

    It would be cool to be able to pause a TS when you want and as many times you want.

    It is possible by changing the ztiutility.vbs file and add the below process:
    - Create a new TS variable TSPause
    - If this variable is configured to True a msgbox is diplayed

    See a post I did about this:
    http://www.systanddeploy.com/2020/02/pause-task-sequence-when-you-want-with.html

    61 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →

    Updating status to completed.

    Our Task Sequence debugger covers this and allows setting break points for each step.

    https://docs.microsoft.com/en-us/configmgr/osd/deploy-use/debug-task-sequence

    Regarding popping a message box, there’s additions in our 2003 Tech Preview released yesterday you may find interesting. Links added to this item https://configurationmanager.uservoice.com/forums/300492-ideas/suggestions/15154383-include-the-serviceui-exe-functionality-in-task-se

  3. Explanation of the future of MDM support in SCCM

    Hybrid MDM support is deprecated in SCCM. Details of this deprication is here:
    https://docs.microsoft.com/en-us/sccm/mdm/understand/hybrid-mobile-device-management
    If you are a Hybrid customer, Microsoft is very happy to work with you to make your migration to Intune seamless/painless. Please reach out to Microsoft support.

    While Hybrid support for MDM is going away, SCCM will innovate together with Intune, and will continue to grow closer together. More capabilities and better together scenarios will be coming soon.

    291 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    completed  ·  25 comments  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
  4. Add Option to Bypass Proxy for Local Address for ADR Content Downloads

    It would be extremely helpful to have an option in the software update point site system to bypass a proxy for a local address. The only options today are (see Current-SUP-Proxy-Options.png):


    • Use a proxy server when synchronizing

    • Use a proxy server when downloading content by ADRs

    The issue is when an ADR tries to download a third-party software update, it will attempt to use a proxy server and often fail because the proxy doesn't route correctly to the internal WSUS server. For example in patchdownloader.log, you will see something like <Download-Error-PatchDownloader.png>.

    There needs to be an option to not use…

    72 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    6 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  5. CMPivot: Add an option to provide a code signing certificate for the generated scripts from CMPivot

    In our organization only signed scripts may be executed on the clients. However, the scripts from CMPivot queries are not signed and are therefore not executed. This restriction is set by GPO and cannot be overridden by "PowerShell execution policy" in the SCCM client computer agent.

    54 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    completed  ·  6 comments  ·  Client Settings  ·  Flag idea as inappropriate…  ·  Admin →
  6. Add "Windows 10 Enterprise for Virtual Desktops" in the “Operating system” of requirements as an option”

    The provided Application Model Operation System Conditions for Windows 10 versions are limited in scope. Currently the Operator options for Windows 10 are two choices.

    Windows 10 (Select This to get the two below)
    All Windows 10 (ARM64)
    All Windows 10 (64-bit)
    All Windows 10 (32-bit)

    We're using "Windows 10 Enterprise for Virtual Desktops" and we're not able to select this operating system from here.

    Please add "Windows 10 Enterprise for Virtual Desktops" under windows 10 node or please provide a way to edit this list.

    Thank you.

    15 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Application Management  ·  Flag idea as inappropriate…  ·  Admin →

    Updating status to completed, see https://docs.microsoft.com/en-us/mem/configmgr/core/understand/find-help#send-a-suggestion for an explanation of each status value.

    This is the opt-in phase of our 2006 release (fast ring) is now live. Customers can opt-in and then download 2006 through their Admin Console now.

    This release adds Windows 10 multi-session (aka WVD) to the supported platform list.

    Blog: https://techcommunity.microsoft.com/t5/configuration-manager-blog/update-2006-for-microsoft-endpoint-configuration-manager-current/ba-p/1569562
    Docs: https://docs.microsoft.com/mem/configmgr/core/plan-design/changes/whats-new-in-version-2006
    Support Information: https://aka.ms/cmcssreleaseinfo

  7. Multiple hierarchies in Desktop Analytics

    We need support for multiple hierarchies in one Azure Tenant. Currently there is only support for 1 commercial ID and CM hierarchies. We have 4 spread over the world but only one Azure tenant.

    58 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Desktop Analytics  ·  Flag idea as inappropriate…  ·  Admin →
  8. application groups reverse/control uninstall order

    In Configuration Manager 1910 a user can uninstall an "app group" in Software Center if it is deployed as available. This is great! However the uninstall order is the same as the install order. we need the following in the uninstall space:
    -Reverse order of uninstall
    -Control if a application should be left instead of removed, could be needed in other app group.
    -Control the order if necessary

    23 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Application Management  ·  Flag idea as inappropriate…  ·  Admin →
  9. Explanation on SCCM linux/unix client deprecation

    Why was the SCCM Linux/Unix client deprecated. Some SCCM customers use and depend on this functionality. Why is it no longer being invested in?

    111 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    completed  ·  20 comments  ·  Linux/Unix  ·  Flag idea as inappropriate…  ·  Admin →
  10. Use SCCM to remote control multiple monitors

    When using SCCM to remote control multiple monitors; allow the ability to select only one monitor to be remote controlled; vs. the option now of only stretching.

    1,592 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    87 comments  ·  Remote Control  ·  Flag idea as inappropriate…  ·  Admin →
  11. Add 80072ee2 as a default code to the WSUS Scan Retry Error Codes

    If a SUP/WSUS server is offline or in a disaster situation, clients should be allowed to failover to another SUP.

    Currently if a SUP goes offline, clients simply will never scan again, and this is not an ideal situation.

    103 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  12. Add keyboard layout settings in the Apply Windows Settings step

    I would like you to add the keyboard layout setting in the Apply Windows Settings step.
    Please add it as shown in the screenshot below.
    Currently, keyboard layout settings are manually added to the registry within the Task Sequence.

    Command line:
    cmd.exe /c reg add HKLM\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters /f /v "LayerDriver JPN" /t REGSZ /d kbd106.dll & reg add HKLM\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters /f /v "OverrideKeyboardIdentifier" /t REGSZ /d PCAT106KEY & reg add HKLM\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters /f /v "OverrideKeyboardSubtype" /t REGDWORD /d 2 & reg add HKLM\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters /f /v "OverrideKeyboardType" /t REG_DWORD /d 7

    36 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →

    Thanks for all your feedback and suggestions. Updating status to completed – see https://docs.microsoft.com/en-us/configmgr/core/understand/find-help#send-a-suggestion for an explanation of each status.

    This is the opt-in phase of our 1910 release (fast ring) and it is now live. Customers can opt-in and then download 1910 through their Admin Console now. In a couple weeks, we’ll open it up to everybody (slow ring), to enable downloading without the need to opt-in.

    Blog: https://techcommunity.microsoft.com/t5/Configuration-Manager-Blog/Update-1910-for-Microsoft-Endpoint-Configuration-Manager-current/ba-p/1032459
    Docs: https://docs.microsoft.com/configmgr/core/plan-design/changes/whats-new-in-version-1910

  13. Automatically Publish Full Content for Third Party Software Updates

    With the release of CB 1806 we are now able to publish third party updates using custom catalogs. Ideally, third party patches would function exactly like first party patches from an administration and automation perspective. Currently there's two main areas where this is not the case.

    Synchronization Schedule:
    I could be wrong on this but I believe that subscribed catalogs sync automatically every 24-hours. While that's nice, it would be great to simply integrate with the existing sync schedule. Sync the catalogs, publish relevant metadata to WSUS, then sync the SUP(s).

    Automatic Deployment Rules:
    Currently, only update metadata is published…

    448 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    18 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →

    This can now work, in #configmgr 2002 production (available now); as long as the 3rd party catalogs are authored in V3 of the catalog schema, and the customer is setting ADR rules at the catagory level. At this time, both PatchMyPC and Dell are authoring and offering 3rd party catalogs. PatchMyPC has a great overview in how to configure this optimally.

  14. enable a DP to be moved from one Primary Site to another Primary Site

    enable a DP to be moved from one Primary Site to another Primary Site

    120 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    completed  ·  12 comments  ·  Content  ·  Flag idea as inappropriate…  ·  Admin →
  15. sort machine with thier status

    There is no option to sort machines under collection by their status online/offline.

    2 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  16. Ignore DHCPINFORM messages in SMSPXE.log for sccmpxe service.

    Team,

    Currently when the non-WDS PXE responder is enabled, all DHCPINFORM messages are logged in the SMSPXE.log. This floods the log with unnecessary information and makes the troubleshoting more difficult as the log gets overwritten very often.

    Please perform the change to at least not log these DHCPINFORM messages.

    8 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  17. Remove the need for App Catalog, by providing all functionality in Software Center

    Currently, some functionality is only available in the application catalog, and not in software center. Make it so everything can be done in software center, so we can remove application catalog... and Silverlight... and local site security configurations.

    59 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    7 comments  ·  Application Management  ·  Flag idea as inappropriate…  ·  Admin →
  18. Search through Entities in CMPivot

    Add a search function to the Entities list in CMPivot, just in case I have no idea where to find what I need to query.

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    completed  ·  0 comments  ·  Reporting  ·  Flag idea as inappropriate…  ·  Admin →
  19. Server Groups: release lock when supressing reboot

    The pre-release feature "Server Groups" is designed to set a client lock when the "Cluster Settings" in a Device Collection are defined. The lock removes itself when the update sequence has completed to allow the next client to process updates.

    In my case the update sequence does not technically finish because the environment suppresses reboots from Software Updates. This is configured in the ADR/Software Update Group.

    Therefor the client lock state does not change from status 1 (have lock) to status 2 (released lock). Other devices in the collection are stuck on status 0 (waiting for lock).

    Please make the…

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  20. Enable Bitlocker: Add Option to Skip if No TPM

    The 'Pre-provision BitLocker' step has an option to skip the step when the devices does not have a TPM or when the TPM is not enabled.

    I'd like to see that option added to the 'Enable Bitlocker' step. Whether it's enabled by default is another question I guess. However, this is one of the many things that hang up new admins trying to get their first Task Sequence off the ground. Just spent an hour or so trying to get past this step.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →

    Updating status to completed, see https://docs.microsoft.com/en-us/mem/configmgr/core/understand/find-help#send-a-suggestion for an explanation of each status value.

    This is the opt-in phase of our 2006 release (fast ring) is now live. Customers can opt-in and then download 2006 through their Admin Console now.

    This release contains improvements to address when no TPM is present.

    Blog: https://techcommunity.microsoft.com/t5/configuration-manager-blog/update-2006-for-microsoft-endpoint-configuration-manager-current/ba-p/1569562
    Docs: https://docs.microsoft.com/mem/configmgr/core/plan-design/changes/whats-new-in-version-2006
    Support Information: https://aka.ms/cmcssreleaseinfo

← Previous 1 3 4 5 24 25
  • Don't see your idea?

Feedback and Knowledge Base