Microsoft

System Center Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building System Center Configuration Manager, though we can’t promise to reply to all posts.

If you believe you have found a product bug, please use Feedback Hub. For more details, see: https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

Standard Disclaimer – our lawyers made us put this here ;-) We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the System Center Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Microsoft Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.

How can we improve Configuration Manager?

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Intune Hybrid User Affinity w/ 2FA and Apple DEP

    Right now there is no way to assign user affinity to a device procured through Apple DEP with Microsoft MFA enabled.

    There is a workaround on the Intune standalone where it pushes the company portal app then the user signs in, but on the Hybrid side we cannot accomplish this and must resort to No Device Affinity profiles.

    Having the option of "Optional User Affinity" would work as we could just skip past the Apple Configuration piece that doesn't work with MFA but accomplish the same thing by signing into the Company Portal after the fact (which doesn't work when…

    6 votes
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      0 comments  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
    • Automatic app updates for VPP apps (Intune Hybrid)

      Please add the feature to update VPP apps for the Intune Hybrid version. It is available in Intune standalone.

      15 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        0 comments  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
      • Support for multiple Apple DEP / Apple School Manager accounts

        Please add support for multiple Apple DEP / Apple School Manager accounts to Intune Hybrid. Intune standalone has this feature as of february, 2018

        31 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          0 comments  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
        • Issue met for IOS Sandblast

          Hello Team

          We use SCCM Current Branch with Hybrid INTUNE. Since the upgrade of SCCM CB to 1802, we met an issue for Sandblast Mobile Protect (from Checkpoint) on IOS mobile device.

          I have performed two new test environments :

          - Intune STANDALONE + Checkpoint : All is OK

          - Intune Hybridate with SCCM Current Branch + Checkpoint : All Ok on Android, but not on IOS Mobile

          When we try to "open" the baseline of this application, it raised an error on the console (Cf. Screenshot_Console_Error.JPG)

          1 vote
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            0 comments  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
          • IsSupervised field needs to be set when device is enrolled after a wipe/reset

            This is a bug that needs fixing.

            Using ConfigMgr 1710 in a hybrid configuration with Intune and devices synced from Apple's DEP after the initial enrollment if you wipe the device to enroll for a new user the IsSupervised field does not get set and the Activation Bypass options get greyed out.

            Having a logged a call a workaround is possible by manually adding a record to the MDMDeviceProperty table but when you are managing 750+ devices with a high staff turnover manually adding this record every time really isn't practical.

            The support team have told me to add this…

            6 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              0 comments  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
            • Autopilot Configuration in SCCM Hybrid Intune Scenario

              Make Autopilot configurable for SCCM Hybrid Intune Scenario. Currently Autopilot is only configurable in Intune Standalone.

              13 votes
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                0 comments  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
              • Improve Android Hardware Inventory to include "Android Security Patch Level" in SCCM / Intune Hybrid

                Current "Intune Company Portal" do not report "Android Security Patch Level" as part of the Android Hardware Inventory to SCCM in a Hybrid environment.

                This is important as our security policy requires that the device must be up-to-date on Android Security Patch inorder to be "In Compliance"

                From an administrative point of view it should be possible to have an overview of your Android devices to verify whom devices that has been upgraded with the latest security updates from Android.

                Security Vulnerabilities are rapidly increasing for mobile devices, e.g. the previous KRACK Vulnerability. Hence it would great to see that…

                108 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  2 comments  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
                • OpenVPN support on 3rd party providers

                  Please add OpenVPN support on 3rd party providers to manage OpenVPN on MDM Intune Devices

                  15 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    0 comments  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
                  • Leave unenrolled mobile devices in the database

                    Cureently, when you unenroll a device from the Intune Company Portal, it gets removed from the SCCM database immediately, and we can't query or report on unenrolled mobile devices. It would be nice to have them remain in the database for a period of time, maybe 90 days, so that we can create a query, collection, or report to find recently unenrolled devices.

                    5 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      0 comments  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
                    • citrix vpn

                      Add support for Citrix Netscaler as a VPN provider in the SCCM console. The provider exists in the Intune web console, but not in the ConfigMgr console.

                      32 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        Noted  ·  2 comments  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
                      • Azure Aware SCCM Hybrid

                        I don't like that the Azure device dashboards throw multiple errors when running SCCM in Hybrid mode. I have to go to Azure to configure Conditional Access and the multiple errors are annoying at best. I guess this is more an Azure development but I would like the dashboard to be aware that MDM authority is with SCCM and adjust the blades/views accordingly

                        5 votes
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          1 comment  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
                        • Remote Device Actions SCCM - Send Sync Request to Multiple Devices at Once (Bulk Sync)

                          Currently you are able to click on a single device and one at a time complete a remote device action of send sync request. This can get cumbersome when trying to refresh a whole fleet of devices. I would like the ability to send a remote sync request to multiple devices at once either by collection or by highlighting multiple devices in the console and selecting option.

                          3 votes
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            0 comments  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
                          • Home screen layout settings - iOS

                            Currently there is the ability to update homescreen layout in Intune Standalone. This feature needs to be made available in SCCM configuration manager.

                            https://docs.microsoft.com/en-us/intune/home-screen-settings-ios

                            10 votes
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              0 comments  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
                            • Personal Hotspot iOS prevention - SCCM

                              Currently prevention of personal hotspot use in iOS is only a capability through Intune standalone. This setting should be made available in SCCM Hybrid to allow the prevention of hotspot use on ipads and iphones. We are currently having many overage charges from users using this feature and preventing this feature will help save money on these overages.

                              3 votes
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                                0 comments  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
                              • Read Only Intune connector

                                Please can we have a read only Intune connector so that we are able to have asset information from standalone Intune in SCCM.

                                We would like to be able to utilize asset information in the way that you can with hybrid Intune, without having to use hybrid Intune. AS far as i can tell, this is not currently possible in any other way.

                                25 votes
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                  1 comment  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
                                • Automatic DEP sync for Hybrid Intune .

                                  The DEP sync has to be clicked manually. There should be a way to schedule this.

                                  22 votes
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    3 comments  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Deploy SCEP profile to mobile decives without User Affinity

                                    Deploying SCEP-profiles to mobile devices without user affinity is not possible. And here is why that feature is needed. My customer has a conference room solution that involves an iPad to display booking details and schema outside of every conference room.

                                    This tablet needs access to the internal 802.1x protected Wifi as well as an VPP-app to display the booking details and so on.

                                    The idea here is to enrol the devices in Apple DEP and assign a DEP profile that does not involve User Affinity. Then some sort of mechanism is setup that add enrolled devices based on pre-registered…

                                    25 votes
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                      1 comment  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
                                    • Deploy I/Ebooks through Intune+SCCM (Hybrid) on to iOS Devices

                                      hybrid infrastructure which is current branch is integrated with InTune. would like to deploy a i/ebooks that was purchased with VPP account, through the “Manage distribution” method to the iPads.

                                      15 votes
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                        0 comments  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
                                      • Deploy IOS APP without User apple ID

                                        This Feature is available on other MDM solution.

                                        9 votes
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                          0 comments  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
                                        • More possibilities when locking a Device

                                          More possibilities when locking a device.

                                          In other MDM Systems you have the possibility to write a text which should stand on the display (for example if you lose your phone an someone finds it you can write to the display "please call this number *** when you find this phone")
                                          In other MDM Systems it's also possible to change the PIN Code for the phone, to what the admin wants, while locking the device. (also

                                          27 votes
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                            0 comments  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
                                          ← Previous 1 3 4
                                          • Don't see your idea?

                                          Feedback and Knowledge Base