Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice - Update: Microsoft will be moving away from UserVoice sites on a product-by-product basis throughout the 2021 calendar year. We will leverage 1st party solutions for customer feedback. Learn more

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we canā€™t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the šŸ™‚ button in the top right corner and choose ā€œSend a Frownā€. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer ā€“ our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Client Push installation to pass on the /allowmetered connection option to the ccmsetup.exe to bypass metered connection error.

    Client Push installation to pass on the /allowmetered connection option to the ccmsetup.exe to bypass metered connection error.

    2 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  2. _SMSTaskSequence Should look at largest Local Drive

    SMSTaskSequence designed to look at the largest drive but in the instances of Clusters, that largest drive could be a shared SAN. When the server reboots, it fails because it can not find the SMSTaskSequence content as it is on the other failover cluster. Understand we can use variable SMSTSLocalDataDriveĀ  but the product should be looking for largest local drive as that does make sense in case of a large task sequence deployment to have that content copied to the largest local drive.

    3 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  3. User based maintenance windows

    When machines are being shared across different regions and departments it becomes difficult to manage maintenance windows as users have different usage requirements. Having a User MW might help manage this problem better. SCCM would first have to check if an active user was on a machine and if so use the "User MW" and then fall back to the machine MW is a user wasn't logged in. It should also be possible to have a user who has no MW. A client setting would also be required to disable this functionality on subsets of machines.

    17 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  4. Allow adding read and execute access to the SCCM client install folder.

    Currently, a second shared folder has to be created and the client installer has to be copied to this folder. Everytime an update is performed to SCCM, the client has to be re-copied as well. Granting read and execute permissions are wiped out. Manual installation of the client is needed periodically for troubleshooting purposes and the extra steps to set it up are not helpful.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  5. Automatic Client Upgrade: Create Maintenance Window Type for Automatic Client Upgrade

    Similar to an existing post titled "Automatic Client Upgrade: Allow option to ignore maintenance windows", we too have servers in collections with defined Maintenance Windows but once all patching and reboots have occured, we have a low success rate on the auto client upgrades happening in the remaining timeframes - even though some of these have been tested with 3 additional hours tacked on for testing.

    Rather than trying to ignore the existing Maintenance Windows in the post mentioned, what would be even better for us would be to have a new Maintenance Window Type specifically for the Automatic Clientā€¦

    4 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  6. Full Support for client certificates using Elliptic Curve Cryptography

    A month ago, our server team updated client certs on all workstations to ECC certificates with sha-384 hash algorithms. This caused clients in my environment to stop communicating with my MP. Fortunately, this is only a test environment as we are still building Configuration Manager. Had this been production, this would have been a disaster. There is no official Microsoft documentation indicating this type of certificate is not supported, so neither my team nor the server team would have known. Please provide full support for these certificates in the next major release and update documentation.

    3 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  7. Check if system is excluded from auto client upgrade prior to starting the installation

    Currently when the Auto Client Upgrade is enabled on SCCM the clients will got through a couple of steps to do perform the installation. If a client is a member of the Excluded Devices Collection is checked during the CCMSETUP. For systems with the Unified Write Filter enabled this causes unwanted behavior due to the fact that SCCM disabled the UWF filter and forces a reboot, putting the system in a maintenance mode for about 20 minutes, locking users out.

    I would like to see that the SCCM Client checks if the system is a member of the excluded deviceā€¦

    6 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  8. OSD - Mutiple Hard Drives Dynamic Selection

    To have a task step that would enable you to dynamically select the drive to be used as the Operating System during deployment.

    This would enable hardware with multiple hard drives to make a dynamic selection...such as selecting the fastest, smallest hard drive for the OS

    Deployment guide and script can be found at https://github.com/Drakey2000/PowershellScripts/tree/master/OSDReport

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  9. OSDReport - Without MDT Intergration

    Without using MDT integration enable a Summary Report to execute at the end of a OSD Deployment to inform the end user, engineer that the Deployment has been successful.

    The idea is built on how MDT OSDResults works. Enabling Configuration Manager to report the Task Sequence had completed successfully, but keeping the summary screen active until closed by the user.

    The deployment guide (very rough), script, and additional files can be found at

    https://github.com/Drakey2000/PowershellScripts/tree/master/OSDReport

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  10. ConfigMgr client detects intranet/Internet location on a schedule

    If I understand this correctly, at present, the ConfigMgr client runs a query to determine whether it's intranet or Internet-based whenever there's a change to a devices network configuration. For example, if its IP address changes, or if a VPN connection is established which assigns a VPN IP.

    I've recently come across a scenario in which the ConfigMgr client doesn't recognise the switch between intranet and Internet. This is when using a Citrix VPN client which does not assign a VPN IP when connected.

    In this scenario, the device boots up and the user connects to the VPN. In whichā€¦

    9 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  11. MDT Automatic Backup of the Deploy share and also of the Task Sequences

    Button that would backup the Deployment Tool kit data and also the task sequences.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  12. Do not enforce software apps or packages at shutdown

    Client should not enforce any application or package when shutdown is initiated. It can cause delayed shutdown on few occasions which is not suitable.
    Client agent should be able to differentiate a user logoff and a logoff caused by shutdown.

    10 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  13. Full support for ECC Certificates

    Machines with an EEC client certificate can connect to the DP to download the content and install the agent but the client never registers with the site.

    once i suspected the ECC certs I was able to find thread on technet which confirms the same issue I was seeing
    https://social.technet.microsoft.com/Forums/en-US/cc9ec0ff-5998-4225-9ce1-2c7b5fe5677d/sccm-and-ecc-certificates-not-supported?forum=ConfigMgrDeployment

    29 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  14. Stop wrapping the Mac SCCM client into an MSI file

    It makes absolutely no sense whatsoever to wrap the Mac SCCM client in an MSI file. All the MSI file contains is a single DMG file which then has to be copied to the Mac.

    Having to install the MSI file on a Windows machine to get a DMG which has to be copied to the Mac afterwards is annoying, please just make the DMG file available for direct download.

    Thanks

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  15. Improve on the communication windows when deploying TS, Applications or Packages. Warning the users about what will occuring before a deadli

    Improve on the communication windows when deploying TS, Applications or Packages. Warning the users about what will occuring before a deadline is reached. With all this MS updates for Office and Windows we need a stronger communication method

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  16. Check all SAN (Subject Alternative Name) entries for FQDN hostname or NETBIOS name when trying to validate a PKI certificate for Client Auth

    Currently, SCCM has a limitation by which it only checks the first entry in a client authentication PKI cert for the FQDN hostname or NETBIOS name. If the first entry does not include either of these, then even though the cert may still be valid, SCCM wont use it.

    For example, for systems we have that sit behind Network Load Balancers, the first entry in their PKI client authentication certs is normally the NLB VIP. While additional entries are present to include the system's FQDN hostname and NETBIOS names, SCCM won't check and therefore won't use the valid PKI cert.

    ā€¦

    4 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  17. client push

    Add a possibility to start the client push over powershell remoting.

    3 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  18. Make WOL Addressdata configurable

    For our environment it would be great if we can specify the IP-address where the Packets are send to. Because we use Switches with 802.1x the Computer is not in the same vlan that it is when it runs. Because of "control-direction in" the packages of the isolate-vlan will be broadcasted if the device is not authenticated. If we can specify the destinationadress, we can set the address to the network-broadcast of the isolate-network and the packages will be delivered correctly by routers and switches. This is already working with other tools.

    73 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  19. Give the possibility to migrate installed applications from one Machine to another like USMT with profiles

    When a User gets a new Laptop he need to install all his software again. It would be great when it would be possible to collect the installed software who was installed via Software Center and redeploy them via the Variables in "Install Application" TS step

    3 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  20. Task Sequences should optionally evaluate custom conditions for content download

    The ability to pre-download content for a task sequence, or when downloading all content locally before starting, can be limited by architecture and/or language but more flexibility is needed. Ideally, each step of the task sequence would have an option to have content downloads adhere to the condition defined in the options of the step. Conditional download can be can be achieved using the Download Package Content action but this requires the ā€œdownload content locally when needed by the running task sequenceā€ option. In disconnected scenarios, such as when using a VPN solution that doesnā€™t auto-connect, this is not theā€¦

    7 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
← Previous 1 3 4 5 6 7
  • Don't see your idea?

Feedback and Knowledge Base