Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we can’t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the 🙂 button in the top right corner and choose “Send a Frown”. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer – our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. MDT Automatic Backup of the Deploy share and also of the Task Sequences

    Button that would backup the Deployment Tool kit data and also the task sequences.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  2. Do not enforce software apps or packages at shutdown

    Client should not enforce any application or package when shutdown is initiated. It can cause delayed shutdown on few occasions which is not suitable.
    Client agent should be able to differentiate a user logoff and a logoff caused by shutdown.

    10 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  3. Full support for ECC Certificates

    Machines with an EEC client certificate can connect to the DP to download the content and install the agent but the client never registers with the site.

    once i suspected the ECC certs I was able to find thread on technet which confirms the same issue I was seeing
    https://social.technet.microsoft.com/Forums/en-US/cc9ec0ff-5998-4225-9ce1-2c7b5fe5677d/sccm-and-ecc-certificates-not-supported?forum=ConfigMgrDeployment

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  4. Stop wrapping the Mac SCCM client into an MSI file

    It makes absolutely no sense whatsoever to wrap the Mac SCCM client in an MSI file. All the MSI file contains is a single DMG file which then has to be copied to the Mac.

    Having to install the MSI file on a Windows machine to get a DMG which has to be copied to the Mac afterwards is annoying, please just make the DMG file available for direct download.

    Thanks

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  5. Improve on the communication windows when deploying TS, Applications or Packages. Warning the users about what will occuring before a deadli

    Improve on the communication windows when deploying TS, Applications or Packages. Warning the users about what will occuring before a deadline is reached. With all this MS updates for Office and Windows we need a stronger communication method

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  6. Check all SAN (Subject Alternative Name) entries for FQDN hostname or NETBIOS name when trying to validate a PKI certificate for Client Auth

    Currently, SCCM has a limitation by which it only checks the first entry in a client authentication PKI cert for the FQDN hostname or NETBIOS name. If the first entry does not include either of these, then even though the cert may still be valid, SCCM wont use it.

    For example, for systems we have that sit behind Network Load Balancers, the first entry in their PKI client authentication certs is normally the NLB VIP. While additional entries are present to include the system's FQDN hostname and NETBIOS names, SCCM won't check and therefore won't use the valid PKI cert.

    …

    0 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  7. client push

    Add a possibility to start the client push over powershell remoting.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  8. Make WOL Addressdata configurable

    For our environment it would be great if we can specify the IP-address where the Packets are send to. Because we use Switches with 802.1x the Computer is not in the same vlan that it is when it runs. Because of "control-direction in" the packages of the isolate-vlan will be broadcasted if the device is not authenticated. If we can specify the destinationadress, we can set the address to the network-broadcast of the isolate-network and the packages will be delivered correctly by routers and switches. This is already working with other tools.

    73 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  9. Give the possibility to migrate installed applications from one Machine to another like USMT with profiles

    When a User gets a new Laptop he need to install all his software again. It would be great when it would be possible to collect the installed software who was installed via Software Center and redeploy them via the Variables in "Install Application" TS step

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  10. Task Sequences should optionally evaluate custom conditions for content download

    The ability to pre-download content for a task sequence, or when downloading all content locally before starting, can be limited by architecture and/or language but more flexibility is needed. Ideally, each step of the task sequence would have an option to have content downloads adhere to the condition defined in the options of the step. Conditional download can be can be achieved using the Download Package Content action but this requires the “download content locally when needed by the running task sequence” option. In disconnected scenarios, such as when using a VPN solution that doesn’t auto-connect, this is not the…

    7 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  11. UWF and WCD integration would be an amazing addition for the educational space

    Unified Write Filter and Windows Configuration Designer profiles are both great tools, especially for customers in the education space. We often need to deploy many devices in a "Shared PC" configuration for classrooms, computer labs, etc. It would be amazing if these tools were integrated into SCCM to make deploying and managing them simpler.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  12. Be able to run several actions at once from Configuration Manager Client

    I would like there to be a option to run several actions at once from the SCCM Client. A checkbox for each actions and then a 'Run' button that executes the actions one by one. Either in the order you checked the boxes or by alphabetical.

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  13. Before a task sequence starts with a deadline, Policy should first be updated again.

    Before a task sequence is executed, the client policy should first be updated again.

    This is especially the case if the task sequence has a deadline.

    Background information: A Task Sequence with a Deadline Is distributed to a notebook. The notebook gets this policy and knows when the deadline is. The notebook is not turned on after the deadline. In the meantime, the task sequence has been withdrawn (deleted) by an admin. The notebook does not notice this and starts to execute the task sequence at startup.

    This should be unbound by first updating the policy so that this task…

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  14. Automatic Client Upgrade: Allow option to ignore maintenance windows

    It is great that client upgrades now respect maintenance windows per the "Automatic Client upgrades - respect defined maintenance windows" feedback. However, we now are dealing with the opposite issue.

    We have very narrow maintenance windows defined for our servers and as such 75% of our clients were out of date 2 months post upgrade. It would be great for a toggle on the upgrade configuration so we can choose the behavior for the upgrade to respect the windows or not, similar to a normal application deployment. This way we would not need to manually push the client upgrade out…

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  15. FIX Bitlocker Recovery if, PXE boot is in the first place.

    The abortpxe.com is somehow "untrusted" by the Bitlocker boot process. If UEFI changes the boot order to PXE boot, Bitlocker Recovery comes along.
    https://techcommunity.microsoft.com/t5/System-Center-Configuration/Bitlocker-Recovery-with-PXE/m-p/224704

    15 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  16. "Maintenance Windows" for Client Auto Upgrade feature

    We often found that SCCM Client is not working because SCCM client was corrupt during client.msi installation was failed due to external OS shutdown. OS shutdown during upgrade may cause corrupt SCCM client but we cannot set "Maintenance Windows" for Client Auto Upgrade in current SCCM version and so it is difficult to avoid this situation. We want to add "Maintenance Windows" for Client Auto Upgrade.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  17. Pre-Post Script to Client Install

    Allow a custom script Before & After client installation.

    Example Uses:
    - Install Windows Dedup feature, create vhds, mount vhdx as folder, dedup vhdx, reference vhdx folder as sccmcache directory.
    - Force policy collection evaluation, delay x minutes, force policy refresh.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  18. Lock down of Good Client Health State for later restores

    Client health issues are one of main pain areas admins deals. Post client install, registration, policy download succeeds, client should create a golden state of its own on WKS and similarly one golden info of client at SCCM server level also in DB in separate table or so,... in case of client broken situation, using these two copies we can restore back. This way may prove much better than current situation where enormous amount of time, dealing different components with still no guarantee to fix it.

    19 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  19. Client deployment flexibility

    Please add a feature to be able to auto install the agent by device type. ie, servers, workstations, thin clients. Currently this is an all or nothing type thing, it would be nice to make it more granular.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  20. Change Client Cache to work like DP SCCMContentLib folder

    Some deployed Applications and/or Packages during their execution modify their working directory (a log file created, new files created/deleted, etc...)
    When that happens, the Peer Cache feature fails because when other devices get a copy they immediately discard it since the copy is distinct from the one defined at the SCCM server. The error message "The hash value is not correct" is registered by the devices that downloaded the modified copy.

    I think the SCCM Client Cache should work like the "SCCMContentLib" folder existing at the Distribution Points, creating a hashed, compressed file for every package file.
    The benefits from…

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
← Previous 1 3 4 5 6 7
  • Don't see your idea?

Feedback and Knowledge Base