Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we can’t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the 🙂 button in the top right corner and choose “Send a Frown”. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer – our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Task Sequence: Allow more than 9 applications in the Install Application step

    Would love it if there was a way to allow more than 9 applications to be installed as a part of the install application task sequence step (not according to a dynamic variable list).

    8 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  2. Manage Delivery Optimization

    With either Client Settings of something under Compliance Settings, give us the native ability to manage Delivery Optimization settings through the ConfigMgr Client. Modern apps are updated per user and directly from Microsoft. In shared device environments (think schools with lots of laptop carts), this can result in over a 1 GB of downloaded updates per device when 4-5 users share the machine each day, and ConfigMgr Distribution Points can't help us. We need to be able to easily ensure that all this traffic doesnt have to go to the internet.

    11 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Asset Management  ·  Flag idea as inappropriate…  ·  Admin →
  3. SUP Sync Status

    Add a Get-SupSyncStatus cmdlet as it does not exist today.

    the only way to achieve this is via WMI
    gwmi -Class SMSSupSyncStatus -Namespace "root\sms\site$SiteCode" | select LastSyncErrorCode, LastSyncState

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  PowerShell  ·  Flag idea as inappropriate…  ·  Admin →
  4. Start-CMApplicationDeployment

    the Start-CMApplicationDeployment cmdlet should have a parameter for Automatically Update Supersedence, like on the UI.

    currently the only workaround would be doing via WMI directly
    $Deployment = Get-WmiObject -Namespace "root\SMS\site$($SiteCode)" -Class "SMSApplicationAssignment" | Where-Object { $.ApplicationName -like "$AppName" -and $.CollectionName -like "$CollName"}
    $Deployment.UpdateSupersedence = "True"
    $Deployment.Put()

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  PowerShell  ·  Flag idea as inappropriate…  ·  Admin →
  5. Invoke-CMDeploymentSummarization

    the Invoke-CMDeploymentSummarization should have an option to pass the software name as paramenter. the only option would be using deploymentid, but to get the deploymentid we need use get-cmdeployment, but this does not help if you want to run the summarization before running the cmdlet. having -collection -softwarename would be a great addition

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  PowerShell  ·  Flag idea as inappropriate…  ·  Admin →
  6. New-CMSoftwareUpdateAutoDeploymentRule missing switch (EnableFailureAlert)

    SCCM admins would like to have a switch added to New-CMSoftwareUpdateAutoDeploymentRule cmdlet to allow them to generate an alert when the ADR rule fails.
    See screenshot below

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  PowerShell  ·  Flag idea as inappropriate…  ·  Admin →
  7. Cloud DP Option for Internet based Clients

    At the Moment Internet Based Clients cannot use Cloud DPs as Content Location as documented here:
    https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/use-a-cloud-based-distribution-point
    "Clients on the Internet that receive both an Internet-based distribution point and a cloud-based distribution point as content locations for a deployment, only attempt to retrieve content from the Internet-based distribution point. If the client on the Internet fails to retrieve content from the Internet-based distribution point, the client does not then attempt to access the cloud-based distribution point. "

    It would be nice to have an Option that Internet Based Clients (configured in an IBCM or Cloud Proxy Service Scenario) can get…

    10 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    completed  ·  2 comments  ·  Content  ·  Flag idea as inappropriate…  ·  Admin →
  8. Resultant Client Settings

    add a get-CMResultantClientSettings so we can be able to check what the client should have by powershell without need of the console

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  PowerShell  ·  Flag idea as inappropriate…  ·  Admin →

    As of 1610, we now have Get-CMResultantSettings

    NAME
    Get-CMResultantSettings

    SYNTAX
    Get-CMResultantSettings -Name -SettingsType {Device | User} [-Setting
    {BackgroundIntelligentTransfer | Cloud | ClientCache | ClientPolicy |
    ComplianceSettings | ComputerAgent | ComputerRestart | EndpointProtection |
    HardwareInventory | MeteredNetwork | MobileDevice | NetworkAccessProtection |
    PowerManagement | RemoteTools | SoftwareDeployment | SoftwareInventory |
    SoftwareMetering | SoftwareUpdates | StateMessaging | UserAndDeviceAffinity}]
    [-DisableWildcardHandling] [-ForceWildcardHandling] []

    Get-CMResultantSettings -Id -SettingsType {Device | User} [-Setting {BackgroundIntelligentTransfer | Cloud | ClientCache | ClientPolicy | ComplianceSettings | ComputerAgent | ComputerRestart | EndpointProtection | HardwareInventory | MeteredNetwork | MobileDevice | NetworkAccessProtection | PowerManagement | RemoteTools | SoftwareDeployment | SoftwareInventory | SoftwareMetering | SoftwareUpdates | StateMessaging | UserAndDeviceAffinity}] [-DisableWildcardHandling] [-ForceWildcardHandling] [] Get-CMResultantSettings -InputObject -SettingsType {Device | User} [-Setting {BackgroundIntelligentTransfer | Cloud | ClientCache | ClientPolicy | ComplianceSettings | ComputerAgent | ComputerRestart | EndpointProtection | HardwareInventory | MeteredNetwork | MobileDevice | NetworkAccessProtection | PowerManagement | RemoteTools | SoftwareDeployment | SoftwareInventory | SoftwareMetering | SoftwareUpdates…
  9. Stop filling smsts.log with useless ****

    Troubleshooting a failed task sequence is sometimes impossible, after the TS completes you sometimes end up with 3 files and 6MB of useless debugging junk, sometimes an entire 2MB file is full of nothing but lines like TS deleting 'CCM_CIVersionInfo.PolicyID=. It's amazing things ever work correctly with that much mayhem going on.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  10. Run PowerShell Command in Task Sequence

    In the a Task Sequence you have the option to 'Run PowerShell Script' where you have to specify a package \ script name etc. Could we have 'Run PowerShell Command' this saves having to download the script and run it. For example at the moment I 'Run Command Line' and use 'powershell -command start-sleep 300'. It would be great if we could just run native powershell commands.

    34 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    4 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  11. Exclude a mac address directly from the console

    I'd like to be able to add a mac address to an exclusion list directly from the console, in a order to use the same NIC (usb adapter) on different devices (example : pxe deployment).
    Today, we have to add manually the mac address in a registry value.
    The procedure is described in this Technet blog article -> https://blogs.technet.microsoft.com/configurationmgr/2015/08/27/reusing-the-same-nic-for-multiple-pxe-initiated-deployments-in-system-center-configuration-manger-osd/

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  12. "Run scripts using the 32 bit scripting host on 64 bit devices" for Configuration Items and Baseline not working as expected in SCCM 1606

    We are experiencing the issue as mentioned in the below article:
    https://thesccm.wordpress.com/2016/09/02/sccm-1606-bug-32-bit-process-powershell-detection-method-doesnt-work/

    We have tested the same in 1511 and 1606, and behavior is that it works on SCCM 1511 but it doesn’t on SCCM 1606 as it doesn’t run a 32 bit Shell:

    SCCM 1511:

    With Run as 32Bit – Compliant for Greater than 0 condition
    Without the option – Non-Compliant as expected because it is unable to find the class

    Script command line: "C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -NoLogo -Noninteractive -ExecutionPolicy Bypass "& 'C:\Windows\CCM\SystemTemp\4375f470-32c6-497c-be63-d3ada81153df.ps1'"
    Script command line: "C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe" -NoLogo -Noninteractive -ExecutionPolicy Bypass "& 'C:\Program Files\SMS_CCM\SystemTemp\cd4b0516-48fd-41f2-a2c3-cd249b53417a.ps1'"

    SCCM 1606:

    With Run as 32Bit –…

    4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Compliance Settings  ·  Flag idea as inappropriate…  ·  Admin →
  13. Exception error occurs when I click on the "Office 365 Installer" of "Office 365 Client Management".

    "System.IO.FileNotFoundException: Failed to download file manifest for O365 from http://officecdn.microsoft.com/wsus/releasehistory.cab, with error 404" is displayed.
    In Japan.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    8 comments  ·  Flag idea as inappropriate…  ·  Admin →
  14. 7 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Application Management  ·  Flag idea as inappropriate…  ·  Admin →
  15. Predeclared Devices needs to be administered by ConfigMgr users who are not full site admins

    Within ConfigMgr 1606 the ability to predeclare devices was added, allowing you to import single or multiple 'company' mobile assets. Only full site admins can perform this action, this needs to be enabled as a security role or permission allowing non full site admins to complete the task.

    15 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
    completed  ·  Tyler Castaldo responded

    We added permissions for the entire Corporate-owned Devices node — including Predeclared Devices — for the Asset Manager and Company Resource Access Manager roles back in the Configuration Manager 1610 Technical Preview as described here: https://docs.microsoft.com/en-us/sccm/core/get-started/capabilities-in-technical-preview-1610#additional-security-role-support

    We did roll this change into the Configuration Manager 1610 current branch release as well.

    Does this meet your needs?

  16. Automatic notification when the Docs are updated

    Trying to keep track of which topics in the Documentation Library have been changed and when is a nightmare.

    Provide a notification mechanism such as a RSS feed for updates to the Documentation Library as they occur.

    In an ideal world it would be great to be told WHAT the changes were (be good if there was a way of easily snapshotting the article before and after the changes with the changes highlighted), but not sure how easy that is.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Documentation  ·  Flag idea as inappropriate…  ·  Admin →

    There are a few ways to accomplish this. For about the next week or so you can use the “Follow” link at the bottom in the comments section. This functionality goes away shortly when we switch over to GitHub Issues.
    As already stated, you can watch the GitHub repository, although this will provide notification of EVERYTHING that happens, which might get a bit noisy.
    The recommendation from the core docs team is to use the built-in search, and then the RSS link there. For example, if you want to monitor the Log files article (https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/log-files), search for the full page title that shows in the browser tab and in the search results (which may be different than what shows at the top of the article). For example, https://docs.microsoft.com/en-us/search/index?search=%22Log+files+for+troubleshooting+-+Configuration+Manager%22&scope=ConfigMgr. Note this is scoped to ConfigMgr and the title is in quotation marks. There should be only one result.…

  17. Increase max length of Package/Program Command Line

    The max is currently 260 characters for a package/program command line. This means a lot of things that could be a single powershell or cmd.exe line end up needing content for a .ps1 or .cmd file. Please increase the max to 2048-ish characters so more can get done in one line without content.

    19 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    8 comments  ·  Application Management  ·  Flag idea as inappropriate…  ·  Admin →
  18. Allow Boundary Group and Distribution Point Group Nesting

    Allow boundary groups to contain other boundary groups (and distribution point groups to contain distribution point groups) so that a services hierarchy can be created and managed much more easily. As an example, below are a Boundary and DP hierarchy setup:
    Boundary hierarchy:
    SiteBoundaryGroup - Contains Primary Site Server as an available site system, so it is available to whole site
    RegionalBoundaryGroupA - Contains an MP for the A region
    Regional
    BoundaryGroupB - Contains an MP for the B region
    LocalBoundaryGroup1 - Contains a local DP for location 1, part…

    5 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Content  ·  Flag idea as inappropriate…  ·  Admin →
  19. Display PackageID when viewing a task sequence step referencing content

    Sometimes when making changes to a task sequence, you may be manipulating steps that reference a package with a common name. You can view the TS Package Reference but it doesn't tell you exactly which step may reference that package.

    If you could view the package ID referenced by a step, when viewing that step, this would solve the problem!

    7 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  20. Direct Upgrade from SCCM 2012R2 SP1 to 1606 or higher (not via 1511 and then 1606)

    Right now we're having an environment with a CAS and two PRI with 165,000 clients. The hardware is "old" and has to be replaced.
    Everything is running on SCCM 2012 R2 SP1, SQL 2012 and windows server 2008 R2. Now we're planning an upgrade to SCCM 1606 or higher, SQL 2016 and windows server 2016 on different hardware. So far we found some TechNet pages telling us that there are issues with SCCM 1511 and SQL 2016, but SCCM 1606 and SQL 2016 ought to work (There is right now no information about the supportability of windows server 2016 with…

    9 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base