Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we can’t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the 🙂 button in the top right corner and choose “Send a Frown”. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer – our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Add the option to set timeouts on more task sequence steps

    We recently added a task sequence step which involves querying a Dell web API for warranty information to write to WMI during OSD. We use a Run PowerShell script step for that. Unfortunately the Dell API is not always responsive which can lead to the TS hanging up on that step. I'm going to create a program for it for now so that it has a timeout, but it would be great if the Run PowerShell Script TS step had the option to check a box and specify a timeout period like some other steps have.

    2 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  2. Get-CMSiteMaintenanceTask pipeline to Set-CMSiteMaintenanceTask

    Before upgrading a CM Site, it is recommended to ensure that no maintenance tasks are running - it would therefore be useful to disable all of them during an upgrade "just in case" and would prevent the need to check the run time of each one.
    There's a Get-CMSiteMaintenanceTask, but I cannot store this as a variable and use it in the "-MaintenanceTask" argument of Set-CMSiteMaintenanceTask. I've been through the properties to look for a suitable one to explicitly pass to the argument, but nothing seems to work......

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  PowerShell  ·  Flag idea as inappropriate…  ·  Admin →
  3. Role-Based Administration - Document what permissions control... or at least start!

    The Role-Based Administration documentation does not describe what the individual permissions actually control, and they are not self explanatory. For example, under Collection, you see several different 'modify' permissions and it isn't clear what they each control:

    -Modify
    -Modify Client Status Alert
    -Modify Collection Setting
    -Modify Folder
    -Modify Resource

    Please provide even a basic amount of information about what they control in the console. This will help prevent us silly sysadmins from just giving people tons of permissions so we don't have to reverse engineer what each of the settings does in order to let people do just what they…

    37 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    5 comments  ·  Documentation  ·  Flag idea as inappropriate…  ·  Admin →
  4. Force Web Apps to open in the Managed Browser with hybrid SCCM/Intune

    Currently in Intune Standalone it is possible to create an external link and enable the option "Require a managed browser to open this link (Android and iOS only)". For the hybrid SCCM/Intune it is not possible yet. This feature would be nice to add to hybrid SCCM/Intune

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
    completed  ·  Tyler Castaldo responded

    Hi, Frans.

    You actually can force web apps to open in the Intune Managed Browser. There’s no checkbox in the SCCM console, but changing the protocol of the web app’s URL from “http” to “http-intunemam” or from “https” to “https-intunemam” prevents it from being opened in a non-managed browser.

    This has been documented here, right near the bottom: https://technet.microsoft.com/en-us/library/mt629356.aspx

  5. Add thorough documentation for Client Settings and what registry keys/WMI values are set by them on client devices

    I would love to have it officially documented exactly what each option in Client Settings is modifying when processed by the client. I know some of them are in the registry, some of them are in WMI but I haven't seen any documentation for this.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Documentation  ·  Flag idea as inappropriate…  ·  Admin →
  6. Console Client policy update for mobile devices

    In the console you can currently force a policy update for a Windows computer. I would like this option to be available for mobile devices.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Mobile Device Management  ·  Flag idea as inappropriate…  ·  Admin →
  7. Doc Bug: Is it one or both Audit settings needed?

    For getting the System Console Usage, Top Console User, and UDA stuff to work, you need to enable some security event log audits.

    This page says you need only 1 Audit setting:

    https://technet.microsoft.com/en-us/library/mt488912.aspx#BKMK_EnableSuccessLogonEvents

    These pages say you need both of the Audit settings:

    https://technet.microsoft.com/en-us/library/mt629338.aspx

    https://technet.microsoft.com/en-us/library/mt595706.aspx

    0 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Documentation  ·  Flag idea as inappropriate…  ·  Admin →
  8. Client Settings - Computer Restart - Allow longer than 1440 minutes, show friendly time

    Currently, the maximum an administrator can give users to reboot their systems is 1440 minutes (24 hours). Please let us specify up to 7 days. The goal of the delay is to allow a reasonable amount of time for an end user to save their work and reboot without losing anything. The 24 hour limit means that if a user is gone for a day, there is a strong chance they could lose their work. Allowing up to 7 days seems like a better compromise between end user control and respecting admin intent/organizational need.

    63 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    9 comments  ·  Admin Console  ·  Flag idea as inappropriate…  ·  Admin →
  9. New Software center (1511) Application doesn’t include installation status in Application tab

    Application doesn’t include installation status in Application tab,
    In the New Software Center, there's no way to tell easily if the suggested software is installed or not. It simply shows everything. You have to click each tile individually to find if it's installed.
    Yes, you can find installed apps in the "Installed software" tab, but from the user-experience perspective, to compare those two tabs every time (to find what is and what isn't installed), it's not very seamless.
    Do you know how to fix these issue or Ms has plan improve the New software center?
    Thank you

    2 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Center  ·  Flag idea as inappropriate…  ·  Admin →
  10. Windows 10 Rollback via SCCM

    The 30 Day Rollback option is available for all windows 10 users, but currently can not be automated using SCCM.

    This should change, as this feature closely integrates with Microsofts testing strategy of using different branches which grow bigger in size as the rollout of a new build progresses.

    When planing to integrate a similar scenario, in our case, we anticipate errors which have not been cought in testing of the previous branch and need to be able to quickly restore operations.

    I am well aware that if all our applications were packaged this would not pose much of a…

    32 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →

    Thanks for all your suggestions and feedback, updating status to completed. The DISM commands listed in the previous admin response address this ask and I’ve verified all via task sequence with no issues.

    SCCM 1902 fast Ring released today
    Blog: https://techcommunity.microsoft.com/t5/Configuration-Manager-Blog/Update-1902-for-Configuration-Manager-current-branch-is-now/ba-p/376516
    Docs: https://docs.microsoft.com/sccm/core/plan-design/changes/whats-new-in-version-1902

  11. Maintain Hardware Inventory customizations made to configuration.mof during upgrades

    Currently, upgrading to 1602 blows away any customizations made for extending hardware inventory in configuration.mof, requiring you to manually back up the settings and restore them after the upgrade.

    Make that go away, or at least less of a problem.

    Some suggested solutions in order of perceived difficulty:


    • Add a warning to pre-req checker if you don't have a standard configuration.mof so you know to re-implement your changes.


    • Merge the changes into the customer's existing configuration.mof instead of wiping/replacing it.


    • Remove the need for configuration.mof entirely - build a GUI for adding customizations, especially registry customizations


    Thanks for your help!

    19 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Flag idea as inappropriate…  ·  Admin →
  12. Correct the "Add Selected Items" ribbon button functionality

    Currently when you select a collection(s) in the console, then utilize the "Add Selected Item" button you are able to functionally add the collection(s) selected to another collection as a member, however it does not actually add the member of the selected collection(s) to the target collection just the root collection itself.

    Example A:
    1. Open Console and navigate to Administration \ Assets and Compliance \ Device Collections \ Select a collection.
    2. Click the "Add Selected Items" button and then "Add selected items to existing device collection"
    3. Select the existing collection that is to be the target

    The…

    80 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  13. Run PowerShell Script Success Codes

    Would like to see the "Run PowerShell Script" task sequence task have the same Success Codes options as the "Run Command Line" task does. Would provide some additional control in the task sequences.

    Currently to circumvent this I create a task sequence variable instead of an exit code to handle a subsequent step however I could likely do more if the Success Codes feature was available.

    14 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  14. Console device view should allow search/filter by MAC address

    We find ourselves trying to go from MAC address to device in the console fairly regularly, especially when troubleshooting things like PXE from the logs (which only shows MAC address) and needing to kill off failed OSD records (which may be named "Unknown" or have a random computer name in ConfigMgr, but you're now in WinPE ready to kick off the TS again, but only have the MAC from ipconfig /all to ID the old record).

    The MAC addresses are already being pulled by Heartbeat inventory, but you can't search/filter of part/all of the MAC address.

    Thank you for making…

    136 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    11 comments  ·  Asset Management  ·  Flag idea as inappropriate…  ·  Admin →
  15. Run user state capture silently

    User state can only be captured to a state migration point with the associated task sequence steps. If a task sequence is created to capture user state, it cannot run silently. Additionally, since state migration steps are OSD steps, the warning message is shown to users before it runs

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
    completed  ·  sangeev responded

    Thanks for the feedback. Marking this completed – I fixed this in build 8181 so the changes would be present in the 1511/1602 releases onwards

    Ran another test with current 1606 to double-check. Steps are:
    Request State Store – Capture
    Capture User State
    Release State Store
    Request State Store – Restore
    Restore User State
    Release State Store
    No warning message is shown

    Which build are you using?

  16. Add more discovery details to the Get-CMDevice commandlet

    When looking at the properties of a device, many attributes are included. For example, MAC address is an attribute that appears in those properties. When using the Get-CMDevice PowerShell commandlet though, these extended properties are not displayed.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  PowerShell  ·  Flag idea as inappropriate…  ·  Admin →

    Get-CMDevice returns instances of SMS_CollectionMember. Changing the output of this cmdlet is very likely to be a breaking change, and collection/device cmdlets like this are our most heavily used. Therefore there’s too much risk in changing the behavior here.

    Fortunately, all is not lost. Several releases back we introduced a new cmdlet, Get-CMResource which will return the raw resource objects from WMI. “Get-CMResource -ResourceType System” will return SMS_R_System objects and this should give you what you want. Get-CMResource output can still be pipelined into other collection cmdlets.

    For more information, see: https://docs.microsoft.com/en-us/powershell/sccm/configurationmanager/vlatest/get-cmresource

  17. "-StandardProgram" switch required for using "Start-CMPackageDeployment", this is a required switch without which the command will fail

    We are trying to create a deployment for a package as below:

    Start-CMPackageDeployment -CollectionName "WOL Testing" -PackageName "Powerdown" -DeployPurpose Available -DeploymentAvailableDay 02/05/2016 -DeploymentAvailableTime 10:50

    - Findings as below:

    Required Deployment with Schedule and Available Day and Time:

    Start-CMPackageDeployment -StandardProgram -CollectionName "Brik" -PackageName "SMS Toolkit" -ProgramName "SMS" -AllowSharedContent $true -DeployPurpose Required -DeploymentAvailableDay 2016/11/01 -DeploymentAvailableTime 11:00 -ScheduleEvent AsSoonAsPossible

    Available Deployment with available Day and Time:

    Start-CMPackageDeployment -StandardProgram -CollectionName "1" -PackageName "SMS Toolkit" -ProgramName "SMS" -AllowSharedContent $true -DeployPurpose Available -DeploymentAvailableDay 2016/11/01 -DeploymentAvailableTime 11:00

    - As the below options might be deprecated and new ones used please find the new commsnds as well:

    Old…

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Documentation  ·  Flag idea as inappropriate…  ·  Admin →
    completed  ·  nbigman responded

    These have been updated. Thanks for your request!

  18. Provide a method for expiring standalone media

    There are many ways to expire standalone media but most involve using a date stamp to compare with system time to determine if the sequence is still supported. Changing the system time circumvents this process. With Windows Servicing, it will be critical that an administrator be able to limit installation at or near the end of a support cycle. A supported process for expiring media programmatically ensures new devices aren't installed outside of a supported servicing window.

    39 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    4 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  19. Windows 10 documentation refers to wrong ConfigMgr version

    Not sure if ConfigMgr docteam can correct this, but Windows 10 documentation tells that:
    - ConfigMgr 2012 R2 is the tool to manage Windows 10 devices --> should be ConfigMgr 1511+
    - Point to Technical Preview documentation --> should point to ConfigMgr 1511+ docs

    https://technet.microsoft.com/en-us/itpro/windows/manage/manage-corporate-devices

    0 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Documentation  ·  Flag idea as inappropriate…  ·  Admin →
  20. Using express installation files

    Integration of the express installation files from WSUS
    I think this is becoming mandatory with the size of updates of Windows 10.

    684 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    24 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base