Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we can’t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the 🙂 button in the top right corner and choose “Send a Frown”. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer – our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Enable url-like shortcuts to nodes in the console (ie. deployment saved searches)

    I check up on deployments every few hours, would love to be able to create a shortcut on my desktop to "Microsoft.ConfigurationManagement.exe \Monitoring\Searches\Search99"

    9 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Noted  ·  2 comments  ·  Admin Console  ·  Flag idea as inappropriate…  ·  Admin →
  2. Support Center Log File Viewer support same log files as CMTrace

    The CMTrace tool is able to parse non-SCCM log files (e.g. 1E's Nomad logs) to properly pick up timestamps, process ID's etc. It would be very helpful if this could be added to the Support Center/Support Center Log File Viewer. It seems

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Tools  ·  Flag idea as inappropriate…  ·  Admin →
  3. Add a command line option to Support Center to connect to a remote computer

    The Support Center utility is a great addition but doesn't seem to support specifying a remote computer to connect to from the command line. This would allow it to be called automatically from scripts and other tools.

    This is option is implemented for the remote control viewer by running: CmRcViewer.exe <remote-computer>

    Likewise it would be great to be able to call the Support Center thus:
    ConfigMgrSupportCenter.exe <remote-computer>

    2 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Noted  ·  0 comments  ·  Tools  ·  Flag idea as inappropriate…  ·  Admin →
  4. Store output of run command line to TSEnv with "RunAsUser".

    Running a step as a user prevents you from using the TSEnvironment in order to store any data returned.

    The step could be anything, like getting a byte array of a certificate, ad-groups of the computer or primary user or as in this example, getting the TPM OwnerAuth from MBAM.

    I would rather store it directly in the TSEnv instead of in a temporary file and run another script to read the file just to be able to use the password, as a variable, from a “Run commandline”-step.

    The only other workaround I’ve found this far is running the step…

    11 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  5. Add support to Cloud Distribution Point for dynamically defined content

    Add the support for dynamically defined content in an OSD task sequence to Cloud Distribution point. Today in an on-prem environment you can use OSDDownloadContent.exe to pre-cache or download driver packages, BIOS packages and other items that are machine specific.

    However this functionality is not available on Cloud Gateway/Cloud DP. The sequence will execute but support for Dynamic Variables Task Sequences so we can modify the packageID in sequence and then then trigger the OSDDownloadDownloadPackages command to download that content while the sequence is running is not.

    Back in 2018 Tweeted about this https://twitter.com/PaulEAndrews/status/1030155355236560897.

    8 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  6. Add "Last Distribution Point" to Asset Columns

    Add "Last Distribution Point" to the options for columns in the Assets list.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Noted  ·  0 comments  ·  Admin Console  ·  Flag idea as inappropriate…  ·  Admin →
  7. Warning message for high-impact collection changes

    When I started working with SCCM years ago I was told that you're not really an SCCM admin until you accidently deployed MS Office to the whole company. Through my years of working with SCCM I've seen many people update a collection not knowing that there was a mandatory deployment attached which resulted in the deployment getting sent to systems that were not intended.
    I would like to see a check/notification box added when a query based collection is updated that reminds you of the required deployments attached. This message will only show if an unexpired required advertisement is still…

    73 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Noted  ·  1 comment  ·  Collections  ·  Flag idea as inappropriate…  ·  Admin →
  8. Phased deployment support for PowerShell cmdlets

    Phased Deployment Powershell Cmdlets

    45 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Noted  ·  2 comments  ·  PowerShell  ·  Flag idea as inappropriate…  ·  Admin →
  9. Allow additional customization of the task sequence dialog

    Please allow additional customization in the Task Sequence High Impact Dialog Box. Enable or Disable the Individual Comment Boxes completely, and allow Hyper Links to launch a web page with more information.

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  10. allow export all task sequences or folder of task sequences

    We have many task sequences, sorted into folders for multiple users, when it comes to archiving them, it's tedious, we'd like to archive multiple task sequences by user (or by folder), this would be great, right now you have to export one task sequence at a time which is tedious.

    45 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  11. Remote Control: Improve Multi-Monitor Experience

    Business Case (I know how you PMs love these):
    The current CB 1902 implementation is going to make this conversation part of our helpdesk script:
    “What screen is the app on?”
    “Can you move that window to the monitor where X is showing?”

    “No, not that one.”
    “Nope, still don’t’ see it”
    “Ok let me reconnect in full screen, please accept the prompt again.”
    “No no no, don’t hang up the phone, that’s not how this works.”
    “Ok, you should see a prompt to allow me to connect.”
    “Nope it’s there, trust me.”
    “Got it, thanks. Ok, let me move…

    323 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    19 comments  ·  Remote Control  ·  Flag idea as inappropriate…  ·  Admin →
  12. Allow entering XML data within task sequence apply OS step

    Allow you to be able to paste in an unattend.xml file directly into the Apply Operating System Image task sequence step instead of having to use a package. Similar to how you can add a PowerShell script directly in to the task sequence step in SCCM 1902.

    8 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  13. Task Sequence Detection Method

    It would be very useful to be able to control if a Task Sequence has been "Installed" or not by adding a custom detection method like we have in the AppModel.

    This is valid in scenarios where we do a bare metal required rollout and in in-place-upgrade scenarios. Combined with having different versions of a task sequence being deployed.

    30 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →

    Updating status to Noted – see https://docs.microsoft.com/en-us/configmgr/core/understand/find-help#send-a-suggestion for an explanation of each value.

    We recently introduced Task Sequence as a deployment type for applications – see https://docs.microsoft.com/en-us/configmgr/core/get-started/2020/technical-preview-2001-2#bkmk_tsdt

    This is also in our 2002 release which is in the opt-in phase at the moment.

    With this you can specify detection methods the same way you would for applications.

    Regarding your comment for bare metal – could you elaborate on your scenario? With bare metal the machine is wiped and would have no ‘history’. In a bare metal case the registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CM_DSLID records the package ID of the image used, that may be of use to you here? Any more detail you can provide would be great, thanks.

  14. Maximum allowed Management Points for a Primary Site.

    We use a multitenant SCCM environment with clients/customers in untrusted forests.
    Because we target users, we also deployed the Management Point role in all untrusted forests.

    At this moment Configmgr only supports up to 15 management points per primary site coming from 10 in the past.

    We would like to see the maximum allowed management points per primary site bumped to a higher level.
    This will give us the ability to stay with a single primary site setup and avoid CAS.

    32 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    8 comments  ·  Multi-Tenant/ISP  ·  Flag idea as inappropriate…  ·  Admin →
  15. Enable New-CMBootableMedia to use a Cloud DP (or Content enabled CMG)

    This Cmdlet does not support using a cloud distribution point as the distribution point source (and neither does the GUI).

    This means that in order to use this feature we have to have an on-premise DP purely for this purpose.

    Regards
    Wayne

    19 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  16. Do something with Operating System tab

    When deploying a custom task sequence that only contains applications and no operating system it confuses our users.

    Suggest to rename Operating System tab with something else like Package Bundles. Or (after you add icon support for task sequences) have custom task sequences in the Applications tab instead of Operating Systems.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Software Center  ·  Flag idea as inappropriate…  ·  Admin →

    Updating status to noted. See https://docs.microsoft.com/en-us/configmgr/core/understand/find-help#send-a-suggestion for an explnation of each value.

    Our 2002 release is now in the opt-in phase. We have added a task sequence deployment type which allow icon customization.

    You can opt-in and then download 2002 through their Admin Console now.
    Blog: https://techcommunity.microsoft.com/t5/configuration-manager-blog/update-2002-for-microsoft-endpoint-configuration-manager-current/ba-p/1272670
    Docs: https://docs.microsoft.com/configmgr/core/plan-design/changes/whats-new-in-version-2002
    Support Information: https://aka.ms/cmcssreleaseinfo

    Custom task sequences will always appear in the applications tab unless the steps indicate that it is an OS Deployment task sequence e.g. has a boot image reference and restart to WinPE step or a Upgrade OS step.

    Try out task sequence as deployment type and let us know your feedback and if your ask is addressed with that new feature.

  17. Set-CMAutoDeploymentRuleDeployment to include missing AllowWUMU and AllowUseMeteredNetwork

    Although you can now add multiple deployments to a single Automatic Deployment Rule there a couple of options that can be read but not set. These are:

    "If software updates are not available on the distribution point in current, neighbor or site boundary groups, download content from Microsoft Updates."
    and
    "All clients on a metered internet connection to download content after the installation deadline, which might incur additional costs"

    I can successfully retrieve all Deployments associated with an Automatic Deployment Rule via the Get-CMAutoDeploymentRuleDeployment cmdlet and see the current settings for these properties by parsing the DeploymentTemplate XML.

    0 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Noted  ·  0 comments  ·  PowerShell  ·  Flag idea as inappropriate…  ·  Admin →
  18. AD computer object description

    Setting the AD computer object description should be allowed inside a task sequence during the domain join operation.
    Whether or not this is on the dialog box, is not important to me. I'd be happy setting a TS variable (ie. OSDComputerObjectDescription)

    Alternatively, we could use a PowerShell script using different credentials (which Task Sequences also do not allow). Similar to the way
    the "Run Command Line" allows the input of credentials.

    Right now we have to use a kludgy "Run Command Line" using credentials and run
    a batch file that calls something like: PowerShell.exe -executionpolicy Bypass -command pscommandhere
    or: PowerShell.exe…

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
  19. Exclude certain operating systems from discovery

    It would be great if we could exclude certain OS's from discovery. I have over 5500 machines in my DB that I couldn't care less about but they reside in an OU where I have machines I do care about.

    3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Client Discovery  ·  Flag idea as inappropriate…  ·  Admin →
  20. Merge two resources with the same MAC Address

    If I import a new computer using its MAC Address but later I install manually the client in the actual computer, two resources with the same name end up in the SCCM Database.
    An option to make the default action merging both resources or just associating the client DDR to the manual import.

    0 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Noted  ·  0 comments  ·  Client Discovery  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base