Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we canā€™t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the šŸ™‚ button in the top right corner and choose ā€œSend a Frownā€. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer ā€“ our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Provide better guidance/procedures for automatic updating of Windows Update Agent

    Still searching for clear guidance on automating updating the Windows Update Agent in an enterprise.

    3 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Documentation  ·  Flag idea as inappropriateā€¦  ·  Admin →
  2. Set a default or preferred boot image for PXE

    Have an option to set a specific boot image for PXE. In an environment where there are multiple boot images, when a device PXE boots it will first download whichever boot image (that is PXE capable) associated with the most recently deployed task sequence. It would be nice to have an easier way to just set a default or preferred boot image for PXE instead.

    84 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    5 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →

    Updating Status to completed

    The behavior is document at the link below – How is the boot image selected for clients booting with PXE?
    https://docs.microsoft.com/en-us/sccm/osd/deploy-use/use-pxe-to-deploy-windows-over-the-network#how-is-the-boot-image-selected-for-clients-booting-with-pxe

    As this item is now closed weā€™ll likely miss any new comments, to report issues see https://docs.microsoft.com/en-us/sccm/core/understand/find-help

  3. Enable a column for primary user!

    Enable an option to quickly see the primary user of a device (within the columns on the console) I don't have time to individually click machines or run reports to find the primary user.

    808 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    57 comments  ·  Admin Console  ·  Flag idea as inappropriateā€¦  ·  Admin →

    This is fixed in the just shipped #SCCM 1802 release. For both Primary User, and Logged on user. We still will improve a couple things:
    1) it is only in devices views; and we will add it in more views (collections, etc.)
    2) We actually think we can do even better than this, and use the SCCM fast channel to show currently logged in now users. If you like this idea, vote here:
    https://configurationmanager.uservoice.com/forums/300492-ideas/suggestions/13061739-see-if-a-user-is-logged-in-and-if-computer-is-acti

  4. Request for intelligent MP, SMP and SUP selection based on network location, like current DP selection

    This is a DCR requesting that we improve the logic around MP, SMP and SUP selection by clients. Currently, we gather AD Site and IP Subnet details for DPs, store that in DPInfo and include that information in the XML body returned on content lookup requests. Why can we not do this for other server roles so that the client can choose the best server to connect to based on matching AD Site and/or IP Subnet? This would provide a far better solution than having to populate AllowedMPs, too.

    49 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    7 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  5. Have the ability to remove a CAS when only one primary site is left

    Beginning with 2012SP1, we have the ability to add a CAS to an autonomous primary site. It could be interesting to reverse the proposition by having the ability to remove a CAS above a Primary when a CAS is no longer needed or has been set for a wrong reason.
    I know that it could be done through creating another hierarchy and using migration tasks by this is quite difficult for it requires additional hardware.

    273 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    18 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  6. Support Evaluation of "On Battery" for Most Client Activities

    To reduce potential for failures due to low battery situations and to minimize the ConfigMgr client's impact to system battery life, introduce a check for certain client actions to allow them to be delayed or bypassed when the system is found to be running on battery or running critically low on battery:
    + Software distribution
    + Compliance settings
    + Inventory
    + Anti-malware scans

    36 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  7. Better Task Sequence Step Options Tab Editor

    Currently you can only remove and remove all from a task sequence option condition. I think it would be very helpful and time saving if you could copy/cut/paste conditionals from a right click menu.

    90 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    6 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →

    Thanks for all your feedback and suggestions. Updating status to completed ā€“ see https://docs.microsoft.com/en-us/configmgr/core/understand/find-help#send-a-suggestion for an explanation of each status.

    This is the opt-in phase of our 1910 release (fast ring) and it is now live. Customers can opt-in and then download 1910 through their Admin Console now. In a couple weeks, weā€™ll open it up to everybody (slow ring), to enable downloading without the need to opt-in.

    Blog: https://techcommunity.microsoft.com/t5/Configuration-Manager-Blog/Update-1910-for-Microsoft-Endpoint-Configuration-Manager-current/ba-p/1032459
    Docs: https://docs.microsoft.com/configmgr/core/plan-design/changes/whats-new-in-version-1910

  8. Conditional Access for SCCM managed devices

    We want to use Conditional Access to Exchange on-premises for Intune managed devices and SCCM managed devices as well. Conditional Access with Intune managed devices works. But for a SCCM managed devices ActiveSync registrations are blocked when users want to use the Mail app on Windows 8.1 managed devices. We are looking for a solution that Conditional Access does not block ActiveSync registrations from SCCM managed devices as well. In our opinion Conditional Access should only block unmanaged devices and allow SCCM and Intune managed devices.

    139 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    3 comments  ·  Mobile Device Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  9. Introduce the Ability to patch Click to Run Applications like Office 365

    Currently Office 365 can't be patched with WSUS, instead you have to have your clients either contacting the Internet (not very good option for large enterprise), or you will have to distribute the new updated version on shared folders and define the new update source. it would be interesting to be able to use WSUS also for C2R apps.

    27 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    3 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  10. Add Client Cache configuration node to Client Settings object

    As of right now, Client Settings are configurable during the installation of the client via command-line or via the client-side interface. I believe it would be beneficial to allow this setting to be configured via Client Settings as one organization could have a variety of different use-cases for creating disparate client cache baselines.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  11. Option to set security scopes for SCEP policies

    SCEP policies do not have the ability to set security scopes. This is a problem because our SCCM is shared by several departments and colleges in the university. For example, someone may inadvertently (or intentionally) modify a policy for DCs which can have a catastrophic effects. Having the ability to set security scopes will restrict who has access to individual SCEP policies.

    51 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Endpoint Protection  ·  Flag idea as inappropriateā€¦  ·  Admin →
  12. SCCM Gateway Servers for Deployment to DMZ's

    We should be able to deploy SCCM Gateway servers for deployment to DMZ, Internet and Remote locations where opening ports to the management servers / domains are not feasible. We are unable to forward ports from the internet to our LAN and must use a DMZ. There is no way to implement SCCM for IBCM because of this.

    61 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    5 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  13. Add a button in Software Center to allow the users to refresh the Machine/User Policy

    Add a button in Software Center so the user can update the MAchine and User Policy. Would be a great feature for the end-user when waiting for an application to be available!

    118 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    11 comments  ·  Application Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  14. Icons and cosmetics for applications

    During the Create Application Wizard on Application Catalog step there is possibility to add some beautiful icon. BUT! The icon (.ico) size is limited to 250x250. Could you make it possible to add an icon file with picture size at least 256x256 (which is quite common size for pictures in .ico files)? Another thing as well, the icons in SCCM Applications/Packages list (Software Library-Overview-Application Management-Applications). They look all the same! Could you make them more attractive, say, the way they look in Application Catalog? Otherwise, whats the point in Icon column (which appears, by the way, as a defaultā€¦

    84 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    4 comments  ·  Application Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  15. SCCM On Premise MDM Should Support Windows 10 Devices

    It would be great if SCCM On Premise MDM would support Windows 10 Devices for scenarios such as settings, required application deployment, wipe and retire.

    64 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    completed  ·  3 comments  ·  Mobile Device Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  16. Show computer state, e.g. different icon for computer that is on, off, user logged on

    For each computer under "Devices", display different icons depending on whether a user is logged on or not, or whether the computer is powered on or not (see attached as an example of what this function looks like in Altiris Deployment Console). Such feature instantly allows admins to see which computers are available/online/offline, without having to run a report or ping the computer

    474 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    22 comments  ·  Asset Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  17. Task Sequences should be supported outside of operating system deployment scenarios

    Task sequences are only officially supported in operating system deployment scenarios. Task sequences are incredibly useful with their explicit logic and tight control. There's many cases where it can be useful to deploy task sequences outside of operating system deployment scenarios for complex software deployment scenarios.

    Task sequences should be made a first class citizen outside of operating system deployment scenarios.

    31 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    completed  ·  8 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  18. Make all dialogs shown to the end-user include company logo

    A truly great feature would be to be able to customize all dialogs show to the end-user, both for OSD, but also reboot prompts basically all dialogs shown to the end-user.
    Adding a company logo so that the end-user actually knows it is from our company and trustworthy.

    601 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    15 comments  ·  Application Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  19. Improve App-V deployments to non-persistent VDI's.

    Improve App-V deployments to non-persistent VDI's. Currently if you App-V applications to users in non-persistent VDI environments, there is a long delay after the user logs on before the applications install.

    If this could be changed so that applications are published significantly faster after a user logs in that would enable the use of SCCM to deploy applications to non-persistent environments. Currently this process is far too slow as users have to wait too long to get their applications.

    This was meant to be addressed in SCCM 2012 R2 SP1 however I logged a call with Microsoft and they saidā€¦

    4 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    3 comments  ·  Application Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  20. Continue to invest in Out-of-band support (Intel Vpro/AMT)

    SCCM only supports up to version 6, latest hardware uses version 10.
    SCCM provisioning uses SOAP which was deprecated by Intel.
    This is now a big hassle for people who want to use Intel Vpro in combination with SCCM. We need to make use of an Intel Add-on (Intel SCS) to get things working but itā€™s far from ideal.
    Please bring back the provisioning support compatible with the latest versions of Vpro and bring support for new features such as KVM.

    151 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    3 comments  ·  Admin Console  ·  Flag idea as inappropriateā€¦  ·  Admin →

    In order to support customers as the speed Intel is update Vpro/AMT – we worked with Intel for them to own the integration, and support latest versions (as ConfigMgr itself only supported up to version 6.) Intel has released an updated version that should solve the customer needs:
    http://www.intel.com/content/www/us/en/software/setup-configuration-software.html
    We will continue to partner with Intel to provide APIs they need for the integration.

  • Don't see your idea?

Feedback and Knowledge Base