Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we canā€™t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the šŸ™‚ button in the top right corner and choose ā€œSend a Frownā€. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer ā€“ our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. New-CMDetectionClauseWindowsInstaller Missing Braces in Product Code

    When an MSI detection rule is created with New-CMDetectionClauseWindowsInstaller, and applied to a Deployment Type with Set-CMScriptDeploymentType, the product code in the detection rule is missing the braces. This causes the detection rule to fail to detect an application that is actually installed. The application is successfully detected after adding the surrounding braces to the product code in the SCCM console.

    2 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →
  2. Add the option to set timeouts on more task sequence steps

    We recently added a task sequence step which involves querying a Dell web API for warranty information to write to WMI during OSD. We use a Run PowerShell script step for that. Unfortunately the Dell API is not always responsive which can lead to the TS hanging up on that step. I'm going to create a program for it for now so that it has a timeout, but it would be great if the Run PowerShell Script TS step had the option to check a box and specify a timeout period like some other steps have.

    2 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  3. Make hidden Variable really hidden

    In SCCM are normal and hidden variables. These hidden variables are not really hidden. For example, when you use them during Installation, those variables are visible in the clients logfiles.

    2 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →

    Thanks for the feedback, we’d missed updating this previously.

    There’s now options in the task sequence editor to specify if the variable is hidden, this will hide the variable in the log too. Same for the Run Command line action. See https://docs.microsoft.com/en-us/sccm/core/plan-design/changes/whats-new-in-version-1902#other-improvements-to-os-deployment & https://configurationmanager.uservoice.com/forums/300492-ideas/suggestions/15282795-secret-task-sequence-variable-value-exposed for more detail

  4. TMG replacement for SCCM IBCM

    TMG is end of life and MS has not provided an alternative yet for SCCM IBCM to manage clients over the Internet. It would be great if alternatives like F5 would be supported for IBCM setup.

    2 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  5. Remove trailing comma in primary user column

    When a device has a single primary user they appear with a trailing comma. Can this be cleaned up?

    2 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Admin Console  ·  Flag idea as inappropriateā€¦  ·  Admin →
  6. List SMS Provider as site system role

    When decomissioning a site sytem, having the sms provider installed on that site system can cause the decomissioning to fail. By just displaying the sms provider as a site system role in the console, it's much easier to figure out that the fact that the sms provider is still installed is causing this.

    2 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Admin Console  ·  Flag idea as inappropriateā€¦  ·  Admin →
  7. Run powerShell Script task sequence step to set variable appends to existing value instead of replace

    When using the new Run Powershell script step in a task sequence in CM 1902 and you use the "Output to a task sequence variable" option and choose and existing task sequence variable the value returned from the powershell script is appended to the variable instead of replacing the value of the variable.

    Seems this should set the value not append the value.

    2 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  8. There are no task sequences available to this computer

    We have experienced the issue for Unknown computers,
    "There are no task sequences available to this computer. Please ensure you have at least one task sequence advertised to this computer"

    As per below blog, this issue is fixed in 1702 update rollup
    https://blogs.technet.microsoft.com/configurationmgr/2017/08/03/error-there-are-no-task-sequences-available-to-this-computer-during-a-pxe-boot/

    However, the issue still occurring after 1702 rollup fix.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    2 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  9. Resultant Client Settings

    add a get-CMResultantClientSettings so we can be able to check what the client should have by powershell without need of the console

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →

    As of 1610, we now have Get-CMResultantSettings

    NAME
    Get-CMResultantSettings

    SYNTAX
    Get-CMResultantSettings -Name -SettingsType {Device | User} [-Setting
    {BackgroundIntelligentTransfer | Cloud | ClientCache | ClientPolicy |
    ComplianceSettings | ComputerAgent | ComputerRestart | EndpointProtection |
    HardwareInventory | MeteredNetwork | MobileDevice | NetworkAccessProtection |
    PowerManagement | RemoteTools | SoftwareDeployment | SoftwareInventory |
    SoftwareMetering | SoftwareUpdates | StateMessaging | UserAndDeviceAffinity}]
    [-DisableWildcardHandling] [-ForceWildcardHandling] []

    Get-CMResultantSettings -Id -SettingsType {Device | User} [-Setting {BackgroundIntelligentTransfer | Cloud | ClientCache | ClientPolicy | ComplianceSettings | ComputerAgent | ComputerRestart | EndpointProtection | HardwareInventory | MeteredNetwork | MobileDevice | NetworkAccessProtection | PowerManagement | RemoteTools | SoftwareDeployment | SoftwareInventory | SoftwareMetering | SoftwareUpdates | StateMessaging | UserAndDeviceAffinity}] [-DisableWildcardHandling] [-ForceWildcardHandling] [] Get-CMResultantSettings -InputObject -SettingsType {Device | User} [-Setting {BackgroundIntelligentTransfer | Cloud | ClientCache | ClientPolicy | ComplianceSettings | ComputerAgent | ComputerRestart | EndpointProtection | HardwareInventory | MeteredNetwork | MobileDevice | NetworkAccessProtection | PowerManagement | RemoteTools | SoftwareDeployment | SoftwareInventory | SoftwareMetering | SoftwareUpdatesā€¦
  10. 1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →

    Updating status to completed. That message is shown when thereā€™s no Applications added to the step and is expected.

    You need to create an Application with a deployment type that installs as System, then you can browse to select in the Install Application step. More details here ā€“ docs.microsoft.com/en-us/sccm/osd/understan..

    Hope this helps answer your question? If not, please let me know.

  11. Add Retry Count and Delay between to Task Sequence

    Add a retry count and delay between retry properties to at least the most critical task sequence steps, if not all, so that we can make task sequences more resilient when there are hiccups to servers or network.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    3 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  12. Add -RebootBehavior option to Set-CM<Type>DeploymentType

    In previous command Set-CMDeploymentType is was possible to set reboot behavior but in the new Set-CMScriptDeploymentTYpe and SetCMMSIDeploymentType it is not an option.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →
  13. DwnLdr-SPY

    Hi,

    I noticed that our company Sophos software picked up a virus that the SCCM Endpoint software did not, can you confirm if the following virus is in your threat catalogue?

    VBS/DwnLdr-SPY aka Trojan.GenericKD.4228438

    This has been in the Sophos database since 20 April 2017

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    completed  ·  0 comments  ·  Software Center  ·  Flag idea as inappropriateā€¦  ·  Admin →
  14. 1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Documentation  ·  Flag idea as inappropriateā€¦  ·  Admin →
  15. Windows AppsStore

    Be able to have a local Package of a windows app instead of using the deep link feature.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Application Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  16. Task Sequence Missing package error message include Package ID

    When a package is missing on a distribution point for a task sequence, the error message used to include the package ID, so we knew which package to deploy. That is now missing in the latest build. Now it's a guessing game on what's missing. Return the Package ID so that troubleshooting gets easier, not prettier.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →

    No further response so closing for 1802

    Explanation of behavior:

    If you select a task sequence which has a missing reference the Deploy option is inactive (grayed out) ā€“ thatā€™s done to prevent deployment when all required content is not available.

    The task sequences view also has the References tab which shows the distribution status of all statically referenced packages

    Editing the task sequence with a missing reference will pop a dialog listing any missing references

    If you launch via PXE any missing references are listed ā€“ the package Id or App Scope are shown with the message to validate content and use the retry to refresh policy.

  17. C:\_SMSTaskSequence folder is left behind with permissions of everyone Full control over this folder only 50% of the times

    When you run a task sequence on a machine, a "C:_SMSTaskSequence" folder is created and ideally removed after the successfuly execution of the TS.
    This is correctly locked down to Builtin\Administrators - Full Control NT Service\TrustedInstaller - Full control

    But we have seen instances where about 50% of the time, even when the TS completes successfully, this folder is left behind and not cleaned up, with the error as below:

    Execution engine result code: Success (0) Cleaning Up.
    Removing Authenticator
    Cleaning up task sequence folder
    Unable to delete file C:_SMSTaskSequence\TSEnv.dat (0x80070005). Continuing.
    Failed to delete directory 'C:_SMSTaskSequence'
    SetNamedSecurityInfo() failed.
    SetObjectOwner()ā€¦

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →

    There’s changes in the SCCM 1610 release – see https://docs.microsoft.com/en-us/sccm/core/plan-design/changes/whats-new-in-version-1610

    While not listed in the documentation there we made changes to how we remove the _SMSTaskSequence folder on completion.

    I’m marking this as completed as it’s now available. If there’s something I’ve missed please reuse the vote and I’ll address.

  18. Fix Install Applications step support with OSD standalone media

    During standalone media deployments the CM1706 client attempts to contact a MP when executing the Install Applications step and fails. Please fix this, as this capability worked, though limited, in ConfigMgr 2012 R2

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  19. 1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Mobile Device Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  20. PXE Reponder Service doesnt stop/fail on error.

    We have had situations where the PXE Reponder service errors and stops listening to PXE requests WITHOUT the service stopping.
    For example, if the service starts and the machine doesnt yet have an ip address.

    Errors reported:
    PXE: No valid IP addresses.
    PXE::StartPXEServer failed; 0x80070490

    BUT the service keeps running!

    Suggest that the service should stop in this case so that other monitoring tools can detect and remediate the service failing.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →

    Updating status to completed.

    The opt-in phase of our 2002 release (fast ring) is now live and contains the changes asked for with this item.
    You can opt-in and then download 2002 through their Admin Console now.

    Blog: https://techcommunity.microsoft.com/t5/configuration-manager-blog/update-2002-for-microsoft-endpoint-configuration-manager-current/ba-p/1272670
    Docs: https://docs.microsoft.com/configmgr/core/plan-design/changes/whats-new-in-version-2002
    Support Information: https://aka.ms/cmcssreleaseinfo

  • Don't see your idea?

Feedback and Knowledge Base