Ideas
What features would you like to see?
All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we can’t promise to reply to all posts.
If you require assisted support, please see https://aka.ms/cmcbsupport for more details.
-
Display all configuration baseline rule in software center under device compliance tab.
Display all configuration baseline rule in software center under device compliance tab.
89 votesNoted ·AdminMark Silvey - ConfigMgr Product Team (Engineering Manager, ConfigMgr, Microsoft Endpoint Configuration Manager) responded
Makes sense! Thanks for the feedback.
-
ConfigurationManager PowerShell module should register itself as an Env Variable
Today, when you install the CM Console, the PowerShell module will be placed under the %CMInstallDirectory%\AdminConsole\Bin\ConfigurationManager.psd1
This makes sense given where the user is choosing to install the console, and that's fine. But placing it here off the beaten path means that it is not importable using PowerShell's module autodiscovery features. For instance, if a module is found in any of the standard user or system paths (or registered under the $ENV:PsModulePath) the user can easily import the module without having to specify the full path, a big user quality of life win. This is the way that SQL Server…
88 votes -
Task Sequence deployment option of "While no user is logged on"
Give us the option to restrict a required Task Sequence to "When no user is logged on" This would be particularly helpful when using Task Sequences to push out Application updates. That way if the TS tries to run while a user is logged on it won't fail as soon as it hits the applications which are set to "When no user is logged on"
86 votesUpdating status to Noted. See https://blogs.technet.microsoft.com/configmgreng/2016/03/11/configmrguv/
-
Allow Applications with interactive deployment methods in a task sequence
In SCCM 2007 we utilized package with multiple programs. One install program that was silent to be used in a task sequence. One with interaction (appdeploy toolkit e.g.) for distribution to existing PCs. Once we moved to application we created multiple deployment methods with the appropiate filters. However if one of the deployment methods does contain the 'allow interact' option the application can not be added to a task sequence even though there are deployment methods that would apply to a OSD situation were it would pick the non-interactive one. Would like to see a logic check in the task…
84 votesUpdated by bobmn for sangeev/OSD
-
OS Deployment completion screen
Sometimes a task sequence can fail without the technican noticing the reboot countdown, so they just see a login screen and assume everything is okay. How about a "OS Deployment Failed/Succeeded" splash screen at completion? MDT (UDI) has a completion screen, although it doesn't show on error. Still - something like that.
79 votesUpdated by bobmn for sangeev/OSD
-
Allow user to select 'automatically restart' when applying all required changes.
When the user received the 'Software changes must be applied to your computer' there are two radio options:
'Apply all required changes now (recommended)'
'Apply all required changes outside my business hours'There is also an checkbox that say 'Restart my computer automatically if needed'. However, this checkbox is disabled when the first radio option is selected. I would ask that it remains enabled for both options. We are trying to train users to take an active role in installing updates according to their own schedule. The reboot process has become a large portion of the update process. So if…
78 votes -
Allow option for GPO processing during Task Sequence
Right now GPO processing is disabled during TS execution. This is annoying as quite often there's settings and environment configuration for a machine pushed by GPO, and right now they only apply at the end of the TS.
It would be nice to have an explicit "process group policy" step in a TS, which would be the equivalent of a "gpupdate /force".
78 votesLeaving status as Noted – see https://blogs.technet.microsoft.com/configmgreng/2016/03/11/configmrguv/
We don’t do anything explicit to block GPO processing, in earlier Windows versions that wasn’t the case but GPO apply was problematic in some instances
Our next step for this item is clear explanation of how GPO relates to OS Deployment Task Sequences and standalone Task Sequences.
-
Add Windows 10 Servicing information to Software Center
Check out the picture of new tab in Software Center >(
76 votesUpdated by bobmn for sangeev/OSD
-
Enable Tamper Protection via SCCM
It would be nice to have ability to enable Tamper Protection in defender via SCCM antimalware policy
76 votesThanks for your feedback, updating status to Noted.
See https://docs.microsoft.com/en-us/mem/configmgr/core/understand/find-help#send-a-suggestion for an explanation of each value.
-
ConfigMgr SUM installs should update the date of last install in Windows Update control panel applet
When you only use ConfigMgr to install updates, the date on the Windows Update control panel applet often reflects something that is really inaccurate as ConfigMgr doesn't update it. This often leads to a very negative reaction of "I thought those darn ConfigMgr admins were updating our workstations and servers!?!" And then we have to explain that we are, but that date doesn't get changed.
Can we please just ensure that when Software Update Management installs any updates, the Windows Update control panel applet gets set to the current date?
I stole the screenshots from this thread: https://social.technet.microsoft.com/Forums/en-US/b33dd5b2-64b3-476d-8fc5-232cbafced47/sccm-updates-are-installed-but-windows-update-status-wrong?forum=ConfigMgrCompliance
And I…
75 votesNoted ·Admindjam (Product Director, or Executive, Microsoft Endpoint Configuration Manager) responded
Never heard this before. Makes sense.
-
Warning message for high-impact collection changes
When I started working with SCCM years ago I was told that you're not really an SCCM admin until you accidently deployed MS Office to the whole company. Through my years of working with SCCM I've seen many people update a collection not knowing that there was a mandatory deployment attached which resulted in the deployment getting sent to systems that were not intended.
I would like to see a check/notification box added when a query based collection is updated that reminds you of the required deployments attached. This message will only show if an unexpired required advertisement is still…73 votes -
Create a node in the console with favorite action
It's possible to create a new node in the console with favorite actions.
Example:
Favorite\Frequent Action 1 (Device collection)
Favorite\Frequent Action 2 (Monitoring content)
Favorite\Frequent Action 3 (Application Deployment)If you want to add any action in the console to favorite Node, just right click on the action and select add to favorite actions...
In this wau
73 votes -
Remote Control features and improvments
I would like to thank Microsoft to allow their customers to share new and innovative ideas and I would like to present mine from my experience as Desktop Management Engineer in my company.
Initially we were using a comparative tool called LANDesk Management Suite and on the beginning of this year we have moved to SCCM 1511, since then I had received many complains about remote control comparing to the past experience.
I really like SCCM as a whole and I think it is really good tool and really nice features and constant updates, but not the remote control.
I…72 votes -
Better Reporting for installed software
Software normalization built into SCCM reporting. An integrated solution to manage software inventory, software intelligence and license management. As a SCCM administrator it has been difficult to provide accurate reporting on installed software packages without purchasing third party normalization tools like BDNA or SNOW. Software normalization capabilities would be a great addition to SCCM.
1. Software Recognition Service that recognizes software requiring a license.
2. Software title normalization.
3. Ability to import all owned software licenses and then compare against what is actually installed.
4. Ability to recognize when software has been removed or upgraded. Example: if Office 2010 has…71 votes -
Install applications before users can press ctrl+alt+delete to login.
Add feature to deploy applications before users are allowed to logon at the ctrl+alt+delete screen. This would be a nice alternative to having to check for running processes before installing applications and would not interrupt users in their work.
69 votes -
Show icon set for an application in admin console
Applications can have a custom icon set for them. Applications listed in the SCCM Admin Console have an "icon", but it's the same generic one for every application. Would love to see the icon I set in admin console next to each app for easy identification.
69 votes -
OSD Task Sequence Restart Computer step needs "if reboot pending" option
Please add to the Restart Computer OSD task sequence step an option that will check if the system requires a reboot and then only restart the computer if it needs to. Right now to work around this need, we have to execute a PowerShell script and write the results to a custom task sequence variable and then use that variable as a condition on the Restart Computer step. Adding this option natively would be much more elegant. Attached is the script we're using.
68 votesThanks for the feedback and suggestion as well as the example. Solid idea too.
Updating status to Noted, we’ll update in the future when we’ve tested our proposed solution.
-
Enable use of collection and computer variables in application model
For the same reasons that computer and collection variables are useful and strategic for OSD, they would also be with the application model. Examples:
+ Customizing command-line parameters for installation
+ Leveraging in scripts for the protection of secret/sensitive data like passwords or product keys66 votes -
Application Task Sequence
For complex software deployments, we regularly use Task Sequences to sequence reboots and installation orders, as well as containing logic on the various steps to only run when certain conditions are met. This allows for much more complex and flexible deployments.
The problem is, if a reboot step is initiated, no Task Sequence progress is displayed to the user to let them know that installations are taking place behind the scenes. To them, the reboot occurs and then they return to the CTRL+AT+DEL screen.
It would be great if a new class of Task Sequence could be created that would…
65 votes -
DCR: Task Sequence Export / Import
Add an optional option to provide new source location path for each package, application, ... when importing a Task Sequence that has been exported with content and references. Imagine you have 2 ConfigMgr environment a Test and a Production environment completely isolated from each other and you want an easy way to sync. A cool thing would be to only export "Metadata" of the Task Sequence and all References (Applications, Packages, ...). At the target site you have the same folder structure for content source for example \sccmsources\share\Applications,\sccmsources\share\Packages, ... and so on. If you start the import, you will be…
64 votesUpdated by bobmn for sangeev/OSD
- Don't see your idea?