Microsoft

System Center Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building System Center Configuration Manager, though we can’t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the ? button in the top right corner and choose “Send a Frown”. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer – our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the System Center Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Microsoft Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.

How can we improve Configuration Manager?

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. SCCM Gateway Servers for Deployment to DMZ's

    We should be able to deploy SCCM Gateway servers for deployment to DMZ, Internet and Remote locations where opening ports to the management servers / domains are not feasible. We are unable to forward ports from the internet to our LAN and must use a DMZ. There is no way to implement SCCM for IBCM because of this.

    61 votes
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      5 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
    • Add Windows 10 Build Subversion "UBR" collection to the default HINV classes

      The UBR registry key is responsible for displaying the subversion of a Windows 10 build to the end-user. For example 14393.*** where *** is the UBR string. If this is added to the HINV list of default classes this will allow for administrators to retrieve this information!

      This is located in: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion

      UBR REG_DWORD

      This will help administrators differentiate what intermediate builds of Windows 10 they have install and also support patch management because they can easily compare the released patches to the subversion build each month.

      60 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        11 comments  ·  Client Discovery  ·  Flag idea as inappropriate…  ·  Admin →
      • Add a column to device collections not only for Operating System but build/releaseid

        Is it possible to add a column to device collections for OS build / release id (i.e. Windows 10 1703 or Windows 10 15063.xxxx) to easily identify the installed Windows 10 version. The column Operating System is sometimes not quite enough information. Thanks!

        59 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          5 comments  ·  Admin Console  ·  Flag idea as inappropriate…  ·  Admin →
        • PowerShell cmdlets for editing task sequences

          Being able to edit task sequences with PowerShell would make managing task sequences much easier. Some possible new cmdlets could include:

          Add-CMTaskSequenceStep
          Get-CMTaskSequenceStep
          Remove-CMTaskSequenceStep
          Set-CMTaskSequenceStep

          Add-CMTaskSequenceGroup
          Get-CMTaskSequenceGroup
          Remove-CMTaskSequenceGroup
          Set-CMTaskSequenceGroup

          58 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            10 comments  ·  PowerShell  ·  Flag idea as inappropriate…  ·  Admin →
          • Unable to import state message from 'co-management' enabled client

            nable to import status message when following condition.
             ・Clients with co-management enabled
             ・If the state message(.SMX) contains Japanese

            ◆Error Log
            [statesys.log]
            SQL MESSAGE: spProcessStateReport - Error: Message processing encountered a SQL error 241 at record 53 for TopicType 810:
            " Conversion failed when converting date and/or time from character string.", Line 0 in procedure ""

            ◆state message(.SMX)
            -<StateMessage SerialNumber="593" MessageTime="20180427063011.557000+000">
            <Topic UserSID="" User="" IDType="0" Type="810" ID="CoManagementState"/>
            <State ID="105" Criticality="0"/>
            -<StateDetails Type="1">
            -<![CDATA[<ClientCoManagementMessage><MDMEnrollment><Enrolled Value="0" /><ServiceUri Value="" /><RegistrationKind Value="0" />
            <ScheduledEnrollTime Value="04/27/2018 06:30:11 午前" /><ErrorCode Value="2147549183" />
            <ErrorDetail Value="MDM enrollment hasn't been configured yet on AAD, or the enrollment url isn't expected."…

            58 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              0 comments  ·  Co-Management  ·  Flag idea as inappropriate…  ·  Admin →
            • Rework express updates for faster client installation

              Per: https://docs.microsoft.com/en-us/sccm/sum/deploy-use/manage-express-installation-files-for-windows-10-updates

              "Using express installation files provides for smaller downloads and faster installation times on clients."

              Through a case I opened with Microsoft, it was communicated to me that the current express update design is solely meant to reduce network bandwidth. There is no promise of expedited installation time. This is misleading and limits the purpose of express updates for remote office scenarios.

              Additionally the express update deltas have to be decompressed and recombined in order to complete the installation which requires significant CPU usage.

              The combination of these issues causes express updates to provide little benefit to customers in…

              58 votes
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                4 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
              • New Softwarecenter: Save View-Settings: list view vs. tile view

                The new Softwarecenter supports list view and tile view. users should be able to save the view-settings.

                57 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  7 comments  ·  Software Center  ·  Flag idea as inappropriate…  ·  Admin →
                • Option to set security scopes for SCEP policies

                  SCEP policies do not have the ability to set security scopes. This is a problem because our SCCM is shared by several departments and colleges in the university. For example, someone may inadvertently (or intentionally) modify a policy for DCs which can have a catastrophic effects. Having the ability to set security scopes will restrict who has access to individual SCEP policies.

                  51 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    1 comment  ·  Endpoint Protection  ·  Flag idea as inappropriate…  ·  Admin →
                  • SCEP support for Windows Server 2016 Core

                    Support for Endpoint protection on Windows Server 2016 Core.

                    51 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      6 comments  ·  Endpoint Protection  ·  Flag idea as inappropriate…  ·  Admin →
                    • Stop CMTrace from asking us if we want to use it as the default viewer for log files in WinPE

                      Please add the following registry keys to WinPE whenever a Boot Image is created/updated to prevent it from asking every time if we want to use CMTrace as the default viewer for log files:

                      Reg add HKU\Software\Classes\.lo_ /ve /d Log.File /f

                      Reg add HKU\Software\Classes\.log /ve /d Log.File /f

                      Reg add HKU\Software\Classes\Log.File\shell\open\command /ve /d "\"x:\sms\bin\i386\CMTrace.exe\" \"%%1\"" /f

                      See more here: https://miketerrill.net/2017/05/13/how-to-open-cmtrace-in-winpe-like-a-boss/

                      51 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        2 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →

                        Updating status to completed

                        This is available in our 1802 release, details below

                        General Blog: https://cloudblogs.microsoft.com/enterprisemobility/?p=69422

                        Docs: https://docs.microsoft.com/en-us/sccm/core/plan-design/changes/whats-new-in-version-1802

                        One question I’ve been asked a few times is ‘can I take the copy of CMTrace from the Tech Preview build and use it with my version of SCCM?’ – answer is Yes.

                      • Ring based deployment model in Application Deployment? It would be helpful if we have a similar to Windows 10

                        It would be good if we are able to have a ring based model for Application Deployment and management as we have for Windows 10 CB rollout with early adopters ring, Pilot ring, Production ring . This will help a lot as we are seeing the benefit of the ring model in Windows 10 Deployment.

                        50 votes
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          4 comments  ·  Application Management  ·  Flag idea as inappropriate…  ·  Admin →
                        • Request for intelligent MP, SMP and SUP selection based on network location, like current DP selection

                          This is a DCR requesting that we improve the logic around MP, SMP and SUP selection by clients. Currently, we gather AD Site and IP Subnet details for DPs, store that in DPInfo and include that information in the XML body returned on content lookup requests. Why can we not do this for other server roles so that the client can choose the best server to connect to based on matching AD Site and/or IP Subnet? This would provide a far better solution than having to populate AllowedMPs, too.

                          49 votes
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            7 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
                          • Hardware inventory sould include Secure Boot state by default

                            In ConfigMgr TP 1701 the Hardware Inventory now collects UEFI information. To complete the story the Secure Boot should also be included by default.

                            49 votes
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              3 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                            • Allow Pull DPs to download content from Cloud DPs

                              Allow Pull DPs to get content over the internet from cloud DPs.

                              48 votes
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                                2 comments  ·  Content  ·  Flag idea as inappropriate…  ·  Admin →
                              • show the next maintenance window in software center

                                Make it easy in software center to see the next maintenance window, and what will install then.

                                48 votes
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                  4 comments  ·  Software Center  ·  Flag idea as inappropriate…  ·  Admin →
                                • Configure BranchCache settings from Client Settings in the Admin Console

                                  Enables BranchCache in distributed mode on the client
                                  Set the Port number to use
                                  set the cache size, ttl etc
                                  set other BranchCache policy items

                                  Currently this has to be done outside of SCCM - makes sense to bring it into the Admin Console as other aspects of BranchCache config are already in the UI (DP config, deployment etc)

                                  47 votes
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    3 comments  ·  Content  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Improved SDK Documentation

                                    With each release of Configuration Manager the amount of documentation in the SDK has decreased. It would be really nice if the documentation could be updated and increased to actually cover everything that is available. Especially when it comes to descriptions of WMI methods/classes/etc. Where the documentation lists the class and the objects in it but doesn't describe anything beyond the field name. It would be good to have some better descriptions than just the field name or method name so that you can fully understand what the fields/method are used for.

                                    47 votes
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                      1 comment  ·  Documentation  ·  Flag idea as inappropriate…  ·  Admin →
                                    • Allow exclusion of OU's from Active Directory User and System Discovery

                                      Have the ability to include/exclude certain OU's from both Active Directory User and System Discovery.

                                      E.G. I might have an "All Users and Groups" OU at the root domain level, which may contain sub OU's containing service accounts or mailbox accounts etc. that I don't want being picked up by discovery. The ability to pick which sub OU's to discover/not discover would be really handy in this scenario. The same applies for system/computer discovery also.

                                      45 votes
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                        6 comments  ·  Client Discovery  ·  Flag idea as inappropriate…  ·  Admin →
                                      • Enable a column for Windows 10 Build Version!

                                        Please add a column with the OS Build version to the console. It's really a pain when reports or collection querys have to be used to get this information.

                                        45 votes
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                          1 comment  ·  Admin Console  ·  Flag idea as inappropriate…  ·  Admin →
                                        • Separate defining company logo from Intune subscription

                                          If displaying the company logo and color scheme is further expanded to several end-user dialogs that are not necessarily Intune related, please enable defining a company logo to display in them without having an Intune subscription. Branded dialogs with company colors and logo are less likely to be misinterpreted and help end-users identify that the dialogs are originated from our organization's ConfigMgr and can be trusted.

                                          44 votes
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                            6 comments  ·  Software Center  ·  Flag idea as inappropriate…  ·  Admin →
                                          • Don't see your idea?

                                          Feedback and Knowledge Base