For the same reasons that computer and collection variables are useful and strategic for OSD, they would also be with the application model. Examples:
+ Customizing command-line parameters for installation
+ Leveraging in scripts for the protection of secret/sensitive data like passwords or product keys

Managing applications and understanding their dependencies is a significant challenge. Having the ability to understand what applications depend on system components, such as .NET or other, would be a significant benefit to ensure minimal production impact when working to upgrade an operating system or an application version. A recent example in a customers infrastructure was legacy software with dependencies on a specific version of .NET. Being able to see what these dependencies are ahead of time across the enterprise and manage them proactively would have been a huge win.

It would be nice to have ability to enable Tamper Protection in defender via SCCM antimalware policy

When creating custom discovery data using the smsresgen class there is no way to remove this from the discovery related tables in ConfigMgr. Since there is a supported way to add this data, there should be a supported way to remove it. This is necessary as a rollback option, to return ConfigMgr to its default state, before the custom discovery data was added.

Currently when the Admin Console is maximised some of the text in the title bar is not aligned correctly, it is set too high and is cut off. It displays correctly when the window is not maximised. See attached screenshots for example of what I mean.

This is in 1706, but it has been like this for multiple versions now.

It's only a minor cosmetic thing, but it's quite distracting.

We have the ability to setup ADR's for O365 updates, but we need the ability to create O365 ADR's for downloads and deployments of the newest O365 Installers to new images that do not have O365 installed yet.

We typically want our users to receive new software without action on their part, so required deployments generally make sense. However, this prevents users from being able to uninstall software (without the app eval cycle putting it back) unless CM administrators are involved.

Having an option allowing required deployments to essentially transform into available deployments if the user clicks the Uninstall button in Software Center would be useful to us since we could satisfy the requirement of delivering software without end user action and also allow end users to uninstall unneeded software.

When doing an upgrade to SCCM, it has been recommended to disable some, or even all of the site maintenance tasks. (per the upgrade checklist) Would be awesome to have a box on the Maintenance Tasks screen to temporarily disable ALL tasks while the upgrade is being performed. (as opposed to manually disabling all of them) An "upgrade/maintenance mode" box essentially!

In our enterprise we have quite a few locations where 802.1X is impelemented, e.g. networks port-based network access control and/or VLANs. Some locations even use DHCP snooping.

We would like to implement SCCMs wake-up proxy feature in these locations but it is not currently supported. Also, network administrators are concerned about the IP-to-MAC mapping (MAC flapping) feature used in wake-up proxy.

Please provide us with wake-up proxy support that will work on any type of network.

I would like to be able to copy a boot image so I can update it and make changes without breaking the original boot image. Currently you have to create all new boot images by hand and manually add the drivers.

By default Fast rety interval is 2 hours. There is no option to change this setting. We would like have option to change this internval.

Note in Pacakage model we have option to change this setting through site control file

Provide a simpler way to target a Status Message Query at a Device by allowing you to Right-Click and View its latest Status Messages, rather than having to manually run through the Status Message Wizard.

Basically, configure your detection method, then have a "Test Detection method" button which has a prompt to enter a device name for testing the detection method on.

would be useful in particular for the vbscript/powershell type detection methods.

Just needs to return an "Application detected" or "Application not detected" result.

Make clients Calls like Ping / MSTAC witrh FQDN and not with Netbios. We have different AD connected to the SCCM . We can not use the build in features like Ping the clients or open RDP as the console only tries the netbios name and not the fqdn. It would be great to have all cleints call done trought FQDN

We have the possibility to select to "Access content directly from the DP" when deploying a operating System image in a Task Sequence. It would be great to be able to do this for "Run Command Lines" as well.
Example scenario, you want to run a Powershell script from a package before the disk is formatted in a scenario where we use Bitlocker for instance.