Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice - Update: Microsoft will be moving away from UserVoice sites on a product-by-product basis throughout the 2021 calendar year. We will leverage 1st party solutions for customer feedback. Learn more

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we canā€™t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the šŸ™‚ button in the top right corner and choose ā€œSend a Frownā€. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer ā€“ our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. state messages own component thread

    State Messages today share SMSExec thread with Status messages. State messages are a lower priority. Even though State messages process super fast, we have been in the issue where we have 300,00 status message backlog and and 3.4 million state message back log. Only way to get the state messages to process first is to move all the status messages from the inbox, allow state messages to process and then slowly add the status messages back in as ConfigMan can not handle large amount of files in those inboxes.

    So we are looking to allow State Messages, it own threadā€¦

    3 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Admin experience and community hub  ·  Flag idea as inappropriateā€¦  ·  Admin →

    State messages are processed by the SMS_STATE_SYSTEM component, and status messages are processed by the SMS_STATUS_MANAGER component. Both use independent threads and inboxes, and should operate independently. A state message backlog should not be causing delays for status message processing unless there’s a SQL bottleneck or unknown product issue.

    I’d recommend working with support to better understand what’s happening here.

  2. Need to have a dashboard or report to see when passcodes/PIN expiration are.

    Frequently, IOS users will not see the notification of when their Passcode/PIN will expire. I need to be able to view a dashboard or run a report of upcoming expirations in Endpoint Manager.

    3 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Cloud services  ·  Flag idea as inappropriateā€¦  ·  Admin →
  3. Please improve the service feedback in the service manager for the Intune connector

    at the moment if you go to Administration Servers and Site systems roles select the Intune connector and select Properties you get nothing about the configuration. Also if you go to monitoring\component status then show status on the Windowsintuneconnector you get no status at all regardless of whether it is working. If you go from there Start service manager and try and query the windowsIntuneService you get an error message "error communicating with component". This all leads you to believe that the Intune service is broken on the SCCM server when in fact this is completelyā€¦

    2 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Cloud services  ·  Flag idea as inappropriateā€¦  ·  Admin →
  4. Invoke-CMReport with parameter

    it would be good if the Invoke-CMReport gives us the option to pass parameters to the report. today it only open the report and that's it, you need to manually. another parameter that could be added would be to automatically export, so you don't actually need to open the report, just export the data

    2 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  SDK, PowerShell, and tools  ·  Flag idea as inappropriateā€¦  ·  Admin →

    Invoke-CMReport supports parameters today with the ReportParameter parameter. It’s a hashtable so you set it with key-value pairs like this:

    Invoke-CMReport -ReportPath “Client Status/Client status history” -ReportParameter @{ Collection = “MyCollection”; “Time Range” = “4 weeks” }

    The ability to export reports is unfortunately out of scope for our cmdlets as this is a function of the reporting web site. You could probably use something like Invoke-RestMethod once you know a report URL to export it through automation.

  5. Be able to send an SMS text to ConfigMgr hybrid Intune devices

    So at least one competitor has the capability to send txt messages directly to managed devices from the administrator. This is useful to be able to draw users attention to changes in policy coming or asking them to upgrade iOS versions, upcoming maintenance of Intune etc. It would be great if we could send a message directly from the CM2012 console to a single device or an entire collection of devices. it doesn't have to be 2 way communication, just a way of sending admin alerts to end users. SMS texts tend to be more immediate in nature and drawā€¦

    2 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Cloud services  ·  Flag idea as inappropriateā€¦  ·  Admin →
  6. Intune Secure Browser - settings required to manage home page etc..

    We are missing Application Management Policies to allow you to set the home page, set bookmarks, return to home page after *** seconds, encrypt cookies, clear cookies and history if idle, caching, setting kiosk mode. The current application management settings are far too lightweight to be a viable option in most environments.

    2 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Cloud services  ·  Flag idea as inappropriateā€¦  ·  Admin →
  7. Ability to enrol "on behalf of" a user

    One of the biggest challenges we have when enrolling devices in the SCCM/Intune hybrid environment is not having the ability to enrol devices on behalf of a normal end user. It would be great if a role could be created to allow an IT support person to use the Company Portal app to enrol a device in Intune on behalf of a user. This would enable the device policies, configurations etc.. to be downloaded on the device and then the device would immediately be ready for the end-user when they collect it from IT.

    2 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Cloud services  ·  Flag idea as inappropriateā€¦  ·  Admin →
  8. Group Like items for IOS and Android under a Mobile Device Management Section

    Items such as "Application Management Policies" and "App Configuration Policies" and other items that are related to Mobile devices should be placed more appropriately within the console under a sections called Mobile Device Management, not just thrown in the root of Application Management as they do not apply to all systems. Alternatively, they could be named better, such as "Mobile Application Management Policies" and "Mobile App Configuration Policies"

    2 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Cloud services  ·  Flag idea as inappropriateā€¦  ·  Admin →
  9. Need better 4k display support in Application Catalog Web

    We've had reported scaling issues (very small fonts) in default view of Application Catalog Web (SCCM CB 1710). Using Silverlight currently, will there be an enhancement of the product, or?

    2 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Software Center  ·  Flag idea as inappropriateā€¦  ·  Admin →
  10. intune approval routing

    We need the ability for application approval routing for intune apps.

    2 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    declined  ·  0 comments  ·  Application management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  11. set-cmcollection does not terminate on name collisions with errors in -errorvariable and doesn't seem to work with try/catch

    If we could get this functionality it would go a long way in automating collection management.

    2 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  SDK, PowerShell, and tools  ·  Flag idea as inappropriateā€¦  ·  Admin →
  12. Ability to configure Embedded Lockdown Settings via ConfigMgr UI

    Would like to have the EmbeddedLockdown.msc settings in ConfigMgr and have them deployed via CI's in DCM.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Compliance and settings  ·  Flag idea as inappropriateā€¦  ·  Admin →
  13. task sequence

    When you pick restart computer in a task sequence. maybe a popup box to ask current OS or BOOT image.... or Set current OS as the default as this catch's me out quite often when all I want is to boot into the current OS

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Operating system deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
    declined  ·  sangeev responded

    Sorry, I have to Decline. The options are well known and have been since SMSv4. A change would catch out everyone used to the current behavior.

    Updated by bobmn for sangeev/OSD

  14. SCCM 2012 CU 5 - urgent requirements

    Requirements:

    1. Collection:

    -You are creating a collection with a Query based rule
    -The query statement is about adding 2000+ machines to the collection
    -But in the show Query design window, if we copy the query which is containing 2000+ systems, its unable to accommodate that
    -You are able to add around 1800 systems in CM 2007, in the same way, but not in CM 2012

    1. Program:

    -In CM 2007, you create a package
    -Create couple of programs a.Disable b. Enable
    -In Advertisement, you first select the Disable program
    -After your QA team validates it, they will just change the programā€¦

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Admin experience and community hub  ·  Flag idea as inappropriateā€¦  ·  Admin →
  15. Update PowerShell Cmdlets to be more consistent between functions.

    PowerShell functions for CM aren't always consistent. For example, when you create a new Software Update Group using New-CMSoftwareUpdateGroup, it requires the addition of updates using the CI_ID, which is not readily visible, nor is it as intuitive as using a patch description or KB. Whereas, with the Add-CMSoftwareUpdateToGroup, you can add updates a number of ways including by name.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  SDK, PowerShell, and tools  ·  Flag idea as inappropriateā€¦  ·  Admin →
  16. Need details pane for Intune Subscription information

    It would be nice to have a 'details' pane when selecting a subscription, to maybe even show a little bit of status (like last time synchronized, number of devices enrolled, etc.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Admin experience and community hub  ·  Flag idea as inappropriateā€¦  ·  Admin →
  17. Add field to MDM database to query for Supervised IOS devices

    Currently there is no way to query the DB to check is an IOS device is in supervised mode or not. Could this be added in in future versions to allow us to track whether devise are compliant or not?

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Cloud services  ·  Flag idea as inappropriateā€¦  ·  Admin →
  18. Client Actions Command line rights

    the client actions (on the client) that can be performed via the UI (control panel applet) should be allowed to be performed by a normal user via powershell.

    if you try to triggerschedule as normal user, you get access denied

    $SMSCli = [wmiclass] "root\ccm:SMS_Client"
    $SMSCli.TriggerSchedule("{00000000-0000-0000-0000-000000000021}")

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    2 comments  ·  SDK, PowerShell, and tools  ·  Flag idea as inappropriateā€¦  ·  Admin →
  19. ConfigMgr Intune administration from a mobile device designed application.

    So some of my mobile device admins came to me today and asked if with CM integrated Intune they could have a mobile version of the CM2012 console so that they could do basic MDM administration when on call. So locking/unlocking phones, adding a user to the Intune enrolment collection, adding enrolled devices to collections for various device policies, wipe/retire, switching a device from personal to company owned etc. While generally Intune in CM2012 is a pretty good option, having to always RDP in to do something is not always practical for admins that are outside office hours or awayā€¦

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Cloud services  ·  Flag idea as inappropriateā€¦  ·  Admin →
  20. Make the SCCM hybrid diagnostic tool scriptable

    This is a great tool, but it would be useful if it was able to accept command line parameters so that for situations where the IT person that is managing mobile devices might not necessarily have access to run the tool locally on the site server that hosts the service connection point role or Microsoft Intune connector role. If the tool has able to accept command line parameters, that would also allow me to leverage SCORCH to run the tool with appropriate switches and send the output to someone as a CSV or other format with the results.

    Tool: https://www.microsoft.com/en-us/download/details.aspx?id=53306

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  SDK, PowerShell, and tools  ·  Flag idea as inappropriateā€¦  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base