Microsoft

System Center Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building System Center Configuration Manager, though we can’t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the ? button in the top right corner and choose “Send a Frown”. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer – our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the System Center Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Microsoft Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.

How can we improve Configuration Manager?

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Option to direct import images from MS VLSC

    It would be convenient to have a method to enter/save your volume licensing credentials to have it directly download an iso from the volume licensing site, extract the wim into a designated storage location, and then import it directly into the console. This would especially be nice considering the more frequent release of new Windows 10 builds. I like running my B&C from the newest image available.

    43 votes
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
      Noted  ·  sangeev responded

      Updated by bobmn for sangeev/OSD

    • OSD Task Sequence (1703) Not Displaying

      When running a task sequence to deploy a 1703 based image, the second part of the task sequence: "Setup Operating System" does not display.

      The screen saying "Just a moment..." is displayed instead of the SCCM task sequence screen, meaning you cannot see the progress.

      If the machine is left, it does actually complete the steps, but it would be nice to see the SCCM screen once again!

      42 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →

        Thanks for your feedback. Updating status to Noted and apologies for not getting to this one till now.

        From my testing this appears to be limited to 1703 (Redstone 2) or 1709 (Redstone 3). All tests with 1803 (Redstone 4) and 1809 (Redstone 5) have been fine also with Task Sequence Progress UI shown. The ‘Just a moment..’ is not something under task sequence control, installing manually shows the same behavior.

        Is this still an issue for you all with the more recent Windows releases?

      • Make the SMSTSPreferredAdvertID feature work without requiring all systems having to be targeted

        It would be really useful if the SMSTSPreferredAdvertID feature would work without every CM Client (known or unknown) needing to have the policy for the hidden deployment. This is usually set using a front end menu by a technician or end user driven deployment. If there are multiple task sequence deployments that need to be available, this could result in a large amount of unnecessary policies. The other option is to have a webservice drop a system in a collection prior to kicking off the task sequence engine, however this has drawl backs and can result in a delay in…

        42 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
        • Generate a master log file of all client log files.

          There is a lot of very detailed information in the individual component client logs files, But with all that detail in so many logs, it can be difficult to tell what the client is doing at any given time. I would like to see a master log of all the high level client activity and timestamps.
          12:00 hardware inventory started
          12:02 hardware inventory complete
          12:05 policy download
          12:08 software inventory started
          etc...
          It would help narrow down the number of logs to examine and the timeframes to look at.

          41 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            Noted  ·  7 comments  ·  Troubleshooting & Support  ·  Flag idea as inappropriate…  ·  Admin →
          • Task Sequence deployment option of "While no user is logged on"

            Give us the option to restrict a required Task Sequence to "When no user is logged on" This would be particularly helpful when using Task Sequences to push out Application updates. That way if the TS tries to run while a user is logged on it won't fail as soon as it hits the applications which are set to "When no user is logged on"

            41 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
            • Use SMSTSRebootDelay value during 'Install Application' Step

              Use the value from the built-in variable SMSTSRebootDelay for reboots that occur during the 'Install Application - Install applications according to dynamic variable list' step. This would reduce the time for OS deployments.

              41 votes
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                0 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                Noted  ·  sangeev responded

                This is also similar to ‘Allow suppression of exit codes during Install Application Task Sequence Step’
                Updated by bobmn for sangeev/OSD

              • Improve the ADR engine

                Improve the ADR engine

                - Automate the cleanup of the previous software update groups created by the rules, i.e. before creating a new SUG it will check for older SUG members and based on criteria automatically manage updates that are member of a specific SUG. If updates are published or revised in 2016 then move the updates to our 2016 SUG, or previous month etc. Or, if they are superseeded or expired then remove the updates from the SUG...

                - Allow to name the deployment create by the ADR, this will be useful for reporting purpose if you have more…

                39 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  Noted  ·  5 comments  ·  Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
                • Available application which is not applicable must not show up in Software Center

                  [This is sort of an extension to https://configurationmanager.uservoice.com/forums/300492-ideas/suggestions/13002684-software-center-show-only-available-software-hid?]

                  Obviously, we can create applications with multiple deployment types in SCCM, each with its own set of requirements. Now say I create a simple MSI-based application with one deployment type, which has a requirement that Primary device must be true. If I make this available to a user collection, then it shows up for each of those users on their primary devices as available in Software Center. All great so far.

                  However, if one of those users logs in to a non-primary device, the application still shows up as available, and…

                  38 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    Noted  ·  2 comments  ·  Software Center  ·  Flag idea as inappropriate…  ·  Admin →
                  • Ability to set Multiple Remote Control Privileges to Collection(s)

                    I have previously reported this as an issue in the Connect Site but was Closed "By Design".
                    So here is the original idea that was filed:
                    There is a serious issue with the way Client Settings are applied when you need to provide different levels of remote control privileges for specific Users/Groups on Collections.
                    For example:
                    Let's assume we have the Collection of Devices named "Windows 8.1 Clients", the requirements for remote control are:

                    1) The "Helpdesk" Group of users should have the ability to "View Only" via remote control the client devices.
                    2) The "L2 Support" Group of users…

                    38 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      2 comments  ·  Remote Control  ·  Flag idea as inappropriate…  ·  Admin →
                    • Remote control - Allow for two simultaneous RC sessions to the same target device (shared viewing capability)

                      For some troubleshooting scenarios in a multi-tier service desk organization we need to have 3rd tier staff connected to a end user's PC simultaneously to an already ongoing 1st staff remote session.

                      37 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        4 comments  ·  Remote Control  ·  Flag idea as inappropriate…  ·  Admin →
                      • Powershell cmdlet for adding global conditions as requirements

                        We are using PowerShell as a frontend for creating applications. As default we create multiple deployment type, each of them intented to run in certain environemts. These environemts are defined in some custom global conditions.

                        When creating the deployment type we can very easily identify which global contitions shold be set as requirement. But we miss a Powershell cmdlet to automize this task. Instead we rely on the application creator to remember to add these conditions.

                        So far I have found a PS-script that can add one of the build-in conditions, but it fails when trying to add a custom…

                        37 votes
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          2 comments  ·  PowerShell  ·  Flag idea as inappropriate…  ·  Admin →
                        • Active Setup Integration - Wizard / GUI

                          Some (MSI) applications (e.g. usually CAD software) will be configured via HKCU Registry hive, files in %appdata% or another files in user paths.
                          It would be nice if a new user logs on (e.g. after OSD), these settings takes place automatically.
                          This can already be done rudimentary via Active Setup, but not really comfortable (e.g. you have to do logging by yourself, no out of the box feedback in case of success / errors, etc).
                          Please integrate Active Setup or a new fully solution for that cases as a GUI / Wizard in Application Management.

                          37 votes
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            Noted  ·  4 comments  ·  Application Management  ·  Flag idea as inappropriate…  ·  Admin →
                          • AD Group Discovery should not write DDR for invalid records

                            When System Discovery finds an object that seems invalid, currently it won`t be imported (which is good).
                            ERROR: System <systemname> is a unsupported operating system, unsupported version, or malformed AD entry. Reported system type is: ().
                            However if the same object has an AD Group Membership and AD Group Discovery finds it, it won't check if it is valid, but write the DDR and create the object record in SCCM DB.

                            Please change AD Group Discovery so it validates new objects too.

                            36 votes
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              Noted  ·  2 comments  ·  Client Discovery  ·  Flag idea as inappropriate…  ·  Admin →
                            • Drag and Drop in console

                              Why can't we simply drag and drop machines/users into collections instead of having to go through wizard?. It makes it much harder for Helpdesk to understand how to use the console (hence why most people use AD security groups as targets). Why not select/Multi-select items and drag into relevant collection

                              36 votes
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                                Noted  ·  3 comments  ·  Admin Console  ·  Flag idea as inappropriate…  ·  Admin →
                              • Have the ability to pre-deploy an available application on a user’s primary device.

                                Today in the application model you can only pre-deploy a required deployment of an application on the users’ primary device but this has 2 drawbacks:
                                • Required means that the user doesn’t have the means to uninstall the application and potentially repair the application (uninstall+install).
                                • Required means also that when the user logs on to another machine, maybe just to consult a web page, the required applications also get installed unless the global condition primary device equals true was set.
                                This is all about provisioning a new machine for a user. Of course there are always common applications, like…

                                36 votes
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                  Noted  ·  2 comments  ·  Application Management  ·  Flag idea as inappropriate…  ·  Admin →
                                • Ability to install packages from NuGet/PackageManagement/PowerShellGet feed

                                  Ability to install packages from NuGet/PackageManagement/PowerShellGet feed. This will allow managing on-premise/cloud based infra using a NuGet feed like myget.org, TeamCity, OctopusDeploy and a DevOps type workflow.

                                  36 votes
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    Noted  ·  2 comments  ·  Application Management  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Have a Task Sequence Step to call the Uninstall of an Application and support both the Standard Install and Dynamic Install.

                                    While a Step for Run Command line can be used for most Windows Installer, if an application uses a EXE it would be nice for the application to be downloaded and the exe used.

                                    35 votes
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                      3 comments  ·  Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
                                      Noted  ·  sangeev responded

                                      Updated by bobmn for sangeev/OSD

                                    • Windows Firewall With and Advance Security integration

                                      So this portion is currently listed under EP in the SCCM console so im posting here. i would like to see an enterprise solution to deploying the windows firewall similar to the way DCM relationships are. Not the existing feature in SCCM where you can simply enable or disable the firewall policy. i would like to see Individual Firewall rules are created as Configuration items and then grouped into Baselines to be applied at a granular level to computers. that way we can remove the GPO dependency on where a computer is placed or at which level its place. SCCM…

                                      35 votes
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                        Noted  ·  1 comment  ·  Endpoint Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                      • Maintenance Window for EP Definition Updates/Security Updates

                                        Please add the possibility in a MW to "apply this schedule to"
                                        - EP Defintion Updates (you may want to allow daily defintion updates, but you don't want to install anything else at that time)
                                        - Security Updates (not all Software Updates, as it is now, but only Security Updates)

                                        In this case make it multiselect too.

                                        35 votes
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                          Noted  ·  0 comments  ·  Endpoint Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                        • Enhance Phased Deployment for Applications

                                          TL;DR: Make Phased Deployments for Applications the same as Phased Deployments for Task Sequences where you can create up to 10 phases and manually initiate the second phase of deployment.

                                          Explanation:
                                          Currently in 1806 although you can create a phased deployment for an Application, you're limited in two key areas:

                                          1) You cannot manually create phases for an application
                                          2) You cannot manually begin the second phase of deployment for an application
                                          3) You are limited to 2 phases for an application

                                          In our environment we follow a controlled graceful deployment process where an Application Model application is deployed office-by-office…

                                          35 votes
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                            1 comment  ·  Application Management  ·  Flag idea as inappropriate…  ·  Admin →
                                          • Don't see your idea?

                                          Feedback and Knowledge Base