Ideas
What features would you like to see?
All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we can’t promise to reply to all posts.
If you require assisted support, please see https://aka.ms/cmcbsupport for more details.
-
Enable Tamper Protection via SCCM
It would be nice to have ability to enable Tamper Protection in defender via SCCM antimalware policy
76 votesThanks for your feedback, updating status to Noted.
See https://docs.microsoft.com/en-us/mem/configmgr/core/understand/find-help#send-a-suggestion for an explanation of each value.
-
Windows Firewall With and Advance Security integration
So this portion is currently listed under EP in the SCCM console so im posting here. i would like to see an enterprise solution to deploying the windows firewall similar to the way DCM relationships are. Not the existing feature in SCCM where you can simply enable or disable the firewall policy. i would like to see Individual Firewall rules are created as Configuration items and then grouped into Baselines to be applied at a granular level to computers. that way we can remove the GPO dependency on where a computer is placed or at which level its place. SCCM…
47 votes -
Maintenance Window for EP Definition Updates/Security Updates
Please add the possibility in a MW to "apply this schedule to"
- EP Defintion Updates (you may want to allow daily defintion updates, but you don't want to install anything else at that time)
- Security Updates (not all Software Updates, as it is now, but only Security Updates)In this case make it multiselect too.
35 votes -
Right Click on a Computer no matter where I am looking at in SCCM and do a Virus Scan.
Right Click on a Computer no matter where I am looking at in SCCM and do a Virus Scan.
34 votes -
Improved alerting for SCEP
Configuration Manager allows the creation of subscriptions to alerts for the following Endpoint Protection events:
- Malware outbreak - the same malware detected on multiple computers
- Multiple malware detected on one computer
- Same malware repeatedly detected on one computer
The ability to subscribe to alerts for these events is useful, but this feature could be improved.
For example, I don't need to be alerted when malicious JavaScript on a website is repeatedly detected and blocked on a user's computer, but there is no way to filter notifications for a specific class of threats. On the other hand, I do want to…
32 votesNoted ·
Admindjam
(Product Director, or Executive, Microsoft Endpoint Configuration Manager)
responded
Can you give more examples? Definitely want to innovate in these areas.
-
After uninstalling the client, anti-malware policy settings remain in the version information area of Windows security
After uninstalling the client, anti-malware policy settings remain in the version information area of Windows security.
SCCM CB 1902
Windows 10 1903Setting location:
1. Run ms-settings:windowsdefender
2. Clieck on [Windows Security]
3. Click the "gear mark" in the lower left
4. Click the "Version information"
5. anti-malware policy settings remain3 votesNoted ·
AdminAdam Meltzer (ConfigMgr Product Team)
(Software Engineer, Microsoft Endpoint Configuration Manager)
responded
This behavior is currently by design. We do not clean up AM policy after the client is uninstalled. This is something we can consider revisiting in a future release.
- Don't see your idea?