Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we canā€™t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the šŸ™‚ button in the top right corner and choose ā€œSend a Frownā€. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer ā€“ our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Get driver by category with Get-CMDriver

    Get-CMDriver does not provide on option to get drivers by category.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →
  2. Run Scripts: Option to be integrated with Application / Packages deployment

    Running Script : option to be integrated with Application / Packages deployment. On going into deployment type or in package program we should have option to use approved scripts from console.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →
  3. Run Scripts: Prevent Script feature from sending all (i.e. optional) parameters

    What I've noticed when using the new "Scripts" feature is that SCCM runs scripts with a very specific command format/syntax when calling a PowerShell script. Part of that is explicitly specifying every individual script parameter, regardless of whether it is mandatory.

    I suppose that normally, this shouldn't be a problem, but besides being unnecessary and against the spirit of optional parameters, I've also been running into what I assume is a bug, where SCCM fails to properly pass all parameters. There seems to be a parameter limit, or more likely, a character limit to the command line SCCM runs onā€¦

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →
  4. Import/Export Cmdlet Parameter aliases

    Could we please have a common alias for the file path parameters in the various import/export cmdlets?

    For example, currently we have:
    1. Export-CMBaseline uses -Path to set output path, and
    2. Export-CMTaskSequence uses -ExportFilePath.

    Then we have:
    1. Import-CMBaseline using -FileName to determine location of exported files
    2. Import-CMApplication using -FilePath,
    3. Import-CMTasksequence using -Path.

    A common alias like "Path" or "FilePath" for all these parameters will be very handy in reducing complexity of scripts calling your Cmdlets.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →
  5. Run Scripts: Allow parameters to be marked as passwords so it's hidden when entering

    Run Scripts: Allow parameters to be marked as passwords, so scripts can be executed by passing on passwords but the password isn't displayed while being typed.

    Real life example: Using PowerShell scripts to run Deep Freeze tasks such as freezing or thawing computer. The Deep Freeze command line tool requires entering the passwords to be able to execute the commands.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →
  6. Run Scripts: Should be able to invoke from Deployment Status Node

    Run scripts brought a brand new model to handle client troubleshooting, but it can run from collections only.
    it would have been super useful to be able to run it on a machine\category from the Deployment Status node and then maintain clients with in progress \ unknown \ active \ inactive state.
    today when we have a list of computers who didn't report their status we need to manually create a collection with these clients to run a scripts and there's not even a built-in way to create a collection from the asset details

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →
  7. Add /ResetBase to New-CMOperatingSystemImageUpdateSchedule

    Now that optimization of the WIM and removal of superseded updates is available as an option for offline servicing in the console, it would be great if this option could be added as a switch to the New-CMOperatingSystemImageUpdateSchedule cmdlet. I use this cmdlet to automate scheduling of updates in an ADG against all my WIMs so it would be great if I could shrink them down at the same time without needing to do this in the console.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →

    Thanks for your feedback.

    Updating status to noted, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help#send-a-suggestion for an explanation of each value.

    We’ve addressed this in our 1902 release as well as the ability to import a single .wim from the multi-index .wim.
    https://docs.microsoft.com/en-us/sccm/osd/get-started/manage-operating-system-images#BKMK_AddOSImages

    As Vlad mentioned, the New-CMOperatingSystemImageUpdateSchedule CmdLet has -RemoveSupersededUpdates

    I’ll update the status to completed if this addressed your ask. If not, then let us know any gaps.

  8. Enable to Automate Site Recovery

    For Upgrade there's a PS cmdlet but for Site Recovery there's none. Neither a wmi method nor a sql sp afaik.
    Please enable automation of Site recovery especially since for secondaries that is the supported way to deploy a hotfix.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →
  9. Hide parameter values in Run Script log

    Task Sequence can hide values from being recorded in the task sequence log. It would be nice to have this ability to do the same for the Scripts (Scripts.log). I know it is not recommended to use passwords while using the Scripts feature, but there are cases which I want to send passwords. I don't really have any concern in certain cases. However, I just do not like how the password (script parameter) can be viewed later within the Scripts.log. It would be nice to have the same feature to hide parameters as the Task Sequence will hide credentials inā€¦

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →
  10. API/PowerShell cmdlet to manage/automate CMG certificate renewals

    Companies are looking for alternatives to the large public CA authorities like Verisign and DigiCert, one such alternative is Let's Encypt. They offer free public-signed certificates, the only problem is the certificates need to be renewed every 90 days. The renewal can be automated using Certbot.

    However there does not appear to be any functionality in the current ConfigMgr release to allow for automated certificate replacement/renewal. This seems to be a gap in the PowerShell functionality.

    Sure its only a few minutes every 90 days to log into the console open up the CMG instance and update the certificate, andā€¦

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  0 comments  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →
  11. Save/Remove-CMSoftwareUpdate without content distribution

    Would be really nice to have option to choose wheter to distribute content or not while using Save/Remove-CMSoftwareUpdate cmdlets.

    When we use this is normally within our clean-up scripts and almost never need immediate content update.

    As a result our distribution queues lose threads to unnecessary package processing.

    I appreciate the support!

    Have a nice one!

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →
  12. MVP-Powershell client settings for software center

    add a new Set-CMClientSetting to customise software center. today the only way is to use the props SettingsXml for SMSSCIClientComp (SoftwareCenter) WMI and create a xml to configure it.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →
  13. MVP - DCR wanted for server groups

    My customer has +_ 600 maintenance windows using the server grouping feature .

    Feature Request Nr1 : They use the node drain / node resume feature with PowerShell. They are still modifying and changing the script almost every week . That script is used for those 600 collections :

    a) a central repository/place to enter the script details and be able to reuse that for each server group collection like for power management custom templates .
    b) If they make a change in the ā€œcentralā€ PowerShell repository , it keeps history ( Like application revisions ) and replaces that automaticallyā€¦

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    5 comments  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →
  14. MVP- Set-CMClientPushInstallation NTLM

    the Set-CMClientPushInstallation should have an option to set the Allow connection fallback to ntlm

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →
  15. Can a PS commandlet be updated to show the "Scheduled Update Status" column from the GUI

    Can a PS commandlet be updated to show the "Scheduled Update Status" column from the GUI. Currently when applying patches to OS image only the GUI shows the status of the update progress.
    Would be very useful to poll for this via PShell so it could be added to automation scripts.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →
  16. Make client CIM methods work over WinRM

    Currently using Invoke-CimMethod will fail on remote clients unless you use a CimSession with a CimSessionOption specifying the DCOM protocol.

    The server side classes work great with CIM cmdlets, it'd be great if there were parity there with the client classes, especially since PowerShell 6.0 doesn't include the WMI cmdlets that people will gravitate toward to use DCOM.

    1 vote
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →
  17. Invoke-CMReport file name

    It would be nice to be able to control the file name generated by Invoke-CMReport when using parameter -OutputFormat.

    0 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →
  18. Run Scripts: Allow the possibility to limit Run Script execution to one device only

    It would be really useful, if not mandatory, that some scripts under "Run Scripts" feature allowed to be executed only on one device at a time, avoiding the possibility to run it under a collection or a selection of multiple devices.
    The reason is, according to my point of view, avoiding the possibility to run scripts that need device-specific parameters.
    For example, runnin a script that renames a device. If by mistake that script were run on a device collection, it would probably end up with all devices with the same name.
    I guess this option (a checkbox maybe) shouldā€¦

    0 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →
  19. Collection Configure Alerts

    Create a powershell to configure the alerts on a specific collection. like adding collection to EP dashboard and configure thresholds

    0 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  0 comments  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →
  20. Included canned powershell scripts

    Include canned scripts for creating collections applications and deployments with the ability to create a template from selections.

    0 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  2 comments  ·  PowerShell  ·  Flag idea as inappropriateā€¦  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base