Microsoft

System Center Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building System Center Configuration Manager, though we can’t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the ? button in the top right corner and choose “Send a Frown”. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer – our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the System Center Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Microsoft Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.

How can we improve Configuration Manager?

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Cloud Management Gateway (as CSP)

    With 1610, the Cloud Management Gateway feature arrived. Although it's a Pre-Release feature, as Cloud Solution Provider we're UNABLE to use/implement this. And so are our customers...!

    When you try to set this up from the ConfigMgr console, a prerequisite is the Azure Management Certificate, which can't be configured as CSP-tenant because this needs the Classic Azure Portal (ASM). This is unacceptable for us, as CSP, as we would have to instruct our customers to get an Azure Subscription separately.

    https://blogs.msdn.microsoft.com/cie/2016/11/28/azure-management-certificates-and-publishing-setting-file-with-csp-subscriptions/

    392 votes
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      17 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
    • Have the ability to remove a CAS when only one primary site is left

      Beginning with 2012SP1, we have the ability to add a CAS to an autonomous primary site. It could be interesting to reverse the proposition by having the ability to remove a CAS above a Primary when a CAS is no longer needed or has been set for a wrong reason.
      I know that it could be done through creating another hierarchy and using migration tasks by this is quite difficult for it requires additional hardware.

      197 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        Noted  ·  14 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
      • Integrate Microsoft LAPS Functionality

        The Microsoft Local Admin Password Solution (LAPS) is great because of the security it provides, but is not in widespread use because it isn't enabled by default and requires desktop/server teams to work together to implement.

        Integrate the functionality of Microsoft LAPS into the ConfigMgr infrastructure.

        This could include simple steps to control replace the group policy need with a new compliance item node, or could include completely supplanting of the functionality (similar to how MBAM makes it so you don't need AD for managing BitLocker recovery keys).

        Anything that ConfigMgr can do to bring down the bar for securing…

        197 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          12 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
        • Improve automatic SQL configuration, tuning, and maintenance of the SCCM DB & SQL Server

          Current architecture around SCCM’s management of SQL configuration and maintenance is old and hard to use. It requires a lot of manual oversight, and manual SQL tasks. And the default SQL settings created by SCCM are non-optimal. SQL is a powerful beast. Rethink ways SCCM can use it better, and keep it more optimally tuned and configured. Rethink how to run maintenance and backup tasks without downtime or impact to the production sites and deployments (this especially becomes more important with features like Conditional Access, that can never really have downtime.)

          145 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            Noted  ·  5 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
          • Use SQL Backup with Compression for the backup task

            With CM 1511, SMS Backup task enabled by default. And that does a volume shadow copy of the DB which means full-sized files. For my tiny lab that means I'm backing up 8 GB alone.

            For production it'll mean 850GB per primary site. Under CM12 when we backup just SQL using compression, it's just 160GB per primary site.

            Please allow an option to just invoke a database backup instead so that compression can be used and I don't need to go order terabytes of data just for backups.

            Also the current backup just erases the last backup. But in a…

            119 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              Noted  ·  1 comment  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
            • Have updates automatically handle MP replicas

              It's a real pain to have to tear down and rebuild the MP replicas every time I want to install a servicing update. It would be great to have the update process automatically save the replica state, point the MPs at the primary DB, tear down the MP replicas, do the update and then put it all back.

              115 votes
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                Noted  ·  1 comment  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
              • Eliminate need for clients at Secondary Sites to ever contact Primary Site's MP

                Clients can use the Proxy MP at Secondary Sites for most communication. However some communications must fall back to the primary site's MP. For example - client registration.

                93 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  5 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
                • Perform AD discoveries from servers other than Site Server

                  In flat SCCM infrastructure deployment across multiple domains it becomes troublesome to perform User/Group/Forest/System discoveries in domains other than Site Server domain, especially in DMZ, this is because Site Server has to be able to talk to other domains domain controllers and security requirements not always allow that.

                  This could be improved upon if we could choose to perform AD related discoveries from Site Systems (for example MP or specialized role for that purpose) other than Site Server as illustrated in the picture attached.

                  87 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
                  • Upgrade SCCM directly to rollup version

                    Be able to upgrade SCCM directly to a rollup version or hotfix versions. Not everyone upgrades SCCM the moment a new version is released and by the time we have tested and are ready to upgrade there is often a rollup or hotfix available. Due to change management procedures, we are forced to upgrade to a version that has potential known issues before we can start a new change process to upgrade again to the update version. Being able to upgrade direct to the rollups would prevent installing a broken version for weeks prior to upgrading again.

                    69 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      4 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
                    • Reduce the amount of time needed perform a CM upgrade

                      For most companies, Configuration Manager is becoming a mission critical service the requires less and less downtime. Upgrading large environments/DBs can take up to 5 hours for the CAS, and 4-5 hours for primary sites. Also, most customers want to get the latest hotfixes installed right after performing an upgrade. In some cases, the hotfixes take just a long to complete as the original upgrade. Overall, this can require long outages (sometimes 2 days) to get current.

                      Potential Solutions:

                      1. The ability to upgrade directly to the latest hotfix as noted here:
                      https://configurationmanager.uservoice.com/forums/300492-ideas/suggestions/33166225-upgrade-sccm-directly-to-rollup-version

                      2. Reduce the time needed to regenerate…

                      64 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
                      • "Schedule" and "Rate Limits": consider remote time zone

                        For DPs and Site Server addresses the configuration of schedules and rate limits only considers the local time of the site server. If the remote server (DP, Site) is in a different time zone this is not always what you want. It would be great to have the option (like in a deployment) to check a box so that the remote time zone will be considered. That way the network could not be stressed during working hours at the remote location.

                        62 votes
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          2 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
                        • Turn off SCCM features

                          The possibility to turn off SCCM features.
                          As example we don't use MDM in our environment I'd like to turn off this features "Apple Volume Purchase Program, iOs Activation Lock management, Passport for work, Windows Store for Business Integration, ..." and so on.

                          53 votes
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            5 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
                          • Prestage installation files on secondary site for upgrade

                            Ability to prestage the installation files and specify the source to be used for the upgrade on secondary sites?

                            49 votes
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              2 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
                            • Define pre-condition script in SCCM infrastructure site servicing windows to verify conditions

                              If an update is planned and servicing windows are defined, it would be necessary to check before the update is processed, if all requirements and conditions are fine e.g. all site server online, queues, link state and etc...

                              It would be helpful, to be able, to create a custom script in servicing windows and return true or false, to postpone the servicing if something is not running, are wrong. Otherwise the servicing is processed and could bring infrastructure in an worse state.

                              44 votes
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                                1 comment  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
                              • Add Support for MSA/gMSA for Standard Roles

                                I would like the ability to assign managed service accounts or group managed service accounts to the standard roles for SCCM (i.e. Network Access Account, Domain Join account, Client Push account, etc.) so that those accounts can be secured without the need for knowing or managing the password.

                                42 votes
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                  2 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
                                • Site system Proxy exclusion

                                  scenario:

                                  - Secondary SUP in a untrusted domain
                                  - Sup on the primary site with proxy configured for catalog synchronization and download security and all fix

                                  In this scenario, when the secondary sup should be synchronized with the primary, the proxy is used, and this is a problem

                                  Idea:
                                  Implement an option to include proxy exclusions

                                  41 votes
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    2 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Decouple site component backup service from database server

                                    Configuration Manager currently installs binaries and configures the SQL backup site component service on the database server, running under LocalSystem authority. Many environments have separate groups that host and manage the SQL Server enterprise environment, and do not allow for services or additional software to be installed on them, creating unnecessary conflict and drama when SCCM needs to be installed. SQL Server is a networked service, there shouldn't be a reason to install software on the database server running under a privileged account in order to leverage backup routines.

                                    34 votes
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                      Noted  ·  1 comment  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
                                    • Add a check box to Maintenance Tasks to disable all temporariliy

                                      When doing an upgrade to SCCM, it has been recommended to disable some, or even all of the site maintenance tasks. (per the upgrade checklist) Would be awesome to have a box on the Maintenance Tasks screen to temporarily disable ALL tasks while the upgrade is being performed. (as opposed to manually disabling all of them) An "upgrade/maintenance mode" box essentially!

                                      34 votes
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                        Noted  ·  4 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
                                      • Improve Single Primary Configuration Manager Update Process

                                        When upgrading SCCM to the latest current branch, it takes an extra 40 minutes unnecessarily for the SMS_REPLICATION_CONFIGURATION_MONITOR component to install that is not used\installed and then does not install.

                                        If you run a Primary Site with a Single database the SMS_REPLICATION_CONFIGURATION_MONITOR is not used.

                                        The cmupdate,log file shows for 40 minutes:

                                        Failed to open registry key SOFTWARE\Microsoft\SMS\COMPONENTS\SMS_EXECUTIVE\Threads\SMS_REPLICATION_CONFIGURATION_MONITOR (0), sleeping for 60

                                        Failed to open registry key SOFTWARE\Microsoft\SMS\COMPONENTS\SMS_EXECUTIVE\Threads\SMS_REPLICATION_CONFIGURATION_MONITOR (0), sleeping for 60

                                        and then after 40 mins:

                                        WaitForRegistryNotification timed out trying to register registry notification SOFTWARE\Microsoft\SMS\COMPONENTS\SMS_EXECUTIVE\Threads\SMS_REPLICATION_CONFIGURATION_MONITOR

                                        Monitoring job timed out waiting for thread component SMS_REPLICATION_CONFIGURATION_MONITOR to be running.

                                        This happens…

                                        34 votes
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                          6 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
                                        • Include MDT and most current ADK as optional "Features" that can be installed through the Updates and Servicing Node

                                          I would love to see both MDT and ADK integrated into all new Builds of ConfigMgr as optional Features. This enhancement would give Admins option to enable them if they choose or if they simply want to upgrade to the latest version. This alleviates the need to install MDT separately but more importantly, ends the guess work to determine what ADK is required to deploy the latest version of Windows. This enhancement will also provide a central repository for MDT and ADK by leveraging the Updates and Servicing node within the Admin Console.

                                          31 votes
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                            0 comments  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
                                          ← Previous 1 3 4 5 9 10
                                          • Don't see your idea?

                                          Feedback and Knowledge Base