Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice - Update: Microsoft will be moving away from UserVoice sites on a product-by-product basis throughout the 2021 calendar year. We will leverage 1st party solutions for customer feedback. Learn more

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we canā€™t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the šŸ™‚ button in the top right corner and choose ā€œSend a Frownā€. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer ā€“ our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Antivirus exception control gap

    Since implementing antivirus exceptions are a control gap, please allow windows defender to optionally audit excluded directories in scheduled scans in an audit only mode.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Endpoint Protection  ·  Flag idea as inappropriateā€¦  ·  Admin →
  2. Can we get Add-ItemtoCMBaseline PS Command

    I can create/deploy/remove CI's and Baseline in PS but add (CI/Update/Baseline) to a CM Baseline.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  SDK, PowerShell, and tools  ·  Flag idea as inappropriateā€¦  ·  Admin →
  3. Can we get Remove-ItemfromCMBaseline PS Command

    I can create/deploy/remove CI's and Baseline in PS but remove (CI/Update/Baseline) from a CM Baseline via PS.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  SDK, PowerShell, and tools  ·  Flag idea as inappropriateā€¦  ·  Admin →
  4. Can we get Remove-ConfigurationItemRevisionHistory PS Command

    I can remove an Applications Revision History in PS but not CI's history via PS.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  SDK, PowerShell, and tools  ·  Flag idea as inappropriateā€¦  ·  Admin →
  5. Office Analytics Inventory Scan Frequency

    Currently the Office Analytics runs every 7 days. This can be seen in c:\windows\ccm\logs\officeanalytics.log.
    The frequency is configured in the c:\windows\ccm\OfficeAnalytics.mof file. Shown below:

    instance of CCMSchedulerScheduledMessage
    {
    ScheduledMessageID = "{3C3D7A92-7971-4D35-ABBE-3DBA77126143}";
    TargetEndpoint = "direct:OfficeAnalyticsEndpoint";
    TriggerMessage = "<DAMessage MessageType='CollectOfficeData'/>";
    Triggers = {"SimpleInterval;Minutes=10080"}; // 1 week = 7 * 24 * 60
    };

    This populates the table OFFICEPRODUCTINFODATA
    and the view vGSOFFICE_PRODUCTINFO

    The issue is if you configure inventory to be less than 7 days, the data does not match in the vGSOFFICE365PROPLUSCONFIGURATIONS view until the OfficeAnalytics inventory has run. For example version.

    Pleaseā€¦

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Desktop Analytics  ·  Flag idea as inappropriateā€¦  ·  Admin →
  6. Office Analytics Inventory Scan Frequency

    Currently the Office Analytics runs every 7 days. This can be seen in c:\windows\ccm\logs\officeanalytics.log.
    The frequency is configured in the c:\windows\ccm\OfficeAnalytics.mof file. Shown below:

    instance of CCMSchedulerScheduledMessage
    {
    ScheduledMessageID = "{3C3D7A92-7971-4D35-ABBE-3DBA77126143}";
    TargetEndpoint = "direct:OfficeAnalyticsEndpoint";
    TriggerMessage = "<DAMessage MessageType='CollectOfficeData'/>";
    Triggers = {"SimpleInterval;Minutes=10080"}; // 1 week = 7 * 24 * 60
    };

    This populates the table "OFFICEPRODUCTINFODATA"
    and the view "vGSOFFICE_PRODUCTINFO "

    The issue is if you configure inventory to be less than 7 days, the data does not match in the "vGSOFFICE365PROPLUSCONFIGURATIONS" view until the OfficeAnalytics inventory has run. For example version.

    ā€¦

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Desktop Analytics  ·  Flag idea as inappropriateā€¦  ·  Admin →
  7. Tool tip on device active status icon

    Customers ask me all the time the icon really means. Especially when they confirm a device is powered on and responds to a remote ping. An simple explanation of the icon would be really helpful.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Admin experience and community hub  ·  Flag idea as inappropriateā€¦  ·  Admin →
  8. When retrieving device information within the SCCM Console. Can a column be added for when a device was added to a specific collection?

    Under Collection Tab at bottom for a device. When retrieving device information within the SCCM Console. Can a column be added for when a device was added to a specific collection?

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
  9. Allow a local user (admin or not an admin) to be added in a Task Sequence

    It is possible to *** a local user/group to a local machine during OSD using the net command or PowerShell but it is impossible to do this so that the password is encrypted. PowerShell requires the key so it has to be made on the same machine but that's not always possible. Net command requires the password in plain text, also not desirable.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Operating system deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  10. Add BAT/CMD/PS1 to 'Executable files' filter on 'Deployment Type' installation and uninstall programs

    Every site I've ever worked at has used batch files as the installation/uninstall source. It's a nuisance to have to click that drop-down Every.Single.Time in order to select them. The simple addition of '*.BAT; *.CMD; *.PS1' to the filter would fix that frustration.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Application management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  11. 1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  12. Use TS Variable in Step name

    Status message viewer is great for troubleshooting. Sometimes it would be great to use a TS variable in the Step Name, then you can see values really quick in the log.

    For example create a "Run command line" that does nothing, but the name of the step provide valuable information about something, like if the Pc is connected to VPN.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Operating system deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  13. Make the detection method for applications detect missing applications

    It is not uncommon for us to use a SCCM application deployment to remove an application from our environment. The detection method can verify an executable is there but there is no reverse logic to detect it missing. If the uninstall is clean and there is nothing left over to detect we are forced to use a create a .log or .txt file with PowerShell for the detection method. While this provides basic functionality, it does not allow the deployment to detect when software is reinstalled so it can rerun and remove it again. If there was reverse logic toā€¦

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Application management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  14. Allow AD System Discovery ignoring boundary groups

    We're setting information in AD for computer records that are then pulled by MECM for our asset management system. I've got some device collections that show me systems that are missing certain info, so I can go in and fix in AD.

    I've fixed several in AD, and after days and several AD System Discovery runs, they never pull the data from AD. Apparently, this is due to the systems not being actively online (on-prem) when the discovery takes place, and System Discovery apparently checks IP/DNS against boundary groups, and if they don't have that info (they're off site andā€¦

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
  15. cmpivot to interrogate the Windows update log files

    CMPivot to interrogate the Windows update log files in a similar way CCMLog() interrogates MEMCM log files

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  General  ·  Flag idea as inappropriateā€¦  ·  Admin →
  16. When the Bell comes up to install a new Extension.

    When the Bell comes up to install a new Extension we should have a description of what the option is used for. Or a link with the information. Not all components are useful to all admins or users.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Admin experience and community hub  ·  Flag idea as inappropriateā€¦  ·  Admin →
  17. Enable Enhanced HTTP by default

    As an alternative to presenting a warning for HTTPS and potentially causing confusion, Enhanced HTTP should be enabled by default and there would be no need for warnings or prompts. EHTTP no longer requires Azure on-boarding so there is no reason not to enable it by default going forward. If the user wanted to use HTTPS they could still do so in the console after initial setup or upgrade is complete. The new warnings for HTTPS do not belong in the initial setup wizard because this is not a setting to be taken lightly, but being presented these choices upā€¦

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  Site deployment and infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  18. Add a Notes column to Device Collections

    I would like to be able to add notes to computer objects in Devices collection.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
  19. Get-CMApplicationDeploymentStatus group

    I would like to use PowerShell to get detailed information for some application group deployments, with a goal of setting up a scheduled job to notify our helpdesk via email to follow up on devices with deployment errors. I can use Get-CMApplicationGroupDeployment -Summary to get a high level summary of the deployment statistics but I can't find a way to get the detailed information for the devices in the deployment.

    Would it be possible to extend the PowerShell cmdlet library to permit this?

    Please see MS premier support case #:25437365 for more details.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    0 comments  ·  SDK, PowerShell, and tools  ·  Flag idea as inappropriateā€¦  ·  Admin →
  20. 1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
  • Don't see your idea?

Feedback and Knowledge Base