Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we canā€™t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the šŸ™‚ button in the top right corner and choose ā€œSend a Frownā€. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer ā€“ our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Add Ability to Remediate Existential Registry Setting Compliance Items

    Currently you cannot auto-remediate a registry compliance item with an existential rule. I should be able to select an option to auto-remediate to have a setting removed much like you can to set a value.

    249 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    11 comments  ·  Compliance Settings  ·  Flag idea as inappropriateā€¦  ·  Admin →
  2. Allow deployments using application model to be installed from DP rather than downloaded to ccmcache folder

    I have to create several very large (10GB and up) software deployments each year and install them for two thirds of the user base. Preferred method of delivery is install directly from the DP rather than download the installation files to C:\windows\ccmcache. It would be nice to do this using the application model so I can make use of the extended feature set it provides over the package model. I have to work around the limitations using convoluted wrapper scripts to get everything working properly.

    237 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  23 comments  ·  Application Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  3. Improve Content Replication

    Content Replication from Site to DPs should be a frustration free Process or SCCM Admins. Unfortunately, I know no customer without smaller or bigger issues in this area.
    Here is an uncomplete list of some issues IĀ“ve noticed:
    ā€¢ Content Eval - Scheduled Task lost
    o SCCM does not check if the schedule task got lost/deleted
    o Suggested Solution: SCCM should verify the Scheduled Task on Service Startup
    ā€¢ Content Eval - Hash mismatch/Eval fails for package
    o When content Eval fails for a package, the admin must manually redistribute it / take care of the error
    o There shouldā€¦

    233 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  2 comments  ·  Content  ·  Flag idea as inappropriateā€¦  ·  Admin →
  4. Apply all deployed applications step in OSD

    A step during OSD that queries SCCM for the applications deployed to a machine. If any are deployed to collections the machine is a member of they are installed one at a time, performing any restarts untill the whole list is complete. This should be an integrated step rather than implemented inconsistently by third-parties in PS or IIS

    230 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  8 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  5. Support Phased Deployments in Automatic Deployment Rules

    I think this is pretty straight-forward. If the Phased Deployment feature is to become a thing for software updates it needs to be supported as part of ADRs. If organizations are manually deploying updates then they're simply doing it wrong. If anyone thinks I'm transitioning from automated deployments to manual phased deployments they vastly underestimate my laziness.

    229 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    9 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  6. Allow uninstall of applications with dependencies

    When you deploy an application with dependencies, you loose the option to uninstall it from software center. It would be nice to be able to uninstall the main app and be able to choose if the dependencies would uninstall or not.

    221 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  15 comments  ·  Application Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  7. Mark easy way to query Driver Versions of all drivers on a system.

    Please make an easy way to query Driver Versions of all drivers on a system from SCCM Hardware inventory without creating a custom MOF or looking at registry files? I found a forum thread on TechNet a few years old that said Microsoft said that using WMI class win32_pnpsigneddriver was unreliable and is why it was not available in SCCM hardware inventory and they were considering removing the class entirely. However the class remains in win 10 and is still the only way to query driver version using a script. It would be really useful to be able to haveā€¦

    219 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    6 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
    Noted  ·  sangeev responded

    Updated by bobmn for sangeev/OSD

  8. Fix Active Directory Discovery Attribute <Not Set> Bug

    When an optional AD attribute has been selected for inclusion in AD discovery, if that attribute has a value at time of discovery, it is included in the discovery and reflected as part of the information for the user/computer/group object in CM. If that AD attribute is later cleared (changed to <not set> / NULL value in AD), discovery identifies that the attribute is a NULL value and purposely skips it from the discovery. As such, the user/computer/group object in AD falls out of sync with the AD attributes and continues to report the value even though it has beenā€¦

    216 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    under review  ·  12 comments  ·  Asset Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  9. smart card pass-through support for remote control

    Please provide smart card pass through for RDP/Remote Control sessions.

    216 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    23 comments  ·  Remote Control  ·  Flag idea as inappropriateā€¦  ·  Admin →
  10. Delete multiple objects from console

    It would be very great and intuitive to be able to delete multiple apps \ deployment types\ deployments \ packages \ driver packages and even folders from Console without creating custom PowerShell scripts.
    Today when selecting multiple objects the delete option becomes greyed out.

    206 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  23 comments  ·  Admin Console  ·  Flag idea as inappropriateā€¦  ·  Admin →
  11. Allow us the ability to view all variables and their values that are available in a task sequence (both built-in and custom) via a gui

    While testing some new functionality in SCCM 1602 current branch I inadvertently searched for a possible new variable using the 'set dynamic variable' step.

    Unfortunately that doesn't list read only variables in the 'existing variables' list (read only variables begin with _). It would be awesome if this gui would list all built-in variables (including read-only ones) as this would make searching for a particular variable easier than having to google or bing it.

    Secondly, how about the option to list all custom defined variables in this gui, along with their values (if any). today we get the following headingsā€¦

    204 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    3 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
    Noted  ·  sangeev responded

    Thanks for the feedback.

    Updated by bobmn for sangeev/OSD

  12. Enhance task sequence step preprovision bitlocker with encryptionmode options

    For MBAM clients I want to use preprovisioned bitlocker volumes.
    A requirement is to use the AES256 encryption mode.The pre provision bitlocker step defaults to aes128, and cannot be changed in the step itself.
    I now have a extra step before the preprovision bitlocker step with this command:
    cmd /c reg.exe add HKLM\SOFTWARE\Policies\Microsoft\FVE /v EncryptionMethod /t REG_DWORD /d 4 /f

    Thanks to this website:
    https://blog.alschneiter.com/2017/05/03/change-bitlocker-drive-encryption-to-xts-aes-256-during-osd-with-configmgr/

    199 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  13. Make automatic client upgrade more intelligent to not break other running installations

    Right now, the automatic Client upgrade scheduled Task is not aware of any running installations. So if appenforce.log shows a running Installation and at the same time the randomly timed scheduled tasks kicks in, the Installation cannot finish without error and will randomly leave the Installation or the SCCM Client itself in a unhealthy state. A reinstallation is the only way out.

    Repro steps
    - Activate automatic Client Upgrade in Hierarchy settings
    - Exclude some test clients from automatic client upgrade
    - Create an Application with a deploymenttype using a custom script
    - As the script, use a batch fileā€¦

    195 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    5 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  14. Would like to replace the Windows defender icon with the SCEP icon when managed by Endpoint Protection

    In windows 10 when managed by SCCM+Endpoint Protection, we get Windows Defender as the Endpoint Protection client, which is fine as they use the same engine.

    However the icon is for Windows Defender which doesn't make sense.

    Can we change it to the SCEP icon instead which would make more sense and go along with the installed software SCEP in control panel which does have the correct icon (in Programs and Features).

    Having the SCEP icon would be a nice visual clue (aside from looking at applied policies) that SCEP was managing Antivirus rather than Windows itself

    193 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Endpoint Protection  ·  Flag idea as inappropriateā€¦  ·  Admin →
  15. add possibility to logoff user for Software Installation and prevent login during installation.

    It would be great to have a possibility to create a deployment where the User would be logged off during the installation of Software. Useful for Software like Java Runtime or Adobe Pro where a running application can prevent the installation.
    The User should be informed that an installation will be started and he will be logged off. The User should be not able to login during the installation.

    195 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  9 comments  ·  Application Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  16. Windows 10 Servicing Dashboard: Make it clickable

    When I go to the Windows 10 Servicing Dashboard, I got a nice PieChart of the Windows 10 Clients and their Version.
    But when I click on the PieChart, nothing happens. It would be great to have the same experience on this Dashboard like on the SCEP Dashboards.
    That means, if I click on the PieChart one of the Windows 10 Version, a new collection would be opened, with the corresponding Devices.

    193 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    7 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  17. Windows 10 Servicing Customization

    It would be great to be able to customize the Windows 10 image or allow a "clean up script" to run post install. I like the concept of the Windows 10 Servicing part of the SCCM console. I think it will become important as upgrades start rolling out 1-2 times a year and majority of companies have Windows 10 clients that need servicing. Being able to create Servicing plans will help keep IT on top of the upgrade process through different updates.

    The current model just doesn't work for a lot of companies. Not many places allow games such asā€¦

    192 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    14 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  18. Enhance Install Behavior for detecting open applications

    SCCM 1702 introduced the Install Behavior tab for deployment types which lets you specify executables for the application to monitor during deployment. Currently, if the deployment is "Available" or "Available but before the deadline" then the install fails and users receive a pop-up indicating which executables need to be closed prior to your application running.

    Enhancements:
    1. Modify the feature so that the pop-up appears before the application install fails. If the user clicks "OK" then the application will perform the check again. If the executables are still open then the pop-up appears again. The pop-up will continue to appearā€¦

    194 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    13 comments  ·  Application Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  19. SCCM Console, save your prefered defaults.

    Can be frustrating, SCCM console, keeps resetting to default, every time you exit. The odd occasion it will retain settings. IE: folder options, and settings. Would be nice if we could save these to a personal default, so it retains settings.

    190 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    19 comments  ·  Admin Console  ·  Flag idea as inappropriateā€¦  ·  Admin →
  20. Software Center Dark Mode

    Make a dark mode that switches with the Windows 10 dark mode system setting. Also add fluent design system to Software Center. Make its appearance more co-herent with the Windows 10 settings app GUI.

    185 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    4 comments  ·  Software Center  ·  Flag idea as inappropriateā€¦  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base