Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we canā€™t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the šŸ™‚ button in the top right corner and choose ā€œSend a Frownā€. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer ā€“ our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. active directory description

    Add an column to the devices view that would display Active Directory descriptions in console.

    282 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    36 comments  ·  Asset Management  ·  Flag idea as inappropriateā€¦  ·  Admin →

    This can be done today w/ #SCCM 1802 (and previous versions too). I will mark started… and watch comments for why this doesn’t just work… before I mark this straight up completed…

    Steps:
    1) On the CAS (or standalone primary), go to Administration → Hierarchy Configuration → Discovery methods
    2) right click on Active Directory System Discovery and bring up the Properties form. Active Directory Attributes tab, and then click on Custom. In the form that appears, type the name of the attribute. Click OK, and make sure you have added it as an attribute to discover. Run discovery after exiting properties form.
    3) Now when you go to the Devices view and right click on a device and go to its Properties form, you will see the new attribute showing up there.

  2. Deploy Package to Multiple Collections at one time

    Allow packages to be deployed to multiple collections at one time. For instance I need AppX to go to Lab 1, Lab 2 and Lab4. Instead of going into AppX 3 different times to deploy, it would be nice to deploy it to all 3 labs at one time.

    277 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  18 comments  ·  Application Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  3. Add Ability to Remediate Existential Registry Setting Compliance Items

    Currently you cannot auto-remediate a registry compliance item with an existential rule. I should be able to select an option to auto-remediate to have a setting removed much like you can to set a value.

    239 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    11 comments  ·  Compliance Settings  ·  Flag idea as inappropriateā€¦  ·  Admin →
  4. Apply all deployed applications step in OSD

    A step during OSD that queries SCCM for the applications deployed to a machine. If any are deployed to collections the machine is a member of they are installed one at a time, performing any restarts untill the whole list is complete. This should be an integrated step rather than implemented inconsistently by third-parties in PS or IIS

    228 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  8 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  5. Allow deployments using application model to be installed from DP rather than downloaded to ccmcache folder

    I have to create several very large (10GB and up) software deployments each year and install them for two thirds of the user base. Preferred method of delivery is install directly from the DP rather than download the installation files to C:\windows\ccmcache. It would be nice to do this using the application model so I can make use of the extended feature set it provides over the package model. I have to work around the limitations using convoluted wrapper scripts to get everything working properly.

    229 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  21 comments  ·  Application Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  6. Improve Content Replication

    Content Replication from Site to DPs should be a frustration free Process or SCCM Admins. Unfortunately, I know no customer without smaller or bigger issues in this area.
    Here is an uncomplete list of some issues IĀ“ve noticed:
    ā€¢ Content Eval - Scheduled Task lost
    o SCCM does not check if the schedule task got lost/deleted
    o Suggested Solution: SCCM should verify the Scheduled Task on Service Startup
    ā€¢ Content Eval - Hash mismatch/Eval fails for package
    o When content Eval fails for a package, the admin must manually redistribute it / take care of the error
    o There shouldā€¦

    228 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  2 comments  ·  Content  ·  Flag idea as inappropriateā€¦  ·  Admin →
  7. smart card pass-through support for remote control

    Please provide smart card pass through for RDP/Remote Control sessions.

    205 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    23 comments  ·  Remote Control  ·  Flag idea as inappropriateā€¦  ·  Admin →
  8. Allow uninstall of applications with dependencies

    When you deploy an application with dependencies, you loose the option to uninstall it from software center. It would be nice to be able to uninstall the main app and be able to choose if the dependencies would uninstall or not.

    205 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  15 comments  ·  Application Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  9. Mark easy way to query Driver Versions of all drivers on a system.

    Please make an easy way to query Driver Versions of all drivers on a system from SCCM Hardware inventory without creating a custom MOF or looking at registry files? I found a forum thread on TechNet a few years old that said Microsoft said that using WMI class win32_pnpsigneddriver was unreliable and is why it was not available in SCCM hardware inventory and they were considering removing the class entirely. However the class remains in win 10 and is still the only way to query driver version using a script. It would be really useful to be able to haveā€¦

    199 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    6 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
    Noted  ·  sangeev responded

    Updated by bobmn for sangeev/OSD

  10. Allow us the ability to view all variables and their values that are available in a task sequence (both built-in and custom) via a gui

    While testing some new functionality in SCCM 1602 current branch I inadvertently searched for a possible new variable using the 'set dynamic variable' step.

    Unfortunately that doesn't list read only variables in the 'existing variables' list (read only variables begin with _). It would be awesome if this gui would list all built-in variables (including read-only ones) as this would make searching for a particular variable easier than having to google or bing it.

    Secondly, how about the option to list all custom defined variables in this gui, along with their values (if any). today we get the following headingsā€¦

    200 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    3 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
    Noted  ·  sangeev responded

    Thanks for the feedback.

    Updated by bobmn for sangeev/OSD

  11. Delete multiple objects from console

    It would be very great and intuitive to be able to delete multiple apps \ deployment types\ deployments \ packages \ driver packages and even folders from Console without creating custom PowerShell scripts.
    Today when selecting multiple objects the delete option becomes greyed out.

    201 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  22 comments  ·  Admin Console  ·  Flag idea as inappropriateā€¦  ·  Admin →
  12. Fix Active Directory Discovery Attribute <Not Set> Bug

    When an optional AD attribute has been selected for inclusion in AD discovery, if that attribute has a value at time of discovery, it is included in the discovery and reflected as part of the information for the user/computer/group object in CM. If that AD attribute is later cleared (changed to <not set> / NULL value in AD), discovery identifies that the attribute is a NULL value and purposely skips it from the discovery. As such, the user/computer/group object in AD falls out of sync with the AD attributes and continues to report the value even though it has beenā€¦

    198 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    under review  ·  11 comments  ·  Asset Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  13. Would like to replace the Windows defender icon with the SCEP icon when managed by Endpoint Protection

    In windows 10 when managed by SCCM+Endpoint Protection, we get Windows Defender as the Endpoint Protection client, which is fine as they use the same engine.

    However the icon is for Windows Defender which doesn't make sense.

    Can we change it to the SCEP icon instead which would make more sense and go along with the installed software SCEP in control panel which does have the correct icon (in Programs and Features).

    Having the SCEP icon would be a nice visual clue (aside from looking at applied policies) that SCEP was managing Antivirus rather than Windows itself

    193 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Endpoint Protection  ·  Flag idea as inappropriateā€¦  ·  Admin →
  14. Make automatic client upgrade more intelligent to not break other running installations

    Right now, the automatic Client upgrade scheduled Task is not aware of any running installations. So if appenforce.log shows a running Installation and at the same time the randomly timed scheduled tasks kicks in, the Installation cannot finish without error and will randomly leave the Installation or the SCCM Client itself in a unhealthy state. A reinstallation is the only way out.

    Repro steps
    - Activate automatic Client Upgrade in Hierarchy settings
    - Exclude some test clients from automatic client upgrade
    - Create an Application with a deploymenttype using a custom script
    - As the script, use a batch fileā€¦

    191 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    5 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  15. Windows 10 Servicing Dashboard: Make it clickable

    When I go to the Windows 10 Servicing Dashboard, I got a nice PieChart of the Windows 10 Clients and their Version.
    But when I click on the PieChart, nothing happens. It would be great to have the same experience on this Dashboard like on the SCEP Dashboards.
    That means, if I click on the PieChart one of the Windows 10 Version, a new collection would be opened, with the corresponding Devices.

    193 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    7 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  16. Windows 10 Servicing Customization

    It would be great to be able to customize the Windows 10 image or allow a "clean up script" to run post install. I like the concept of the Windows 10 Servicing part of the SCCM console. I think it will become important as upgrades start rolling out 1-2 times a year and majority of companies have Windows 10 clients that need servicing. Being able to create Servicing plans will help keep IT on top of the upgrade process through different updates.

    The current model just doesn't work for a lot of companies. Not many places allow games such asā€¦

    190 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    14 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  17. add possibility to logoff user for Software Installation and prevent login during installation.

    It would be great to have a possibility to create a deployment where the User would be logged off during the installation of Software. Useful for Software like Java Runtime or Adobe Pro where a running application can prevent the installation.
    The User should be informed that an installation will be started and he will be logged off. The User should be not able to login during the installation.

    188 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  9 comments  ·  Application Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  18. Enhance Install Behavior for detecting open applications

    SCCM 1702 introduced the Install Behavior tab for deployment types which lets you specify executables for the application to monitor during deployment. Currently, if the deployment is "Available" or "Available but before the deadline" then the install fails and users receive a pop-up indicating which executables need to be closed prior to your application running.

    Enhancements:
    1. Modify the feature so that the pop-up appears before the application install fails. If the user clicks "OK" then the application will perform the check again. If the executables are still open then the pop-up appears again. The pop-up will continue to appearā€¦

    187 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    13 comments  ·  Application Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  19. Add Column for Email just like 'Primary User'.

    Add Column for Email just like 'Primary User'. This will allow rapid targeted communication to the Primary Users in a collection.

    184 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    16 comments  ·  Admin Console  ·  Flag idea as inappropriateā€¦  ·  Admin →
  20. Fix collection update engine

    The way collection membership updates are handled is completely flawed. Should this be fixed, the (soft) limit of collections that can have incremental updates enabled should also be changed.

    We all know that when a collection is updated, all collections limited to it are also updated. And should any of the children collections be updated, then so will the children of the children, and so forth and so on.

    However, there is a massive design flaw that in this system that means a huge number of collections that should never be updated are being updated.

    Imagine this scenario:

    CollA isā€¦

    180 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    5 comments  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base