Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice - Update: Microsoft will be moving away from UserVoice sites on a product-by-product basis throughout the 2021 calendar year. We will leverage 1st party solutions for customer feedback. Learn more

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we canā€™t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the šŸ™‚ button in the top right corner and choose ā€œSend a Frownā€. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer ā€“ our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Add Column for Email just like 'Primary User'.

    Add Column for Email just like 'Primary User'. This will allow rapid targeted communication to the Primary Users in a collection.

    190 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    18 comments  ·  General  ·  Flag idea as inappropriateā€¦  ·  Admin →
  2. When remote controling, be able to see client side mouse move

    When we remote control a client , the client can see the mouse pointer, but when the client want to show us someting, we cant see mouse cursor.

    189 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    15 comments  ·  Remote Control and Remote Desktop  ·  Flag idea as inappropriateā€¦  ·  Admin →
  3. Fix collection update engine

    The way collection membership updates are handled is completely flawed. Should this be fixed, the (soft) limit of collections that can have incremental updates enabled should also be changed.

    We all know that when a collection is updated, all collections limited to it are also updated. And should any of the children collections be updated, then so will the children of the children, and so forth and so on.

    However, there is a massive design flaw that in this system that means a huge number of collections that should never be updated are being updated.

    Imagine this scenario:

    CollA isā€¦

    187 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
  4. Add Support for MSA/gMSA for Standard Roles

    I would like the ability to assign managed service accounts or group managed service accounts to the standard roles for SCCM (i.e. Network Access Account, Domain Join account, Client Push account, etc.) so that those accounts can be secured without the need for knowing or managing the password.

    185 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    7 comments  ·  Site deployment and infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  5. DSC to replace or compliment basline feature

    DSC is a wonderful framework for handling baseline configurations across Windows and Linux machines, but it's completely unsupported in SCCM directly. While a Pull server is certainly more simplistic than an SCCM hierarchy, it would still be very beneficial to have some integration in a couple of areas:

    Management Points can easily be configured to host mof configurations for clients, and a new client policy class for allowing the SCCM agent to configure the pull server settings on a host would be great. Alternatively a new role could be made ... not sure that would feel as elegant.

    The baselineā€¦

    181 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    3 comments  ·  Compliance and settings  ·  Flag idea as inappropriateā€¦  ·  Admin →
  6. SCCM client ScriptExecutionTimeout

    Please make the SCCM client's ScriptExecutionTimeout attribute a parameter that can be configured within Client Settings policy. This would be the best way to help address the "In-line script execution time-out... DiscoverApp failed (0x87d00321)

    179 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  3 comments  ·  Application management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  7. Allow OS Upgrade and Custom Task Sequences to queue status messages during offline execution

    When OS Upgrade and Custom task sequences are running offline (such as following a reboot while on VPN) all task sequence manager status messages are discarded. While this is expected in WindowsPE, it would be beneficial for troubleshooting/reporting if OS Upgrade and Custom task sequences would queue status messages locally just like Executive Manager does with software installation status.

    178 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    10 comments  ·  Operating system deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  8. Add the ability to deploy and manage drivers post OS deployment

    what would be great to see is a mechanism which would allow for the deployment of drivers to client computers post the OSD. ideally it would be fantastic if it can use the same driver package as is used in the OS Deployment to save the administrative overhead needing to have 2 different ways to deploy updated drivers like we need to today where we package the drivers for OS deployment, while to deploy to the existing hardware we need to depend upon the vendors installation package which in some cases don't allow silent installation so requires a large amountā€¦

    177 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    13 comments  ·  Operating system deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  9. Detailed Windows crash data in Desktop Analytics

    Device Health in Windows Analytics has lots of useful information about Windows crashes, such as what caused the blue screen, the driver version, and other information. This information can be used to develop proactive improvement plans to improve the general reliability of our desktop environment and end user devices.

    Could you please add this functionality to Desktop Analytics? It would complement the existing information being reported for O365 reliability, although this is currently somewhat hidden by the M365 UI.

    176 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    6 comments  ·  Desktop Analytics  ·  Flag idea as inappropriateā€¦  ·  Admin →
  10. 174 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    19 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →

    Updating status to planned, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help#send-a-suggestion for an explanation of each status value.

    Weā€™ve shipped fixes for a few scenarios that can cause this in 1902 but know there are some scenarios left.
    May we ask anyone still experiencing it on 1902 to gather verbose logs from the client and send a frown so we can troubleshoot additional scenarios that cause the error.

  11. Emergency/Immediate halt or pause of a software deployment then resume a software deployment when needed.

    In SCCM, there should be a way to stop or discontinue a software deployment should there be an emergency or issue and then resume the deployment when desired. For example, if software has been deployed to the environment and in an event of an emergency or major issue, SCCM should allow the administrator to stop or pause the software deployment in real time, resolve the issue then restart the software deployment again. Ideally, this would accomplish in one push of a button. Unlike now, the administrator goes and deletes the deployment and recreates the deployment again leaving the inability toā€¦

    174 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    planned  ·  9 comments  ·  Client deployment and discovery  ·  Flag idea as inappropriateā€¦  ·  Admin →
  12. RBAC for Desktop Analytics

    1. As of the role in Azure is desktop analytics administrator, which allow complete access to this blade, any plan for a read only role ? or read only is possible with any other role, considering there is only 3 roles in azure for devices ?
    2. Can we have more granular role based access model in here with RBAC ?
    170 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    4 comments  ·  Desktop Analytics  ·  Flag idea as inappropriateā€¦  ·  Admin →
  13. criteria in software updates filtering for Title

    During the software update filter section ,I want to exclude updates with title malicious,itanium and security only but for this ,if i choose title does not contain ,it doesnt have option to change AND instead of OR .
    OR will work only if the title contain but if i choose does not contain ,i left with undesired results. This is same for other filter sections .
    Attached the image for your reference.

    Can this be improved to customize based on the requirement.

    170 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    9 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  14. Add support for "Hotfix" Update classification

    SCCM should be able to support all updates made available in the MS catalog.
    The MS Update Catalog lists hotfixes which makes WSUS more useful than SCCM. If WSUS can rollout a hotfix why can't SCCM?
    Example KB2728738 is a hotfix available in the MS Update Catalog (http://Catalog.Update.microsoft.com/v7/Site/Search.aspx?q=2728738) yet it can not be imported to SCCM as the "Hotfix" class is not available.
    MS Support suggest to follow an non MS consultants blog http://ccmexec.com/2012/02/installing-multiple-windows-7-hotfixes-msu-with-sccm/
    As MS continue to create more and more Hotfixes in replacement of proper updates this makes SCCM Update component less and less useful.

    164 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    5 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  15. Download Package Content - Dynamic Option

    Modify the Download Package Content step to include a dynamic option similar to the Install Package step (see attached mock up). This will allow the ability to selectively download content that is not a direct task sequence reference. When deploying the task sequence, the direct references (common to every system) can be downloaded ahead of time and then the system specific items can be downloaded selectively at TS run time. OSDDownloadContent.exe already performs a dynamic content location request, which is super useful when needing to pre-cache or download driver packages, BIOS packages and other items that are machine specific.

    163 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    3 comments  ·  Operating system deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  16. Option to use SYSTEM context for detection method for a user-based application deployment

    The application detection method only runs in the user context if it is deployed to a user collection. This would be reasonable if the Deployment Type user experience were set to "Install for User" (User context), however the detection method runs in the user context when this is set to "Install for system" installation behavior (SYSTEM context).

    163 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  12 comments  ·  Application management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  17. Trigger Hardware Inventory after Operating System Upgrade Task Sequence Completes

    An OS Upgrade Task Sequence results in many significant changes to a system's Inventory and compliance states. The OS Upgrade TS should trigger a full hardware inventory after completion

    162 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    8 comments  ·  Operating system deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  18. Improved automation and extensibility by exposing Configuration Manager functionality through a REST web API

    Exposing Configuration Manager functionality through RESTful web API's would open up a whole new world for interacting with ConfigMgr.
    E.g. a web Admin console and easier integration with Service Management Automation (SMA).
    It should also be easier for 3rd party vendors to create new web based solutions for say an self-service portal or a Windows App for tracking an OS or application deployment on a mobile device or phone.
    Personally I would really like any easier way to interact with ConfigMgr. when running in Windows PE (OS Deployment) or a web portal for non-admins to provision new or existing machineā€¦

    157 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    8 comments  ·  SDK, PowerShell, and tools  ·  Flag idea as inappropriateā€¦  ·  Admin →
  19. Install Servicing Stack Updates (SSU) Before Other Updates When User Initiated

    The Current Branch 2002 release introduced a feature to install SSUs first but only when triggered by the deadline.
    From the docs:
    "SSUs are installed first only for non-user initiated installs. For instance, if a user initiates an installation for multiple updates from Software Center, the SSU might not be installed first."

    A lot of work has been put into encouraging user-participation in the patching process. I want the user to decide when they're ready to install the updates and avoid situations where the deadlines impact their work. In those scenarios the behavior introduced in 2002 therefore not helpful.

    Iā€¦

    155 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    4 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  20. Allow Changing In-use Global Conditions

    Currently, a Global Condition cannot be changed or deleted if it is in use in any existing revision of an application. This makes testing a new global condition or fixing an existing global condition extremely cumbersome, either resulting in many duplicates being created or many revisions of the application being deleted every time the global condition must be changed.

    While it is beneficial to make it difficult to break an existing application by preventing the global condition from changing, ultimately, SCCM users need the freedom to determine when it is appropriate to change an existing Global Condition on their own.

    154 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    4 comments  ·  Application management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base