Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Configuration Manager, though we canā€™t promise to reply to all posts.

Please do not use UserVoice to report product bugs or for assisted support.
If you believe you have found a product bug, please send us a bug report through the Configuration Manager Console (1806 and newer). To do this, press the šŸ™‚ button in the top right corner and choose ā€œSend a Frownā€. For more details, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help.

If you require assisted support, please see https://aka.ms/cmcbsupport for more details.

Standard Disclaimer ā€“ our lawyers made us put this here ;-)
We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Microsoft Endpoint Configuration Manager feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Configuration Manager. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Change target computer mapping for state migrations (USMT)

    Please make it possible to change the target computer when using state migration points as a means of transferring user data to one pc to another.
    The scenario would allow the backup (scanstate) of the old pc data, utilizing all positive aspects of SMP (centralized, encrypted, storage based on boundaries). IT could then later set target computer, which may not be known at the time the data gets saved.
    Ideally this should be possible in the admin console by ā€œeditingā€ the state item to map to a new computer, just after it has already been created. ā€œLate mappingā€ so toā€¦

    140 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    2 comments  ·  Client Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  2. Search for CVE numbers

    Now that Microsoft has moved away from using the Bulletin IDs for some of the major updates, it will become very useful for us to be able to search the Software Updates using the CVE number (i.e. CVE-2017-0199: Microsoft Word HTA Handler Vulnerability). This will help us quickly look up patch status for those CVE identifiers.

    139 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    6 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  3. 135 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    15 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →

    Updating status to planned, see https://docs.microsoft.com/en-us/sccm/core/understand/find-help#send-a-suggestion for an explanation of each status value.

    Weā€™ve shipped fixes for a few scenarios that can cause this in 1902 but know there are some scenarios left.
    May we ask anyone still experiencing it on 1902 to gather verbose logs from the client and send a frown so we can troubleshoot additional scenarios that cause the error.

  4. Allow Changing In-use Global Conditions

    Currently, a Global Condition cannot be changed or deleted if it is in use in any existing revision of an application. This makes testing a new global condition or fixing an existing global condition extremely cumbersome, either resulting in many duplicates being created or many revisions of the application being deleted every time the global condition must be changed.

    While it is beneficial to make it difficult to break an existing application by preventing the global condition from changing, ultimately, SCCM users need the freedom to determine when it is appropriate to change an existing Global Condition on their own.

    132 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    4 comments  ·  Application Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  5. Include the serviceui.exe functionality in task sequence environment by default

    Many organizations create their own front-ends for ConfigMgr Task Sequences (or leverage popular third-party ones like OSD++, Pretty Good Front End, etc.). However, these only are able to be used when the task sequence is in WinPE.

    Please add the serviceui.exe functionality into the default task sequence environment so it is possible to display Light Touch prompts when starting the task sequence from an existing operating system. Including serviceui.exe would be enough, or the functionality to launch interactive UI could be added to the environment natively.

    132 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →

    Updating status to started. See https://docs.microsoft.com/en-us/configmgr/core/understand/find-help#send-a-suggestion for an explanation of each value.

    Configmgr 2003 Technical Preview released today and has a new SDK method for task sequence progress.

    For more info:
    Doc: https://docs.microsoft.com/en-us/configmgr/core/get-started/2020/technical-preview-2003#bkmk_tsapi
    Blog: https://techcommunity.microsoft.com/t5/configuration-manager-blog/onboard-clients-to-microsoft-defender-atp-using-memac-and/ba-p/1266085

    This should address some of the asks here, please try it out and let us know your feedback.

  6. Management Insights: Show Microsoft Products detected in your environment that are not enabled on the SUP

    Managing your SUP can be challenging in large environments where other teams may be implementing new Microsoft products and forgetting to notify the SCCM Admin that it might be a good idea to patch the product.
    With Management Insights now available in the Console it would be nice to show insights in what Microsoft products are detected in your environment as being installed, but are not enabled on the SUP hence creating a potential security risk.

    129 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    5 comments  ·  Admin Console  ·  Flag idea as inappropriateā€¦  ·  Admin →
  7. Show live distribution status within the console

    Show the live status of content copying to distribution points (status bar) in the Admin console, Essentially the existing DP Job queue Manager

    126 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  0 comments  ·  Content  ·  Flag idea as inappropriateā€¦  ·  Admin →
  8. criteria in software updates filtering for Title

    During the software update filter section ,I want to exclude updates with title malicious,itanium and security only but for this ,if i choose title does not contain ,it doesnt have option to change AND instead of OR .
    OR will work only if the title contain but if i choose does not contain ,i left with undesired results. This is same for other filter sections .
    Attached the image for your reference.

    Can this be improved to customize based on the requirement.

    125 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    8 comments  ·  Software Updates  ·  Flag idea as inappropriateā€¦  ·  Admin →
  9. Use SQL Backup with Compression for the backup task

    With CM 1511, SMS Backup task enabled by default. And that does a volume shadow copy of the DB which means full-sized files. For my tiny lab that means I'm backing up 8 GB alone.

    For production it'll mean 850GB per primary site. Under CM12 when we backup just SQL using compression, it's just 160GB per primary site.

    Please allow an option to just invoke a database backup instead so that compression can be used and I don't need to go order terabytes of data just for backups.

    Also the current backup just erases the last backup. But in aā€¦

    126 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  1 comment  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  10. Have updates automatically handle MP replicas

    It's a real pain to have to tear down and rebuild the MP replicas every time I want to install a servicing update. It would be great to have the update process automatically save the replica state, point the MPs at the primary DB, tear down the MP replicas, do the update and then put it all back.

    124 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  1 comment  ·  Setup and Server Infrastructure  ·  Flag idea as inappropriateā€¦  ·  Admin →
  11. Better Driver and Driver Package Management

    Driver Management within the console is unacceptably slow (still). We manage 60+ unique Models across Windows 7 all the way up through Windows 10. As a result there are a LOT of drivers to maintain and manage. With SCCM 2007, we had the ability to at least break these down in folders. With sccm 2012 you removed the ability to import directly to a folder. The trade-off was "categories" however, it is still incredibly slow to search for drivers.

    In addition, with SCCM 2007, we could just fill a folder with inf's and create a driver package from that withoutā€¦

    123 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  8 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  12. Improve PC lifecycle management feature

    ConfigMgr should have better PC lifecycle management.

    E.g. following features:
    - Recognize potential devices that are removed from the network e.g. devices that are removed/disabled from AD, not active within ConfigMgr
    - When removing a device from ConfigMgr, the device should be removed also from AD/Intune/CMDB. There should be a way to provide a custom command to remove the device from 3rd party CMDB
    - Create a workflow with multiple conditions and steps with optional approval

    123 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    1 comment  ·  Asset Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  13. Detailed Windows crash data in Desktop Analytics

    Device Health in Windows Analytics has lots of useful information about Windows crashes, such as what caused the blue screen, the driver version, and other information. This information can be used to develop proactive improvement plans to improve the general reliability of our desktop environment and end user devices.

    Could you please add this functionality to Desktop Analytics? It would complement the existing information being reported for O365 reliability, although this is currently somewhat hidden by the M365 UI.

    123 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    5 comments  ·  Desktop Analytics  ·  Flag idea as inappropriateā€¦  ·  Admin →
  14. Add the ability to deploy and manage drivers post OS deployment

    what would be great to see is a mechanism which would allow for the deployment of drivers to client computers post the OSD. ideally it would be fantastic if it can use the same driver package as is used in the OS Deployment to save the administrative overhead needing to have 2 different ways to deploy updated drivers like we need to today where we package the drivers for OS deployment, while to deploy to the existing hardware we need to depend upon the vendors installation package which in some cases don't allow silent installation so requires a large amountā€¦

    119 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    10 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  15. Download Package Content - Dynamic Option

    Modify the Download Package Content step to include a dynamic option similar to the Install Package step (see attached mock up). This will allow the ability to selectively download content that is not a direct task sequence reference. When deploying the task sequence, the direct references (common to every system) can be downloaded ahead of time and then the system specific items can be downloaded selectively at TS run time. OSDDownloadContent.exe already performs a dynamic content location request, which is super useful when needing to pre-cache or download driver packages, BIOS packages and other items that are machine specific.

    119 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    3 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  16. Create collections based on boundary group

    With more and more AD admins being directed to "flatten" their sites and services, the ability to create query collections based on an AD site has become moot since boundaries are now having to be manually created by subnet or range. When a new subnet comes online or is taken off, not only does it have to be changed as a boundary and to subsequent groups but now any collections needing that range must also be updated. I'd rather one change to a group dynamically change all other collections tied to the group.

    118 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    6 comments  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  17. Collections should have a column for IP address

    When a collection of computers is opened we should have the option of displaying a column with the machines IP address. Or 2 columns, one for IPV4 and another for IPV6.

    116 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    13 comments  ·  Collections  ·  Flag idea as inappropriateā€¦  ·  Admin →
  18. Task Sequence Version Control

    Please create a function to enable task sequence versioning. This feature would be very helpful for reverting back to a previous task sequence as well as accountability for the last user that modified the task sequence.

    We write a lot of WMI queries as well as set various task sequence variables. These settings change over time and it would be a great feature to look back on a previous version to view the changes as well as the last user modification.

    We currently make copies of our task sequences for this archival purpose. This process works for us now, butā€¦

    113 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    4 comments  ·  Operating System Deployment  ·  Flag idea as inappropriateā€¦  ·  Admin →
  19. Pre distribute content to clients before deadline.

    I work in a quite big Environment, 30k clients and my network team isnā€™t that happy when we pull the trigger to update our critical LOB apps due to the fact that every computer downloads the content almost at the same time. That puts a lot of pressure on the network infrastructure.
    There for it would be great to be able to preload the clients with content for applications in a slow and steady way before the deadline falls for the application.

    110 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  5 comments  ·  Application Management  ·  Flag idea as inappropriateā€¦  ·  Admin →
  20. Temporarily suspend any SCCM client activity

    Many of our users (300000) need a feature to temporarily suspend any SCCM activity at least for a limited time per day.
    Activities that need to be suspended are:
    - Downloads
    - Installs
    - Reboots

    Business cases:
    Customers Skype sessions often get disturbed while a download is running in the background. We thought the setting "Suspend Software Center activities when in PowerPoint presentation mode" would help but from what our user reports it doesn't.

    Another scenario are users working on metered connections, e.g. as they are provided by Deutsche Bahn. Users working on such a connection quickly use up theirā€¦

    110 votes
    Vote
    Sign in
    (thinkingā€¦)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinkingā€¦)
    Noted  ·  9 comments  ·  Client Settings  ·  Flag idea as inappropriateā€¦  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base