Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice

Bryan Dam

My feedback

  1. 291 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Noted  ·  5 comments  ·  Ideas » Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Bryan Dam commented  · 

    I'd argue that that this is now complete.

    Importing the catalogs is now in the console.
    Selecting which products in the catalog to sync and download is also in the console.

  2. 265 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    12 comments  ·  Ideas » Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Bryan Dam commented  · 

    ConfigMgr 1902 introduced/revised a setting called 'Prefer cloud based sources over on-premise sources'*. Set this on your VPN boundary groups and those clients should download updates from Microsoft instead of your on-prem DPs.
    https://docs.microsoft.com/en-us/mem/configmgr/core/servers/deploy/configure/boundary-groups#bkmk_bgoptions4

    If you want all your clients to always download from Microsoft then use the "No Deployment Package" ADR deployment option introduced in 1806.
    https://docs.microsoft.com/en-us/mem/configmgr/sum/deploy-use/automatically-deploy-software-updates.

    In both cases make sure that all your deployments have the 'If software updates are not available on distribution point in current, neighbor or site boundary groups, download content from Microsoft Updates' option enabled too.

    Between these three things this UserVoice item should be considered complete.

  3. 70 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Ideas » Application Management  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Bryan Dam commented  · 

    I look at this less as integrate 'winget the application' but rather integrate/consume the metadata that backs winget which is a trusted, Microsoft-backed application metadata repository.

    If Microsoft is finally going to put in the effort to building and maintaining such a thing then let MEMCM consume it to create new applications and update existing ones.

  4. 248 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Noted  ·  25 comments  ·  Ideas » Application Management  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Bryan Dam commented  · 

    As an alternative, download the app but don't cache it or count it towards the cache limit and once installed, get rid of it.

    I might dedicate 10 or even 20 GB to ConfigMgr's cache and in 99% of situations that perfectly fine. It's the outliers though, the CAD applications, that we need some kind of exception for instead of be ruled by their needs.

  5. 4 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Ideas » Content  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Bryan Dam commented  · 
    Bryan Dam shared this idea  · 
  6. 10 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Ideas » Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Bryan Dam commented  · 

    And now with Intune we have the ability to specify which Win 10 release clients will stick to. Please integrate that as well and I think a lot of orgs could consider migrating to WUfB.

  7. 44 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Ideas » Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
    Bryan Dam shared this idea  · 
  8. 49 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Ideas » Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Bryan Dam commented  · 

    Worth noting here is that the randomization period should not equal the MW period itself ... it's not just a checkbox. Randomly starting the install process 30 seconds before the end of the MW would b bad. We need some way of specifying that for the first X period of the MW the randomize spread will occur. Would probably be wise to put in some validation/warning if the user leaves less than say 2 hours for actual patching to happen.

    What if there's multiple windows? Debatable but I think the ideal would be to use whatever the latest randomization end is and use that. On that basis that more spread is better and that there should always be a buffer at the end for actual patching.

  9. 13 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Ideas » Application Management  ·  Flag idea as inappropriate…  ·  Admin →
    Bryan Dam shared this idea  · 
  10. 32 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Ideas » Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Bryan Dam commented  · 

    It occurred to me just now that while SUPs are the one I've seen most frequently (probably because nuke-n-pave is a popular option) this should probably apply to all boundary aware site roles. If clients will only use a newly created role based on boundary information then make that part of the configuration process so that admins do not neglect it.

    Bryan Dam shared this idea  · 
  11. 110 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Ideas » Client Settings  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Bryan Dam commented  · 

    I'd like to suggest the more generic case. Adam is proposing something specific here for Windows Setup. Fine and dandy but what if the bar was simply lowered for inventorying _any_ registry key/value? Eliminate the need for Reg2Mof or manual MOF changes in general.

    In the same way we can import a local or remote WMI class allow us to import a registry key/value.

  12. 56 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Noted  ·  6 comments  ·  Ideas » Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Bryan Dam commented  · 

    Let's take a step back here: why should we have to do this at all during an upgrade? If the docs say this needs to be done the why should we do it manually? Integrate this into the upgrade process and be done with it.

  13. 68 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    8 comments  ·  Ideas » Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Bryan Dam commented  · 

    FWIW, the product team has talked about it and it's beyond unlikely to happen. Enabling a feature does things in the console, database, ect that there is no undo button for. Which isn't to say it's not possible but very unlikely something engineering effort is going to be dedicated to.

  14. 136 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    5 comments  ·  Ideas » Admin Console  ·  Flag idea as inappropriate…  ·  Admin →
    Bryan Dam supported this idea  · 
  15. 3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Ideas » Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
    Bryan Dam shared this idea  · 
  16. 21 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Ideas » Application Management  ·  Flag idea as inappropriate…  ·  Admin →
    Bryan Dam shared this idea  · 

Feedback and Knowledge Base