Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice - Update: Microsoft will be moving away from UserVoice sites on a product-by-product basis throughout the 2021 calendar year. We will leverage 1st party solutions for customer feedback. Learn more

AdminAdam Meltzer (ConfigMgr Product Team) (Software Engineer, Microsoft Endpoint Configuration Manager)

My feedback

  1. 19 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    4 comments  ·  Ideas » Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment

    Admin note: Updated title for clarity

  2. 4 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Ideas » Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment

    Admin note: updated title for clarity

  3. 1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Ideas » Collections  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment

    WRT:
    Support for a credential manager within Configmgr where you can store certain credentials that the script (powershell remoting) need to run with ? to support a kind of “run as” scenario .

    We do support this today in some capacity. You can use New-PSDrive with -Credential to connect to any ConfigMgr site with alternate credentials.

  4. 10 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Noted  ·  3 comments  ·  Ideas  ·  Flag idea as inappropriate…  ·  Admin →
  5. 1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Ideas » Collections  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment

    You can create a collection to expose Internet-capable clients by using a query similar to this:

    select * from SMS_R_System inner join SMS_G_System_ADVANCED_CLIENT_SSL_CONFIGURATIONS on SMS_G_System_ADVANCED_CLIENT_SSL_CONFIGURATIONS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADVANCED_CLIENT_SSL_CONFIGURATIONS.InternetMPHostName != "" OR SMS_G_System_ADVANCED_CLIENT_SSL_CONFIGURATIONS.ClientAlwaysOnInternet > 0

    There's no query I'm aware of to get the current Internet state of a client (Internet or intranet connected). That's because today this configuration information comes from HINV and DDRs, which are not real-time.

    I'm assuming that you want something more real-time to understand currently Internet vs Internet-capable. Can you expand on what the requirement is for this?

    Thanks!

  6. 24 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    9 comments  ·  Ideas » Tools  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment

    Please take a look at the log viewer that's a part of Support Center. This supports multiple highlight rules as well as saving these rules into a file for future use.

    https://www.microsoft.com/en-us/download/details.aspx?id=42645

    We are actively working on improving Support Center and its log viewing experience.

  7. 9 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    4 comments  ·  Ideas » Troubleshooting & Support  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment

    Does Support Center do what you need? If not can you provide more specific feedback about what features you're looking for that Support Center doesn't have today?

    https://www.microsoft.com/en-us/download/details.aspx?id=42645

  8. 0 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Ideas » Compliance Settings  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment

    I'm not entirely sure what you're asking for here. We do support signed PowerShell scripts and AllSigned as an execution mode for discovery/remediation in applications as well as settings.

    There are a couple of caveats with this that may not be immediately discoverable and I have some tasks in my backlog to improve these things for future releases.

    I've talked about these in depth in my blog posting here: https://blogs.msdn.microsoft.com/ameltzer/2014/09/24/using-signed-powershell-scripts-with-configuration-items-and-applications/

    Does this cover your specific concerns, and if not can you elaborate further on the specific scenario you're trying to accomplish?

  9. 37 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    9 comments  ·  Ideas » PowerShell  ·  Flag idea as inappropriate…  ·  Admin →

    Thank you for your feedback. Folder support is something that is very limited in the cmdlet library today and something that’s in our backlog to improve in a future release. In my opinion, I think the way things should work is if you’re in a collection folder in the cmdlet drive provider, it should just create the collection in the right place.

    I’ve linked this feedback to our internal work item to improve folder support so this doesn’t get lost.

    Thanks!

    An error occurred while saving the comment

    There is limited "folder" support today through the drive provider. Get-Item/Move-Item/Rename-Item should all largely work.

    We do recognize that the drive provider today has numerous caveats and limitations and this is something we plan to improve in a future release.

  10. 10 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    4 comments  ·  Ideas » Setup and Server Infrastructure  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment

    Can you expand on what you are asking for here?

    .NET 4.6 contains all .NET 4 and up functionality.

  11. 13 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Ideas » Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment

    Certificate selection is centrally defined by the site server, so we don't have any way to force selection of a specific certificate which seems like the big thing you're asking for here.

    With that said, we do have a little known tool that's pre-installed with every client called cmhttpsreadiness.exe. The tool both generates a log file (ccm\logs\cmhttpsreadiness.log) as well as sends a state message you can use to build reports. This can be used to aid with migration scenarios to HTTPS to understand in advance which clients won't work and why.

    While I know this isn't exactly what you're hoping for it is something that can help address one of the primary challenges with moving to HTTPS.

  12. 1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Ideas » Role Based Access & Security  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment

    This appears to encompass several feature requests. Could you please split those requests out into separate feedback items so they can be tracked appropriately?

  13. 108 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    5 comments  ·  Ideas » Client Deployment  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment

    While there's no way to select certificate template today, you can restrict based by issuer by selecting one or more root CAs in the administrator console.

  14. 6 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Ideas » Tools  ·  Flag idea as inappropriate…  ·  Admin →
  15. 51 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Noted  ·  2 comments  ·  Ideas » Application Management  ·  Flag idea as inappropriate…  ·  Admin →
  16. 9 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    planned  ·  2 comments  ·  Ideas » PowerShell  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment

    Thanks for the feedback! We now have an item in our backlog to start adding transactional support into select cmdlets and are looking to have this available in a future release.

1 3 Next →

Feedback and Knowledge Base