Microsoft

Microsoft Endpoint Configuration Manager Feedback

Suggestion box powered by UserVoice

Cristopher

My feedback

  1. 896 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Noted  ·  15 comments  ·  Ideas » Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Cristopher commented  · 

    After many years, I'm seriously considering taking my 3 votes off this item as it's clearly never going to happen. I'd rather contribute my votes to something that has a chance of seeing the light of day.

    OSD is more and more becoming of a legacy provisioning tool while Autopilot is being pushed harder and harder by MS.

    In spite of great contributions from the community, we never got OSD to work in our 802.1x environment and even made some backwards progress when trying to work more closely with our network security team.

    About a year ago we threw in the towel and stripped all 802.1x customizations from our OSD scenario. In spite of the incredible inconvenience it causes, all of our PCs get imaged or re-imaged on a dedicated network segment with no 802.1x.

    An error occurred while saving the comment
    Cristopher commented  · 

    For those of you following this, here's a great blog series to assist with 802.1x deployments covering various scenarios.
    http://www.asquaredozen.com/2018/07/29/configuring-802-1x-authentication-for-windows-deployment/

    An error occurred while saving the comment
    Cristopher commented  · 

    Fingers crossed that 2017 will bring some support to WinPE and SCCM task sequences so that we can do some OSD on a network that uses 802.1x security.

    An error occurred while saving the comment
    Cristopher commented  · 

    We're headed backwards here. The latest WinPE 10 (version 1607) broke the dot3svc service. https://social.technet.microsoft.com/Forums/en-US/win10itprosetup/thread/93f32a23-7558-4742-91ab-ba0e7801ed0e/#3853df61-8dcf-4560-8b01-27da4fcca235 Those of you who are in an 802.1x environment, help me make some noise on this please.

    An error occurred while saving the comment
    Cristopher commented  · 

    We have 802.1x on our network and in order to achieve a successful operating system deployment we have had to implement hacks upon hacks into our process. I've gone through 2 dozen iterations of our boot image trying to get the script "just right" and it is still not 100% functional. Because of this, most of our deployments are still done on an isolated network segment where 802.1x is disabled.

    Cristopher supported this idea  · 
  2. 23 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Ideas » Co-Management  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Cristopher commented  · 

    This is a good idea but I'd suggest making the notification 30 days instead of 7 just in case someone isn't available within a short time to assist the ConfigMgr admin with certs.

    It would also be a good idea to add this to Management Insights.

  3. 71 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Noted  ·  2 comments  ·  Ideas » Remote Control  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Cristopher commented  · 

    Number 2 on this list is something we require. Different support techs need different levels of remote access, with only a few being granted access without user approval. Right now, you're limited to the winning client setting which makes this limiting.

  4. 3 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Ideas » Compliance Settings  ·  Flag idea as inappropriate…  ·  Admin →
    Cristopher shared this idea  · 
  5. 413 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    17 comments  ·  Ideas » Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Cristopher commented  · 

    We may look into this as a possible workaround for letting users know something is happening if a TS reboots.
    https://home.memftw.com/per-user-login-message/

    Cristopher supported this idea  · 
    An error occurred while saving the comment
    Cristopher commented  · 

    There are several 3rd party workarounds for notifying user of progress during an in-place OS upgrade but a supported native solution would be best.

  6. 1,910 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    100 comments  ·  Ideas » Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
    Cristopher supported this idea  · 
  7. 186 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    12 comments  ·  Ideas » Application Management  ·  Flag idea as inappropriate…  ·  Admin →
    Cristopher supported this idea  · 
    An error occurred while saving the comment
    Cristopher commented  · 

    If I had any more votes I'd gladly use them on this. We're constantly getting burned by this. I'm willing to be the majority of SCCM installs are limited to a single time zone. Let us default everything to client local time, please!

  8. 5 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Ideas » Co-Management  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Cristopher commented  · 

    You can submit changes to the docs via GitHub. Also, there are lots of bloggers who have multi-part posts on how to set up co-management. Look up scconfigmgr.com and anoopcnair.com guides.

  9. 7 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Ideas » Troubleshooting & Support  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Cristopher commented  · 

    You can also compress the IIS logs folder to greatly reduce the size on disk.

    An error occurred while saving the comment
    Cristopher commented  · 

    We use a scheduled task to clean up IIS logs on a monthly basis. A native function would be nice.

  10. 28 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Ideas » Admin Console  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Cristopher commented  · 

    IP address is visible in the device properties. Just double-click and filter by "address" to see it. You could also just ping the device's host name.

  11. 2 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Ideas » Admin Console  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
  12. 5 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    2 comments  ·  Ideas » Application Management  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
  13. 7 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Ideas » Application Management  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
  14. 19 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Ideas » Application Management  ·  Flag idea as inappropriate…  ·  Admin →
    Cristopher shared this idea  · 
  15. 218 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Noted  ·  9 comments  ·  Ideas » Application Management  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Cristopher commented  · 

    More and more applications would greatly benefit from this. Last year I packaged Adobe Acrobat Pro DC and had to set it to run when no user is logged in because it simply killed explorer.exe. It would be nice if I could prevent the user from simply logging back in before the installation completes.

    An error occurred while saving the comment
    Cristopher commented  · 

    Our previous deployment solution, CA ITCM, had this feature. It was called logon shield. It was clunky, to say the least. If anything went wonky during an application install nobody could log back on to the PC indefinitely. Someone would have to be physically present to power cycle the machine.
    As much as I'd love to see this feature integrated into Configmgr, it has to be very well though-out. Have it time out when the deployment times out.

  16. 20 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Ideas » Operating System Deployment  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Cristopher commented  · 

    Packages can have a scheduled content update set up in the Configmgr GUI. Applications can have content updated for their deployment types via powershell. We use Task Scheduler to schedule these scripts over night so that they do not interfere w/ running Task Sequences.

  17. 17 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    9 comments  ·  Ideas » Admin Console  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Cristopher commented  · 

    The automatic creation of an Application would be nice. We use the app model to deploy/upgrade the Admin Console after upgrades. However something similar to the automatic client upgrade would be extremely helpful too. We frequently string the Admin Console application together with a package for a hotfix inside a task sequence because the hotfix packages are auto-generated when the KB is installed on the site server.

  18. 37 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    4 comments  ·  Ideas » Software Updates  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Cristopher commented  · 

    I would almost say take this a step further and request the ability to apply a separate maintenance window to PCs if nobody is logged on.

  19. 10 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Noted  ·  3 comments  ·  Ideas  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Cristopher commented  · 

    I wanted to vote on this but I already ran out. :-\

  20. 0 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Ideas » Asset Management  ·  Flag idea as inappropriate…  ·  Admin →
    An error occurred while saving the comment
    Cristopher commented  · 

    Copy/paste keyboard shortcut doesn't work but right-click paste does work for MAC address entry.

← Previous 1

Feedback and Knowledge Base