Microsoft

Microsoft Intune Feedback

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Intune, though we can’t promise to reply to all posts.

Standard Disclaimer – our lawyers made us put this here ;-) Please note that the Microsoft Intune feedback site is moderated and is a voluntary participation-based project. Please do not send any novel or patentable ideas, copyrighted materials, samples or demos which you do not want to grant a license to Microsoft. See the “User Voice Terms of Service” link below for more information.

How can we improve Microsoft Intune

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Add PowerShell support to manage the service

    It would be nice if PowerShell was supported to manage the service.

    882 votes
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      22 comments  ·  Azure Admin Console  ·  Flag idea as inappropriate…  ·  Admin →

      We haven’t forgotten that many of you want PowerShell to manage the service! I’ll update this thread when I have more information on that which I can share. In the meantime, here are a few things related to Graph that may be of interest to you:

      Last November we released the Intune management extension, which lets you Manage PowerShell scripts in Intune for Windows 10 devices (https://docs.microsoft.com/en-us/intune/intune-management-extension)

      Today we announced that Intune APIs in Microsoft Graph are no longer in beta and are now generally available https://cloudblogs.microsoft.com/enterprisemobility/2018/01/31/intune-apis-in-microsoft-graph-now-generally-available/

    • Windows 10 Upgrades (1511) via Intune

      The Windows 10 1511 Upgrade is not available via Intune. We use Intune as our Update Management platform (small business).

      I thought that the Windows update functionality in Intune should be like a WSUS in the Cloud. With peer-Distribution in Windows 10 and in Intune before it should be possible to not overload our Internet line.

      If this should not work by design then please Microsoft state clearly which of your products is designed for which Scenario.

      760 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        57 comments  ·  Intune PC client  ·  Flag idea as inappropriate…  ·  Admin →
      • Push notification of user via sms, email or message on screen

        Abitity to warn a user via a custom notification via sms, email or message on screen.

        740 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          29 comments  ·  Azure Admin Console  ·  Flag idea as inappropriate…  ·  Admin →
        • Extend MDM MSI deployment

          I would like the MDM MSI deployment (to MDM enrolled Win8.1+ clients) to be extended. Currently, only single MSI's are supported, I'd like this to include MSI's with .cab's, MSP files to patch installed MSI apps, and to be able to deploy .exe installers.

          736 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            30 comments  ·  App Management (all platforms)  ·  Flag idea as inappropriate…  ·  Admin →
          • Automatically deploy Intune PC Client for Azure AD joined computers

            Not entirely sure if this belongs here, or in Azure AD, however....

            From reading the documentation, it appears that the for Windows 10 Enterprise PCs, they can be managed automatically upon joining the Azure AD domain as mobile devices only.

            For corporate issued PCs, it would aid SMBs greatly if adding the Intune PC Client can be done automatically upon joining the PC to Azure AD. This would lower IT department's involvement in issuing new devices, so that company administration could just buy (for example) a Surface Pro and hand it to a new employee, along with the Azure AD/Office…

            623 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              23 comments  ·  Intune PC client  ·  Flag idea as inappropriate…  ·  Admin →
            • 580 votes
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                47 comments  ·  Mobile Device Management (general)  ·  Flag idea as inappropriate…  ·  Admin →
              • MFA doesn't work with Apple DEP with Intune

                We have Intune included as part of our licensing with O365. Our company requires that MFA is enabled. This however does not work when using Apples Device Enrollment Program with Intune.

                When a user has MFA enabled, when they are prompted for the username and password it is returned that the credentials are invalid.

                We have tried to use an application password to work around this, however this does not appear to be supported either.

                Ideally, as the enrolled DEP device is a known end point, while having MFA enabled, would it be possible to enable a logon to DEP/Intue…

                436 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  13 comments  ·  iOS-specific  ·  Flag idea as inappropriate…  ·  Admin →
                • Include Azure DRS in DEP Enrollment

                  Microsoft Partner here - One of the main reason's business's look to utilize Apple's DEP Programme is to streamline their enrolment into an MDM server. Using the traditional approach as a business requires end users to create an Apple account for the sole purpose of downloading the MDM enrolment app, in our case Intune and then follow a wizard.
                  Migrating 1000's of iOS devices using the company portal method in this manner is not affective so DEP is a god send to address this issue.
                  Unfortunately, when used with Intune and user affinity the credentials are passed to the MDM…

                  369 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    12 comments  ·  Flag idea as inappropriate…  ·  Admin →
                  • Samsung Knox Mobile Enrollment

                    It would be nice if Microsoft Intune supported enrolling devices with the Samsung Knox Mobile Enrollment.

                    It would be great feature to help enroll Samsung Android devices into Intune Mobile Device Management.

                    367 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      14 comments  ·  Android-specfiic  ·  Flag idea as inappropriate…  ·  Admin →
                    • Conditional access for on premise exchange and Outlook App

                      The below link was updated on the 17th of December. This still states that it is not possible with an on premise Exchange solution “The Microsoft Outlook app for Android and iOS (for Exchange Online only)”.
                      https://technet.microsoft.com/en-gb/library/dn818907.aspx

                      This is directly affecting our implementation of Intune throughout our organisation.

                      The Outlook App is used by many users and this would be blocked if we implement conditional access.

                      The business needs to know if this is going to be corrected in future updates or if we are going to have to look at alternative solutions.

                      Thanks

                      312 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        23 comments  ·  Mobile Device Management (general)  ·  Flag idea as inappropriate…  ·  Admin →
                      • Deploy unique computer certificates using Intune/SCEP/NDES

                        We want to deploy unique device certificates to our Windows 10 devices using Intune/SCEP/NDES. At the moment we can only deploy user certificates.

                        The story behind this idea is as follows:

                        We are using shared Windows 10 devices and a wireless environment that uses certificate authentication. Because of the shared devices and the possibility that the user never logged on to the device yet, we want the wireless profile to be connected before user logon. And that requires a unique computer certificate.

                        312 votes
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          8 comments  ·  Mobile Device Management (general)  ·  Flag idea as inappropriate…  ·  Admin →
                        • inventory of -all- installed software not just the software deployed through Intune or from the Store

                          Today very limited reports exists for MDM, there is no report for software inventory on Mobile devices.

                          309 votes
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            23 comments  ·  Mobile Device Management (general)  ·  Flag idea as inappropriate…  ·  Admin →

                            Hopefully by now you’re seen our Data Warehouse feature that released recently. You can now get this data in console under Mobile Apps → Monitor → Discovered apps.There’s a table exposed in the data warehouse applicationInventories that exposes the same data.

                            We also have a listing of all managed apps and their installation status under Mobile Apps → Monitor → App install status."

                            Does that get you what you need? If not, what’s missing?

                          • Add a policy to prevent device unenrollment from Company portal

                            Companies provide devices to their employees and generally wants to make sure that these devices will always remain managed through Intune. It could be interesting to have a policy that prevent users to unenroll a device identified as a company device from the Intune company portal.

                            289 votes
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              23 comments  ·  Mobile Device Management (general)  ·  Flag idea as inappropriate…  ·  Admin →
                            • Ability to choose/configure Email client (i.e. Outlook) within mail policy

                              A menu that allows you to select the default mail app or the outlook client for the type of mobile device, perhaps once outlook is selected a selection of options appropriate to the application

                              227 votes
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                                29 comments  ·  Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
                              • Make "Managed Browser" a "Conditional Access" rule for accessing Azure AD App Proxy

                                Many companies would like to make internal websites available to personal devices. Microsoft Intune has a managed browser app. I would be great if it could be set as an "Conditional Access" rule for some of the WebApps published using the Azure AD App Proxy.

                                + a "Conditional Access" that could define whether to allow "Personale (BYOD)", "Corporate", (Both - Personale + Corp.) or "Unknown"
                                Thanks to Adrian Hyde for the idea. Let's get the vote up

                                This post is also related to Azure AD App Proxy post:
                                http://feedback.azure.com/forums/169401-azure-active-directory/suggestions/9575541-make-managed-browser-a-conditional-access-rule

                                225 votes
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                  9 comments  ·  Managed Browser  ·  Flag idea as inappropriate…  ·  Admin →
                                • Support for deploying App-V packages

                                  Right now people have to use the MSI packages generated by the App-V sequencer, rather than having native handling for the .AppV package format as SCCM does. This means that people have to resort to powershell scripting, or squeezing scripts into MST transforms in order to use App-V features such as custom configuration files or connection groups.

                                  Also the MSI packages are very unreliable since they were mainly created for test scenarios rather than live deployments - for example they fail to uninstall when an application is in use, and you have to remove the previous version manually before installing…

                                  218 votes
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    noted  ·  5 comments  ·  App Management (all platforms)  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Deploy printers

                                    Give us the option to deploy printers with Intune

                                    215 votes
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                      6 comments  ·  Mobile Device Management (general)  ·  Flag idea as inappropriate…  ·  Admin →
                                    • Configure lock screen/wallpaper on iOS devices at enrollment (as per Configurator)

                                      In Apple Configurator, part of the enrollment profile is the ability to set options for the lock screen such as what information is displayed, and set a lockscreen wallpaper. In a school environment, being able to display the device name and brand the lock screen with a custom background would be increadibly useful, and this currently is not able to be done via InTune/ConfigMgr.

                                      Add this functionality please.

                                      211 votes
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                        noted  ·  15 comments  ·  iOS-specific  ·  Flag idea as inappropriate…  ·  Admin →
                                      • Folder redirection to Onedrive for Business

                                        I would like to have a Intune Policy to redirect, for example, the Documents folder of an Azure AD Joined device to Onedrive for Business of the user.

                                        211 votes
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                          11 comments  ·  Mobile Device Management (general)  ·  Flag idea as inappropriate…  ·  Admin →
                                        • sync contacts to local OS native apps/phone

                                          The Team of Intune and Outlook did a great job but we believe that there are still some limitations to overcome:
                                          - We need the capability to sync determined objects to local OS native apps/phone without limitations, like Contacts through Outlook for iOS. Outlook for iOS, for example, is a good application that provides mail and calendar features. However, since the contacts are not synced to the native OS phone, calls/SMS are not recognized.
                                          - We know we can use ActiveSync for contacts, however, in case of MAM, we wouldn´t allow ActiveSync in our mobile devices.

                                          211 votes
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                            noted  ·  6 comments  ·  iOS-specific  ·  Flag idea as inappropriate…  ·  Admin →
                                          ← Previous 1 3 4 5 63 64
                                          • Don't see your idea?

                                          Feedback and Knowledge Base