Microsoft

Microsoft Endpoint Manager Intune Feedback

Suggestion box powered by UserVoice

Ideas

What features would you like to see?

All of the feedback that you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Microsoft Endpoint Manager Intune, though we can’t promise to reply to all posts.

Standard Disclaimer – our lawyers made us put this here ;-) We have partnered with UserVoice, a third-party service, so you can give us feedback. Please note that the Intune feedback site is moderated and is a voluntary participation-based project. Please send only feature suggestions and ideas to improve Intune. Do not send any novel or patentable ideas, copyrighted materials, samples or demos. Your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy, including the license terms.


  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Support for configuring Native VPN Client on iOS and Android

    Need support to configure native VPN on devices and not only pre-installed.
    I am able to configure with Apple Configurator and then load a XML file and deploy it, but it would be alot easier having this natively built-in.

    13 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Microsoft Intune
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
  2. xml-configuration-free wireless configuration profile editor.

    in order to push a wifi confiration with WPA with PSK (ios or android), one need to generate an xml and do custom configuration with OMA-URL strings and others.

    all other MDM, provide simple to configure screen to set up wireless network connectivity profiles. Intune should be the same.

    I want to select my wifi type and be able to put the PSK information without having to dig into technet for OMA-URL or having to generate xml files.

    12 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Microsoft Intune
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    3 comments  ·  Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
  3. Allow the mobile Outlook app to prompt user to save Contacts to the device

    Right now when we turn on Conditional Access for Exchange, users are then forced to delete their native exchange account on the phone, thus removing all contacts on the device. When users then go setup the Outlook app on the device, contacts are not automatically saved and the user is without contacts. It then takes the user an EXTRA step in the settings to find the "Save Contacts" toggle. I'd prefer for a better user experience, a prompt when the account is being setup to ask if they want contacts saved to the device, or give us the Intune admins,…

    12 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Microsoft Intune
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
  4. Re-Deploy Certificate individually to user or device

    Actually Intune doesn´t allow to force re-deployment of a certificate to a user or device once it has been already deployed during Enrollment Process. The only way to force a new certificate deployment requires or re-enroll the Device, change the Certificate Profile, in order to notify to Intune the need to deploy the new Certifiate Template or create a new Certificate Profile.

    All the solutions previously mentioned have implications, more than the assignment of a simple certificate, such as re-enrollment of the device or change Profile template to all the users asigned to the profile, not only the device/user that…

    12 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Microsoft Intune
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
  5. wifi enterprise android

    Add support for Android dedicated devices Enterprise Wi-Fi configurations using PKCS certificates (machine or user based). Currently the only options for Wi-Fi on dedicated android devices is using WPA Pre-shared keys, this is not very enterprise friendy. Need to support EAP-TLS with PKCS certificates. Works fine on iOS, just not Android.

    12 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Microsoft Intune
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
  6. Allow the WIFI profile to disconnet the current connected wireless network and connect to company wireless network when it's in range

    It would be great that we support the feature where the user’s device will be disconnected from the WIFI it’s connected and set it to forget and then connect to the desired WIFI automatically when it's in range as per the WIFI profile.

    This feature is very important for schools where the low grade students don't know what to do when they are in class and are requested to disconnect from the public WIFI and connect to the WIFI of the school.

    11 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Microsoft Intune
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
  7. Support configuring "MAC randomization"-attribute for Android 10+

    The Android 10+ default setting for new WiFi-neworks seems to be "MAC-randomization = enabled" to prevent tracking across public WiFis.
    This setting should be changeable for Intune-configured networks to keep the network functional with MAC whitelisting-rules in your WiFi-configuration.

    11 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Microsoft Intune
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
  8. Always on VPN - Add the ability to configure interface metric in profile xml

    When deploying a VPN connection using Intune, there is no ability for us to configure the interface metric either in the device configuration profile GUI or in a profile xml. The interface metric is set to "automatic".

    Please add the ability for us to configure the interface metric in the profile xml. In the rasphone.pbk file on the client Windows 10 device, this is the IpInterfaceMetric parameter. The default setting is 0, which is automatic.

    In many cases we need to change this to a specific value such as 1 in order to solve DNS registration and other issues. It…

    11 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Microsoft Intune
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
  9. VPN ID field is mandatory, why?

    When creating a VPN profile for IOS, there is a field called "VPN Identifier (provided by VPN vendor)".


    1. why is this field MANDATORY (according to https://tools.ietf.org/html/rfc2685 as far as I understand, it should not be) ?

    2. VPN providers I contacted did not know what it was and they did NOT provide the ID. (ex. Microsoft Intune Hotline, Synology Helpdesk)

    3. Customer data following it isn't clear either...

    Would it be very difficult and highly unprofitable to put a little more information next to each field in the forms (generally speaking)?

    Thanks.

    10 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Microsoft Intune
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →

    Hi, Thomas, I heard back from the PM who owns that and he said “VPN identifier is what iOS uses to call the appropriate app on the device to initiate the VPN connection. If VPN identifier is not provided, VPN connection is bound to fail because iOS won’t know which VPN app to open.”
    If you want to cite a specific section the RFC I can take that back to him.
    Cathy

  10. wifi profile Remember my credentials for this connection

    Can you add Remember my credentials for this connection each time I'm logged on. When I deploy Windows Wi-Fi profile I have to enter the user name and password every time I login. I use Wi-Fi enterprise type.

    10 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Microsoft Intune
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
  11. Need a way to add device identification attributes like UDID, IMEI or MEID in the cert auth profile

    Currently, there is no device identifier field can be added in the Subject alternative name for PKCS or SCEP certificate profile through which the authentication sever like VPN can reliably obtain the Device identification and query back MDM for device status.

    This feature is available with other MDM vendors like Air watch and Mobile iron. Adding this will help for 3rd party VPN integrations.

    10 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Microsoft Intune
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
  12. Ability to remove cached user PKCS certificate stored in Intune

    We're using an Intune configuration profile to obtain a PKCS certificate for the user from an internal PKI as per the documentation at https://docs.microsoft.com/en-us/intune/certficates-pfx-configure.

    We have a problem where if the UPN on the user object is changed, Intune continues to push down the previously issued certificate with the old UPN. If the old certificate is deleted from the store via the Certificates MMC, Intune simply pushes down the old certificate again at the next sync.

    As far we can see, there is no way to force Intune to forget the previously issued certificate. The only way to do…

    9 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Microsoft Intune
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
  13. Containerised email

    Like good and air-watch. Non starter for me otherwise.

    8 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Microsoft Intune
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
  14. email profile for android device owner devices

    we need the option to deploy email profiles to android devices enrolled as "device owner" not only for "work profile" devices

    8 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Microsoft Intune
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
  15. use Cellular instead of WIFI in OMA-URI settings

    currently for cellular data setting, only "Data Roam" is available, we would like other settings like "use cellular instead of WIFI" in OMA-URI settings as well.

    7 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Microsoft Intune
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
  16. Automated distribution of personal certificates for signing emails in Outlook app with SMIME iOS

    Currently Outlook app does not allow the use of automatically deployed certificates with MEM using the Intune certificate connector. The user certificate must be exported, mailed, and manually installed before it can be used, after setting up prerequisites in Exchange Online. This methodology is not very scalable as is the option currently offered, which is the import of PKCS certificates into Intune. The desired option would be the possibility of being able to use the certificates already deployed using the Intune certificate connector infrastructure, as can be done currently with the native iOS app, or a similar option from Exchange…

    7 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Microsoft Intune
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
  17. Windows 10 Wi-Fi profile, missing settings

    Recently there came an option to add Wi-Fi network onto Windows 10 devices directly in the portal without XML., wonderful.
    I am missing some options, that is possible to set with the XML file that is not possible from the portal, randommac for example.

    &lt;MacRandomization xmlns=&quot;<a rel="nofollow noreferrer" href="http://www.microsoft.com/networking/WLAN/profile/v3&quot;">http://www.microsoft.com/networking/WLAN/profile/v3&quot;</a>&gt;
    
    &lt;enableRandomization&gt;false&lt;/enableRandomization&gt;
    &lt;randomizationSeed&gt;2437303395&lt;/randomizationSeed&gt;
    &lt;/MacRandomization&gt;

    7 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Microsoft Intune
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
  18. Select Intune Certificate Connector in SCEP Configuration Profile

    For environments where separate user/device/usage certificate templates are required, the ability to select a specific or a group of Intune Certificate Connectors in the SCEP Configuration Profile.

    7 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Microsoft Intune
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
  19. Wifi profiles management for WP 8.1

    Wifi profile management for WP 8.1 is not on the same level as for Android and iOS. Manage through the GUI is what customers expect for first class members.

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Microsoft Intune
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
  20. SECP allow Certificate Key Size of 4096

    Allow to add 4K Key Size of Certificate, for SCEP Certificate Profile for iOS and Android, also for the Root Certificate for all OS's

    Thank You
    Mirko Colemberg [MVP]

    6 votes
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Microsoft Intune
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base