What's new in version 1902 of Configuration Manager current branch
Applies to: System Center Configuration Manager (Current Branch)
Update 1902 for Configuration Manager current branch is available as an in-console update. Apply this update on sites that run version 1802, 1806, or 1810. When installing a new site, it's also available as a baseline version. This article summarizes the changes and new features in Configuration Manager, version 1902.
To take full advantage of new Configuration Manager features, after you update the site, also update clients to the latest version. While new functionality appears in the Configuration Manager console when you update the site and console, the complete scenario isn't functional until the client version is also the latest.
This article currently lists all significant features in this version. However, not all sections yet link to updated content with further information on the new features. Keep checking this page regularly for updates. Changes are noted with the [Updated] tag. This note will be removed when the content is finalized.
To get notified when this page is updated, copy and paste the following URL into your RSS feed reader:
Deprecated features and operating systems
Learn about support changes before they're implemented in removed and deprecated items.
- The implementation for sharing content from Azure has changed. Use a content-enabled cloud management gateway by enabling the option to Allow CMG to function as a cloud distribution point and serve content from Azure storage. You won't be able to create a traditional cloud distribution point in the future.
Version 1902 drops support for the following products:
- Linux and UNIX as a client. Deprecation was announced with version 1802. Consider Microsoft Azure Management for managing Linux servers. Azure solutions have extensive Linux support that in most cases exceed Configuration Manager functionality, including end-to-end patch management for Linux.
Client health dashboard
You deploy software updates and other apps to help secure your environment, but these deployments only reach healthy clients. Unhealthy Configuration Manager clients adversely effect overall compliance. Determining client health can be challenging depending upon the denominator: how many total devices should be in your scope of management? For example, if you discover all systems from Active Directory, even if some of those records are for retired machines, this process increases your denominator.
You can now view a dashboard with information about the health of Configuration Manager clients in your environment. View your client health, scenario health, and common errors. Filter the view by several attributes to see any potential issues by OS and client versions.
In the Configuration Manager console, go to the Monitoring workspace. Expand Client status, and select the Client health dashboard node.
New management insight rules
The management insights feature has the following new rules:
Multiple rules with recommendations on managing collections. Use these insights to simplify management and improve performance. Review these new rules in the Collections group.
Update clients to a supported Windows 10 version rule in the Simplified Management group. This rule reports on clients that are running a version of Windows 10 that's no longer supported. It also includes clients with a Windows 10 version that's near end of service (three months).
Improvement to enhanced HTTP
You can now enable enhanced HTTP per primary site or for the central administration site.
On the properties of the central administration site, select the option to Use Configuration Manager-generated certificates for HTTP site systems. This setting only applies to site system roles in the central administration site. It isn't a global setting for the hierarchy.
Improvement to setup prerequisites
When you install or update to version 1902, Configuration Manager setup now includes the following prerequisite check:
- Pending system restart on the remote SQL Server: This prerequisite check is similar to the Pending system restart rule, but it checks a remote SQL Server. For more information, see List of prerequisite checks.
Stop cloud service when it exceeds threshold
Configuration Manager can now stop a cloud management gateway (CMG) service when the total data transfer goes over your limit. The CMG has always had alerts to trigger notifications when the usage reached warning or critical levels. To help reduce any unexpected Azure costs because of a spike in usage, this new option turns off the cloud service.
Set up outbound traffic alerts on the CMG, and then enable the option to Stop this service when it exceeds the critical threshold.
Use Azure Resource Manager for cloud services
Starting in version 1810, the classic service deployment in Azure was deprecated for use in Configuration Manager. That version is the last to support creation of these Azure deployments.
Existing deployments continue to work. Starting in this current branch version, Azure Resource Manager is the only deployment mechanism for new instances of the cloud management gateway and cloud distribution point.
Add cloud management gateway to boundary groups
You can now associate a cloud management gateway (CMG) with a boundary group. This configuration allows clients to default or fallback to the CMG for client communication according to boundary group relationships. This behavior is especially useful in branch office and VPN scenarios. You can direct client traffic away from expensive and slow WAN links to instead use faster internet links to Microsoft Azure.
Run CMPivot from the central administration site
[Updated] Configuration Manager now supports running CMPivot from the central administration site in a hierarchy. The primary site still handles the communication to the client. When running CMPivot from the central administration site, it communicates with the primary site over the high-speed message subscription channel. This communication doesn't rely upon standard SQL replication between sites.
For more information, see CMPivot for real-time data.
Edit or copy PowerShell scripts
You can now Edit or Copy an existing PowerShell script used with the Run Scripts feature. Instead of recreating a script that you need to change, now directly edit it. Both actions use the same wizard experience as when you create a new script. When you edit or copy a script, Configuration Manager doesn't persist the approval state.
Distribution point maintenance mode
You can now set a distribution point in maintenance mode. Enable maintenance mode when you're installing software updates, or making hardware changes to the server.
While the distribution point is in maintenance mode, it has the following behaviors:
The site doesn't distribute any content to it.
Management points don't return the location of this distribution point to clients.
When you update the site, a distribution point in maintenance mode still updates.
The distribution point properties are read-only. For example, you can't change the certificate or add boundary groups.
Any scheduled task, like content validation, still runs on the same schedule.
Client provisioning mode timeout
The task sequence sets a timestamp when it puts the client in provisioning mode. A client in provisioning mode checks every 60 minutes the duration of time since the timestamp. If it's been in provisioning mode for more than 48 hours, the client automatically exits provisioning mode and restarts its process.
View first screen only during remote control
[Updated] When connecting to a client with two or more monitors, it can be difficult to view them all in the Configuration Manager remote control viewer. A remote tools operator can now choose between seeing All screens or the First screen only.
For more information, see How to remotely administer a Windows client computer.
Specify a custom port for peer wakeup
[Updated] You can now specify a custom port number for wake-up proxy. In client settings, in the Power Management group, configure the setting for Wake On LAN port number (UDP).
For more information, see How to configure Wake on LAN.
Improvements to application approvals via email
This version has improvements to the feature to receive email notifications for application requests. Users could always add a comment to the request from Software Center. This comment shows on the application request in the Configuration Manager console. Now that comment also shows in the email. Including this comment in the email helps the approvers make a better decision to approve or deny the request.
Improvements to Package Conversion Manager
This version includes the following improvements to Package Conversion Manager:
- Scheduled package analysis runs every 7 days by default
- PowerShell cmdlets for analyzing and converting packages
- General bug fixes and improvements
Progress status during in-place upgrade task sequence
You now see a more detailed progress bar during a Windows 10 in-place upgrade task sequence. This bar shows the progress of Windows setup, which is otherwise silent during the task sequence. Users now have some visibility into the underlying progress. It helps with concerns that the upgrade process is suspended because of a lack of progress indication.
This feature works with any supported version of Windows 10, and only with the in-place upgrade task sequence.
Improvements to task sequence media creation
This version includes several improvements to help you better create and manage task sequence media.
Specify temporary storage
When you create task sequence media, now customize the location that the site uses for temporary storage of data. This process can require much temporary drive space. This change gives you greater flexibility to choose where to store these temporary files.
In the Create Task Sequence Media Wizard, specify a location for the Staging folder. By default this location is similar to the following path:
Add a label to the media
You can now add a label to task sequence media. This label helps you better identify the media after you create it. In the Create Task Sequence Media Wizard, specify a Media label.
Import a single index of an OS image
When importing a Windows image (WIM) file to Configuration Manager, you can now specify to automatically import a single index rather than all image indexes in the file. This option provides the following benefits:
- Smaller image file
- Faster offline servicing
- Optimize image servicing, for a smaller image file after offline servicing
When you import an OS image, select the option to Extract a specific image index from the specified WIM file. Then select the image index from the list.
Optimized image servicing
When you apply software updates to an OS image, there's a new option to optimize the output by removing any superseded updates. The optimization to offline servicing only applies to images with a single index.
When you create a schedule to update an OS image, select the option to Remove superseded updates after the image is updated.
Improvements to Run PowerShell Script task sequence step
The Run PowerShell Script task sequence step now includes the following improvements:
You can now directly enter Windows PowerShell code in this step. This change lets you run PowerShell commands during a task sequence without first creating and distributing a package with the script.
When you choose the Enter a PowerShell script option, select Edit Script. The new PowerShell script window provides the following actions:
Edit the script directly
Open an existing script from file
Browse to an existing approved script in Configuration Manager
Save the script output to a custom task sequence variable
To include the script parameters in the task sequence log, set the task sequence variable OSDLogPowerShellParameters to TRUE. By default, the parameters aren't in the log.
Other improvements that provide similar functionality as the Run Command Line step. For example, specify alternate user credentials or specify a time-out.
To take advantage of this new Configuration Manager feature, after you update the site, also update clients to the latest version. While new functionality appears in the Configuration Manager console when you update the site and console, the complete scenario isn't functional until the client version is also the latest.
Other improvements to OS deployment
This version includes the following improvements to OS deployment:
There's a new View default action on task sequences.
The task sequence error dialog window now displays more information. It shows the name of the task sequence step that failed.
When you set the OSDDoNotLogCommand task sequence variable to true, now it also hides the command line from the Run Command Line step in the log file. It previously only masked the program name from the Install Package step in smsts.log.
When you enable a PXE responder on a distribution point without Windows Deployment Service, it can now be on the same server as the DHCP service.
Replace toast notifications with dialog window
Sometimes users don't see the Windows toast notification about a restart or required deployment. Then they don't see the experience to snooze the reminder. This behavior can lead to a poor user experience when the client reaches a deadline.
Now when deployments need a restart or software changes are required, you have the option of using a more intrusive dialog window.
Software changes are required
On the User Experience page of the Deploy Software Wizard, select the user notification option to Display in Software Center and show all notifications. Then select the following option: When software changes are required, show a dialog window to the user instead of a toast notification.
In client settings, In the Computer Restart group, enable the following option: When a deployment requires a restart, show a dialog window to the user instead of a toast notification.
Configure user device affinity in Software Center
With Software Center infrastructure improvements starting in version 1806, the application catalog site server roles are no longer required for most scenarios. Some customers still relied upon the application catalog to allow users to set their primary device for user device affinity.
Now users can set their primary device in Software Center. This action makes them a primary user of the device in Configuration Manager.
Configure default views in Software Center
This version of Configuration Manager further iterates on how you can customize Software Center:
Set the default layout of applications, either as tiles or a list
- If a user changes this configuration, Software Center persists the user's preference in the future
Configure the default application filter, either all or only required apps
- Software Center always uses your default setting. Users can change this filter, but Software Center doesn't persist their preference.
Specify these settings in the Software Center group of client settings.
Specify priority for feature updates in Windows 10 servicing
[Updated] Adjust the priority with which clients install a feature update through Windows 10 servicing. By default, clients now install feature updates with higher processing priority.
Use client settings to configure this option. In the Software Updates group, configure the following setting: Specify thread priority for feature updates.
For more information, see About client settings.
Redirect Windows known folders to OneDrive
[Updated] Use Configuration Manager to move Windows known folders to OneDrive for Business. These folders include Desktop, Documents, and Pictures. To simplify your Windows 10 upgrades, deploy these settings to Windows 7 clients before deploying a task sequence.
For more information on this feature of OneDrive for Business, see Redirect and move Windows known folders to OneDrive.
First, find your Office 365 tenant ID. Then deploy the OneDrive sync client version 18.111.0603.0004 or later. For more information, see Deploy OneDrive apps by using System Center Configuration Manager.
To create and deploy a OneDrive for Business profile, in the Configuration Manager console, go to the Assets and Compliance workspace. Expand Compliance Settings, and select the OneDrive for Business Profiles node.
For more information, see the Redirect Windows known folders to OneDrive section in the OneDrive for Business Profiles article.
Integration for Office 365 ProPlus readiness
[Updated] Use Configuration Manager to identify devices with high confidence that are ready to upgrade to Office 365 ProPlus. The integration provides insights into any potential compatibility issues with Office add-ins and macros used in your environment. Then use Configuration Manager to deploy Office to ready devices.
The existing Office 365 client management dashboard now includes a new tile, Office 365 ProPlus Upgrade Readiness.
For more information, see Office 365 client management dashboard
Additional languages for Office 365 updates
Configuration Manager now supports all supported languages for Office 365 client updates. The update workflow now separates the 38 languages for Windows Update from the numerous languages for Office 365 Client Update.
For more information, see Manage Office 365 updates
Office products on lifecycle dashboard
The product lifecycle dashboard now includes information for installed versions of Office 2003 through Office 2016. Data shows up after the site runs the lifecycle summarization task, which is every 24 hours.
Dedicated monitoring for phased deployments
[Updated] Phased deployments now have their own dedicated monitoring node. This node makes it easier to identify phased deployments that you created and then navigate to the phased deployment monitoring view. In the Configuration Manager console, go to the Monitoring workspace, and select the Phased Deployments node. It shows the list of phased deployments.
For more information, see Phased deployment monitoring view.
Improvement to phased deployment success criteria
[Updated] Specify additional criteria for the success of a phase in a phased deployment. Instead of only a percentage, this criteria can now also be the number of devices successfully deployed. This option is useful when the size of the collection is variable, and you have a specific number of devices to show success before moving to the next phase.
Create a phased deployment for a task sequence, software update, or application. Then on the Settings page of the wizard, select the following option as the criteria for success of the first phase: Number of devices successfully deployed.
For more information, see Create phased deployments.
Configuration Manager console
Improvements to Configuration Manager console
Based on customer feedback at the Midwest Management Summit (MMS) Desert Edition 2018, this version includes the following improvements to the Configuration Manager console:
- Maximize the browse registry window for application detection methods
- Go to the collection from an application deployment
- Remove content from monitoring status
- Views sort by integer values in the Deployments node of the Monitoring workspace
- Move the warning for a large number of results
Configuration Manager console notifications
To keep you better informed so that you can take the appropriate action, the Configuration Manager console now notifies you for the following events:
- When an update is available for Configuration Manager itself
- When lifecycle and maintenance events occur in the environment
This notification is a bar at the top of the console window below the ribbon. It replaces the previous experience when Configuration Manager updates are available. These in-console notifications still display critical information, but don't interfere with your work in the console. You can't dismiss critical notifications. The console displays all notifications in a new notification area of the title bar.
Confirmation of console feedback
[Updated] When you send feedback in the Configuration Manager console, it now shows a confirmation message. This message includes a Feedback ID, which you can give to Microsoft as a tracking identifier.
For more information, see Product feedback.
View recently connected consoles
[Updated] You can now view the most recent connections for the Configuration Manager console. The view includes active connections and those consoles that recently connected. In the Configuration Manager console, go to the Administration workspace, expand Security, and select the Console Connections node.
For more information, see Using the Configuration Manager console.
In-console documentation dashboard
There's a new Documentation node in the new Community workspace. This node includes up-to-date information about Configuration Manager documentation and support articles.
Search device views using MAC address
You can now search for a MAC address in a device view of the Configuration Manager console. This property is useful for OS deployment administrators while troubleshooting PXE-based deployments. When you view a list of devices, add the MAC Address column to the view. Use the search field to add the MAC Address search criteria.
Use .NET 4.7 for improved console accessibility
To improve the accessibility features of the Configuration Manager console, update .NET to version 4.7 or later on the computer running the console.
For more information, see Accessibility features in Configuration Manager.
Changes to console setup process
[Updated] There are new components required when installing the Configuration Manager console. If you create a package for installing the console on other computers, make sure the package includes the following files:
When you install or update a site server, it copies these installation files and supported language packs for the site to the Tools\ConsoleSetup subfolder. For more information, see Install the Configuration Manager console.
Aside from new features, this release also includes additional changes such as bug fixes. For more information, see Summary of changes in Configuration Manager current branch, version 1902.
For more information on changes to the Windows PowerShell cmdlets for Configuration Manager, see PowerShell version 1902 release notes.
To install a new site, use a baseline version of Configuration Manager.
Learn more about:
For known, significant issues, see the Release notes.
After you update a site, also review the Post-update checklist.
Send feedback about: