A. Will we be getting DFCI's for non-surface devices coming soon? Preferably vendor specific to their security/configuration sets (by model as it can differ) so that we can natively update BIOS/settings etc. in Endpoint Manager.

B. Will there be more granular control over third party driver updates from vendors already in WU/WUfB repositories so that we can deploy device drivers to update rings for newer drivers. That way we have control over timing and reach of the newer drivers and have confidence in the drivers working in our environment.

p.s. thanks Heather for editing my last post, found the full text editor now.

1. When will we start to see Endpoint Manager feature parity with MECM for CMPivot / Configuration Baselines and other MECM features? Proactive remediations don't provide proper compliance reporting even if the PS can be used to check/configure what is required. Other Endpoint Manager data can also be out of date and would help having EMPivot.
2. What is the 'way forward' with the difference between Settings Catalog / Administrative Templates in Endpoint Manager and GPO ADMX's. i.e. new Win10/11 Feature Update configurations/settings available in ADMX's that aren't in either the SC/AT/OMA-URI of Endpoint Manager (can provide previous case offline).
3. Can you advise what level of remediation Microsoft can take on our behalf for Autopatch and what wouldn't be included in the 'remediations'? "Whenever issues arise with any Autopatch update, the remediation gets incorporated and applied to future deployments," https://techcommunity.microsoft.com/t5/windows-it-pro-blog/get-current-and-stay-current-with-windows-autopatch/ba-p/3271839

(Numbered/formatted for easy reference by your friendly neighborhood Community Manager.)

1. Will the Company Portal ever reflect the current status of an application on a retry? Currently it just says "Failed to install" and you have to guess if it's pending download, downloading, installing, et cetera.
2. In the Company Portal, if you reinstall an app it will not actually run the installer again if the detection criteria is met. Are there any plans to make this function run the installer again regardless of the detection criteria?
3. Any plans for quickly cloning configuration profiles and configuration profile assignments?
4. Any plans for changing assignments to apps, policies, profiles, and security templates in bulk?
5. Any plans to support Windows 11 store apps as a deployment type? Are there any plans to be able to force application updates on applications that are only "Available"? It's a challenge to have optional applications that need to be upgraded but no built-in way of targeting devices where that app was installed.
6. Any plans for custom reporting using scripts? We can run scripts right now but it would be nice if there was a way to view the output of the script on a machine-by-machine basis rather than having to dump the output in a storage account. This is useful when you need to poll your fleet for very specific information.

(Numbered/formatted for easy reference by your friendly neighborhood Community Manager.)

We're looking forward to talking with you on April 27th! Have a question for our panel? Post them - early and/or often - here in the Comments!