For dell devices, you can create a bios configurations policy For more information, go to use bios configuration profiles on windows devices in microsoft intune The device manufacturer must have dfci added to their uefi firmware in the manufacturing process, or as a firmware update you install. Intune is a mobile device management service that is part of microsoft's enterprise mobility + security offering Manage dell bios+drivers in intune natively using dell command update In this blog, i will demonstrate how to apply any bios configuration settings to dell devices using an already configured and known password provided in the intune configuration profile
While the bios setting will be modified, the existing bios password will not be removed or changed. Once we have deployed the needed provider to our client, we then can create a new configuration profile in intune Using the new “bios configurations and other settings” template As usual we start with the new profile by giving it a useful name: It admins can go here to create the bios package that they want to deploy via intune across their fleet or enterprise Once “create” is clicked in microsoft intune, it admins will see this window which prompts them to get the bios configuration profile that will help push updates out.
Using an oem tool, you create a bios configuration file that configures the bios features On the devices, you install the oem win32 app that reads the configuration Then, in the intune bios policy, you add the bios configuration file, and assign the policy to your devices. I can’t find any documentation on how the static bios password configured on the de. Uefi settings can be managed by using the device firmware configuration interface (dfci) Dfci enables windows to pass management commands from intune to uefi for windows autopilot deployed devices
This capability allows limiting end user's control over bios settings.
WATCH
