PowerShell scripts for managing BIOS/firmware settings and passwords on Dell, HP, and Lenovo systems. Runs on Windows PowerShell 5.1 and PowerShell 7.
All documentation is on my blog. This repository holds the scripts, and the README in each manufacturer folder (Dell, HP, Lenovo) lists the files in that folder and links each script to the post that documents it.
- BIOS / Firmware Configuration - the index of all the posts
- BIOS Management Scripts v2 Released - overview of the task sequence and interactive scripts
- Managing BIOS Passwords and Settings with Intune - overview of the Intune scripts
The scripts also have built-in help. Get-Help .\<script>.ps1 -Full shows the full help for a script, and Get-Help .\<script>.ps1 -Online opens the post that documents it.
There are two sets of scripts:
- Task sequence and interactive scripts - for ConfigMgr or MDT task sequences, or for running by hand. Each manufacturer has a script for BIOS passwords and a script for BIOS settings. The Dell and HP scripts come in two variants: one uses the manufacturer's PowerShell module, and one uses WMI directly with no module. The Lenovo scripts use WMI.
- Intune Remediations - detection and remediation script pairs for BIOS passwords and for BIOS settings, in the
Intunefolder of each manufacturer.
| Folder | Contents | Posts |
|---|---|---|
| Dell | Password and settings scripts in DellBIOSProvider and WMI variants, the DellBIOSProvider module installer, example settings files, and the Intune scripts | Dell posts |
| HP | Password and settings scripts in HPCMSL and WMI variants, the HPCMSL installer, example settings files, and the Intune scripts | HP posts |
| Lenovo | Password and settings scripts, example settings files, and the Intune scripts | Lenovo posts |
| Tools | Build-IntunePayload.ps1: Embed CMS-encrypted BIOS password files in an Intune remediation script. | Setting up BIOS password certificates in Intune |
Released under the MIT License.