Ajout dela structure MDT dans Infra-LAB

projects/MDT/Control/Bootstrap.ini

@@ -0,0 +1,16 @@
+[Settings]
+Priority=Default
+
+[Default]
+
+; DeployRoot=.
+
+SkipBDDWelcome=YES
+
+KeyboardLocalePE=040C:0000040C
+UserLocale=fr-FR
+UILanguage=fr-FR
+TimeZoneName=Romance Standard Time
+
+; Facultatif mais recommandé
+SkipWizard=NO

projects/MDT/Control/CustomSettings.ini

@@ -0,0 +1,327 @@
+[Settings]
+Priority= DefaultGateway, SetSiteCode, ByLaptop, ByRole, Model, Init, MachineModel, Default, SendMail, ByVirtual, ByLaptopType, ByDesktopType, SetModelAlias, ModelAlias
+Properties= SiteCode, Salle, Role, Prefix, PosteType, OSDComputerNumber, MachineModel, MyCustomProperty, ModelAlias 
+; , OSDSendMailFrom, OSDSendMailToPri, OSDSendMailToSec, OSDSendMailSubject, OSDSendMailBody, OSDSendMailSMTPServer, OSDSendMailIncludeBDDLog
+
+;UserExit=SiteCode.vbs
+
+; =========================================================
+; MAPPING RESEAU -> SITE
+; =========================================================
+
+[DefaultGateway]
+
+192.168.82.6 = S0082
+
+10.126.193.254=S2073
+
+10.126.207.254=S2074
+10.126.209.254=S2074
+
+10.126.221.254=S2075
+10.126.223.254=S2075
+
+10.126.235.254=S2076
+10.126.237.254=S2076
+
+10.126.249.254=S2077
+10.126.251.254=S2077
+
+10.126.7.254=S2078
+10.126.9.254=S2078
+
+10.126.21.254=S2079
+10.126.23.254=S2079
+
+10.126.35.254=S2080
+10.126.37.254=S2080
+
+10.126.49.254=S2081
+10.126.51.254=S2081
+
+10.126.63.254=S2082
+10.126.65.254=S2082
+
+10.126.77.254=S2083
+10.126.79.254=S2083
+
+10.126.91.254=S2084
+10.126.93.254=S2084
+
+10.126.105.254=S2085
+10.126.107.254=S2085
+
+10.126.119.254=S2086
+10.126.121.254=S2086
+
+10.126.133.254=S2087
+10.126.135.254=S2087
+
+10.126.147.254=S2088
+10.126.149.254=S2088
+
+10.126.161.254=S2089
+10.126.163.254=S2089
+
+10.126.175.254=S2090
+10.126.177.254=S2090
+
+10.126.189.254=S2091
+10.126.191.254=S2091
+
+10.126.203.254=S2092
+10.126.205.254=S2092
+
+10.126.217.254=S2093
+10.126.219.254=S2093
+
+10.126.231.254=S2094
+10.126.233.254=S2094
+
+10.126.245.254=S2095
+10.126.247.254=S2095
+
+10.126.3.254=S2096
+10.126.5.254=S2096
+
+
+; =========================================================
+; PARAMETRES PAR SITE
+; =========================================================
+
+[S0082]
+
+SiteCode=s0082
+
+[S1009]
+
+SiteCode=s1009
+
+[S1027]
+
+SiteCode=s1027
+
+[S2073]
+
+SiteCode=s2073
+
+[S2074]
+
+SiteCode=s2074
+
+[S2075]
+
+SiteCode=s2075
+
+[S2076]
+
+SiteCode=s2076
+
+[S2077]
+
+SiteCode=s2077
+
+[S2078]
+
+SiteCode=s2078
+
+[S2079]
+
+SiteCode=s2079
+
+[S2080]
+
+SiteCode=s2080
+
+[S2081]
+
+SiteCode=s2081
+
+[S2082]
+
+SiteCode=s2082
+
+
+
+[S2083]
+
+SiteCode=s2083
+
+
+
+[S2084]
+
+SiteCode=s2084
+
+
+
+[S2085]
+
+SiteCode=s2085
+
+
+
+[S2086]
+
+SiteCode=s2086
+
+
+
+[S2087]
+
+SiteCode=s2087
+
+
+
+[S2088]
+
+SiteCode=s2088
+
+
+
+[S2089]
+
+SiteCode=s2089
+
+
+
+[S2090]
+
+SiteCode=s2090
+
+
+
+[S2091]
+
+SiteCode=s2091
+
+
+
+[S2092]
+
+SiteCode=s2092
+
+
+
+[S2093]
+
+SiteCode=s2093
+
+
+
+[S2094]
+
+SiteCode=s2094
+
+
+[S2095]
+
+SiteCode=s2095
+
+
+
+[S2096]
+
+SiteCode=s2096
+
+; =========================================================
+; DETECTION AUTOMATIQUE TYPE POSTE
+; =========================================================
+
+[ByLaptop]
+
+True=Laptop
+False=Desktop
+
+
+[Desktop]
+
+PosteType=
+
+[Laptop]
+
+PosteType=M
+
+; =========================================================
+; ROLE CHOISI DANS LE WIZARD
+; =========================================================
+
+[ByRole]
+
+Prof=Prof
+Eleve=Eleve
+
+
+[Prof]
+
+Prefix=P
+
+
+[Eleve]
+
+Prefix=
+
+
+; =========================================================
+; NOM FINAL MACHINE
+; =========================================================
+
+OSDComputerName=%SiteCode%-%Salle%-%Prefix%%PosteType%%OSDComputerNumber%
+
+
+#Début Automatisation par Model
+
+[VMware Virtual Platform]
+;SkipTaskSequence=YES
+SkipApplications=YES
+SkipComputerName=NO
+
+[Init]
+MachineModel=#Left("%Model%",4)#
+
+# Fin Automatisation par Model
+
+[Default]
+
+
+OSInstall=Y
+
+SkipComputerName=NO
+SkipDomainMembership=YES
+SkipAdminPassword=YES
+SkipProductKey=YES
+SkipComputerBackup=YES
+SkipBitLocker=YES
+SkipTimeZone=YES
+
+SkipTaskSequence=YES
+TaskSequenceID=DEPL-W11-25H2-00
+
+SkipApplications=YES
+SkipSummary=YES
+SkipRoles=YES
+SkipDomainMembership=YES
+SkipUserData=YES
+SkipLocaleSelection=YES
+
+SkipFinalSummary=YES
+FinishAction=MY_REBOOT
+
+AdminPassword=crhdf!@2026
+
+UILanguage=fr-FR
+UserLocale=fr-FR
+KeyboardLocale=040C:0000040C
+
+TimeZoneName=Romance Standard Time
+TimeZone=105
+
+_SMSTSORGNAME=Region Hauts-de-France
+_SMSTSPackageName=Deploiment %TaskSequenceName%
+
+
+[ByVirtual]
+Subsection=VM-%ISVM%
+
+[VM-TRUE]
+; OSDComputerName=#Right(Replace("VM-%macaddress001%",":",""),15)#

projects/MDT/Control/Medias.xml

@@ -0,0 +1 @@
+<medias><media guid="{609c678b-f45f-4d47-8c27-cf7b90307af7}" enable="True"><Name>MEDIA001</Name><Comments></Comments><CreatedTime>30/04/2026 16:31:15</CreatedTime><CreatedBy>LUFFY\Almeyric</CreatedBy><LastModifiedTime>07/05/2026 18:06:49</LastModifiedTime><LastModifiedBy>LUFFY\Almeyric</LastModifiedBy><Root>D:\ISO</Root><SelectionProfile>Offline_Media_W11_25H2</SelectionProfile><SupportX86>False</SupportX86><SupportX64>True</SupportX64><GenerateISO>True</GenerateISO><ISOName>MDT_W11_Lenovo_HDF.iso</ISOName></media></medias>

projects/MDT/Control/Settings.xml

@@ -0,0 +1,68 @@
+<Settings>
+  <Version>True</Version>
+  <Description>090 - Lycee Colbet - Tourcoing</Description>
+  <Comments>
+  </Comments>
+  <EnableMulticast>True</EnableMulticast>
+  <SupportX86>False</SupportX86>
+  <SupportX64>True</SupportX64>
+  <UNCPath>\\Luffy\mdt_lychdf$</UNCPath>
+  <PhysicalPath>D:\MDT_LYCHDF</PhysicalPath>
+  <MonitorHost>
+  </MonitorHost>
+  <MonitorEventPort>9800</MonitorEventPort>
+  <MonitorDataPort>9801</MonitorDataPort>
+  <SkipWimSplit>True</SkipWimSplit>
+  <Boot.x86.UseBootWim>True</Boot.x86.UseBootWim>
+  <Boot.x86.ScratchSpace>32</Boot.x86.ScratchSpace>
+  <Boot.x86.IncludeAllDrivers>False</Boot.x86.IncludeAllDrivers>
+  <Boot.x86.IncludeNetworkDrivers>True</Boot.x86.IncludeNetworkDrivers>
+  <Boot.x86.IncludeMassStorageDrivers>True</Boot.x86.IncludeMassStorageDrivers>
+  <Boot.x86.IncludeVideoDrivers>False</Boot.x86.IncludeVideoDrivers>
+  <Boot.x86.IncludeSystemDrivers>False</Boot.x86.IncludeSystemDrivers>
+  <Boot.x86.BackgroundFile>D:\MDT_LYCHDF\Tools\x64\STEP_01.bmp</Boot.x86.BackgroundFile>
+  <Boot.x86.ExtraDirectory>
+  </Boot.x86.ExtraDirectory>
+  <Boot.x86.GenerateGenericWIM>False</Boot.x86.GenerateGenericWIM>
+  <Boot.x86.GenerateGenericISO>False</Boot.x86.GenerateGenericISO>
+  <Boot.x86.GenericWIMDescription>Generic Windows PE (x86)</Boot.x86.GenericWIMDescription>
+  <Boot.x86.GenericISOName>Generic_x86.iso</Boot.x86.GenericISOName>
+  <Boot.x86.GenerateLiteTouchISO>False</Boot.x86.GenerateLiteTouchISO>
+  <Boot.x86.LiteTouchWIMDescription>Lite Touch Windows PE (x86)</Boot.x86.LiteTouchWIMDescription>
+  <Boot.x86.LiteTouchISOName>LiteTouchPE_x86.iso</Boot.x86.LiteTouchISOName>
+  <Boot.x86.SelectionProfile>All Drivers and Packages</Boot.x86.SelectionProfile>
+  <Boot.x86.SupportUEFI>True</Boot.x86.SupportUEFI>
+  <Boot.x86.FeaturePacks>winpe-mdac,winpe-netfx,winpe-powershell,dart8</Boot.x86.FeaturePacks>
+  <Boot.x64.UseBootWim>True</Boot.x64.UseBootWim>
+  <Boot.x64.ScratchSpace>128</Boot.x64.ScratchSpace>
+  <Boot.x64.IncludeAllDrivers>False</Boot.x64.IncludeAllDrivers>
+  <Boot.x64.IncludeNetworkDrivers>True</Boot.x64.IncludeNetworkDrivers>
+  <Boot.x64.IncludeMassStorageDrivers>True</Boot.x64.IncludeMassStorageDrivers>
+  <Boot.x64.IncludeVideoDrivers>False</Boot.x64.IncludeVideoDrivers>
+  <Boot.x64.IncludeSystemDrivers>False</Boot.x64.IncludeSystemDrivers>
+  <Boot.x64.BackgroundFile>D:\MDT_LYCHDF\Tools\x64\STEP_01.bmp</Boot.x64.BackgroundFile>
+  <Boot.x64.ExtraDirectory>
+  </Boot.x64.ExtraDirectory>
+  <Boot.x64.GenerateGenericWIM>False</Boot.x64.GenerateGenericWIM>
+  <Boot.x64.GenerateGenericISO>False</Boot.x64.GenerateGenericISO>
+  <Boot.x64.GenericWIMDescription>Generic Windows PE (x64)</Boot.x64.GenericWIMDescription>
+  <Boot.x64.GenericISOName>Generic_x64.iso</Boot.x64.GenericISOName>
+  <Boot.x64.GenerateLiteTouchISO>False</Boot.x64.GenerateLiteTouchISO>
+  <Boot.x64.LiteTouchWIMDescription>Lite Touch Windows PE (x64)</Boot.x64.LiteTouchWIMDescription>
+  <Boot.x64.LiteTouchISOName>MDT_W11_Lenovo_HDF.iso</Boot.x64.LiteTouchISOName>
+  <Boot.x64.SelectionProfile>Drivers_WinPE_x64</Boot.x64.SelectionProfile>
+  <Boot.x64.SupportUEFI>True</Boot.x64.SupportUEFI>
+  <Boot.x64.FeaturePacks>winpe-mdac,winpe-netfx,winpe-powershell,dart8</Boot.x64.FeaturePacks>
+  <Database.SQLServer>
+  </Database.SQLServer>
+  <Database.Instance>
+  </Database.Instance>
+  <Database.Port>
+  </Database.Port>
+  <Database.Netlib>
+  </Database.Netlib>
+  <Database.Name>
+  </Database.Name>
+  <Database.SQLShare>
+  </Database.SQLShare>
+</Settings>

projects/MDT/Scripts/Autorun.inf

@@ -0,0 +1,5 @@
+[AutoRun]
+action=Windows Deployment Wizard
+open=wscript.exe Deploy\Scripts\BDD_AutoRun.wsf
+icon=Deploy\Scripts\Wizard.ico
+

projects/MDT/Scripts/BDD_Autorun.wsf

@@ -0,0 +1,52 @@
+<job id="BDD_autorun">
+	<script language="VBScript">
+
+' // ***************************************************************************
+' // 
+' // Copyright (c) Microsoft Corporation.  All rights reserved.
+' // 
+' // Microsoft Deployment Toolkit Solution Accelerator
+' //
+' // File:      BDD_autorun.xml
+' // 
+' // Version:   6.3.8456.1000
+' // 
+' // Purpose:   Simple dialog for MDT Autorun
+' // 
+' // Usage:     Only called from autorun.inf on removable media
+' // 
+' // ***************************************************************************
+
+Option Explicit
+
+
+'//----------------------------------------------------------------------------
+'//  Global Constants
+'//----------------------------------------------------------------------------
+
+Const WelcomeMessage1 = "You have inserted a Windows Deployment Disk/Drive."
+Const WelcomeMessage2 = "Press OK to continue with this installation, otherwise Cancel."
+Const WelcomeHeader1  = "Auto-Run Windows Deployment"
+
+'//----------------------------------------------------------------------------
+'//  Main 
+'//----------------------------------------------------------------------------
+
+	Dim oShell
+
+	'
+	' Get Confirmation
+	'
+
+	Set oShell = CreateObject("WScript.Shell")
+
+	If oShell.Popup( WelcomeMessage1 & vbNewLine & WelcomeMessage2, 15, WelcomeHeader1, 1 or 64) = 1 then
+
+		oShell.Run "cscript.exe //nologo """ & WScript.ScriptFullName & "\..\LiteTouch.vbs""",,FALSE
+
+	End if
+
+
+	</script>
+</job>
+

projects/MDT/Scripts/BDD_Welcome_ENU.xml

@@ -0,0 +1,37 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<!--
+
+' // ***************************************************************************
+' // 
+' // Copyright (c) Microsoft Corporation.  All rights reserved.
+' // 
+' // Microsoft Deployment Toolkit Solution Accelerator
+' //
+' // File:      BDD_Welcome_ENU.xml
+' // 
+' // Version:   6.3.8456.1000
+' // 
+' // Purpose:   BDD Welcome Wizard
+' // 
+' // ***************************************************************************
+
+-->
+<Wizard>
+	<Global>
+		<HideNavigation>true</HideNavigation>
+	</Global>
+
+	<Pane id="Bootstrap" title="Processing Bootstrap Settings" reference="WelcomeWiz_Initialize.xml">
+	</Pane>
+
+	<Pane id="Choice" reference="WelcomeWiz_Choice.xml">
+		<!-- ################# By Diagg, Added 15/05/2013  -->
+		<Condition><![CDATA[ (oEnv("SystemDrive") = "X:" and UCase(oEnvironment.Item("SkipBDDWelcome")) <> "YES") or (oEnv("SystemDrive") = "X:" and UCase(oEnvironment.Item("SkipBDDWelcome")) = "YES" and oEnvironment.Item("IsProcure") = false) ]]></Condition>
+		<!-- ################# By Diagg, Added 15/05/2013  -->
+	</Pane>
+
+	<Pane id="DeployRoot" title="Deployment Share" reference="WelcomeWiz_DeployRoot.xml">
+		<Condition><![CDATA[ UCase(Left(oEnvironment.Item("DeployRoot"),3)) = "X:\" or oEnvironment.Item("DeployRoot") = "" or UCase(oEnvironment.Item("ChooseDeployRoot")) = "YES" ]]></Condition>
+	</Pane>
+
+</Wizard>

projects/MDT/Scripts/BIOSConfig/CleanBootDrive.txt

@@ -0,0 +1,2 @@
+SEL DIS 0
+CLEAN

projects/MDT/Scripts/BIOSConfig/CleanBootDrive.txt.txt

@@ -0,0 +1,2 @@
+SEL DIS 0
+CLEAN

projects/MDT/Scripts/BIOSConfig/Dell/BIOS_Settings_Optiplex_OK.csv

@@ -0,0 +1,94 @@
+BootList                    LEGACY BOOT
+BootSequence                {Diskette Drive, P0: WDC WD5000AZLX-75K2TA0, Onboard NIC, CD/DVD/CD-RW Drive...}
+LegacyOrom                  Enabled
+AttemptLegacyBoot           Disabled
+UefiBootPathSecurity        AlwaysExceptInternalHdd
+WatchdogTimer               Disabled
+EmbNic1                     Enabled
+UefiNwStack                 Enabled
+Serial1                     Disabled
+EmbSataRaid                 Ahci
+Sata0                       Enabled
+Sata1                       Enabled
+SmartErrors                 Disabled
+IntegratedAudio             Enabled
+InternalSpeaker             Enabled
+Microphone                  Enabled
+ForcePxeNextBoot            Disabled
+MediaCard                   Disabled
+UsbEmu                      Enabled
+UsbPortsFront               Enabled
+UsbPortsRear1               Enabled
+UsbPortsRear2               Enabled
+UsbPortsRear3               Enabled
+UsbPortsRear4               Enabled
+UsbPortsFront1              Enabled
+UsbPortsFront2              Enabled
+UsbPortsFront3              Enabled
+UsbPortsFront4              Enabled
+UsbPortsRear                Enabled
+RearUSB3.0Ports             Enabled
+MultiDisplay                Enabled
+PrimaryVideoSlot            Auto
+PasswordLock               	Disabled
+CapsuleFirmwareUpdate       Enabled
+IsSystemPasswordSet         False
+IsAdminPasswordSet          False
+HDDInfo                     {0}
+AdminPassword
+SystemPassword
+HDDPassword
+StrongPassword              Disabled
+PasswordBypass              Disabled
+OromKeyboardAccess          Enabled
+ChasIntrusion               SilentEnable
+ChassisIntrusionStatus      Tripped
+CpuXdSupport                Enabled
+AdminSetupLockout           Disabled
+HddProtection               Disabled
+Computrace                  Deactivate
+SHA256                      Enabled
+TpmSecurity                 Enabled
+TpmActivation               Enabled
+TpmPpiPo                    Enabled
+TpmPpiDpo                   Disabled
+TpmClear                    Disabled
+SecureBoot                  Disabled
+SoftGuardEn                 Disabled
+EnclaveSize                 128MB
+CpuCore                     CoresAll
+Speedstep                   Enabled
+CStatesCtrl                 Enabled
+LimitCpuidValue             Disabled
+TurboMode                   Disabled
+LogicProc                   Disabled
+AutoOn                      Disabled
+AutoOnHr                    0
+AutoOnMn                    0
+DeepSleepCtrl               Disabled
+UsbWake                     Enabled
+FanCtrlOvrd                 Disabled
+AcPwrRcvry                  Off
+WakeOnLan                   LanOnly
+BlockSleep                  Enabled
+IntelReadyModeEn            Enabled
+PowerWarn                   Enabled
+NumLock                     Enabled
+RptKeyErr                   Enabled
+Fastboot                    Thorough
+PostMebxKey                 Enabled
+Virtualization              Enabled
+VtForDirectIo               Enabled
+WirelessSwitchBluetoothCtrl Enabled
+WirelessSwitchWiGigCtrl     Enabled
+WirelessSwitchWlanCtrl      Enabled
+WirelessLan                 Enabled
+BluetoothDevice             Enabled
+Serr                        Enabled
+BiosRcvrFrmHdd              Enabled
+AllowBiosDowngrade          Enabled
+BiosLogClear                Keep
+Aspm                        Disabled
+SupportAssistOSRecovery     Enabled
+AutoOSRecoveryThreshold     2
+ServiceOSClear              Disabled

projects/MDT/Scripts/BIOSConfig/Dell/HAPI/HAPIInstall.bat

@@ -0,0 +1,3 @@
+@echo off
+Echo This file will install HAPI
+%0\..\hapint64.exe -i -k C-C-T-K -p "hapint64.exe" -q

projects/MDT/Scripts/BIOSConfig/Dell/HAPI/HAPIUninstall.bat

@@ -0,0 +1,4 @@
+@echo off
+Echo Un-installing HAPI...
+%0\..\hapint64.exe -r -k C-C-T-K -q
+

projects/MDT/Scripts/BIOSConfig/Dell/HAPI/dcdbas32.inf

@@ -0,0 +1,78 @@
+;/*++
+;
+;Copyright (c) 2002-2004 Dell Inc.. All Rights Reserved.
+;
+;Module Name:
+;
+;    dcdbas32.inf
+;
+;Abstract:
+;
+;
+;--*/
+
+[Version]
+Signature="$WINDOWS NT$"
+Class=SYSTEM
+ClassGuid={4D36E97D-E325-11CE-BFC1-08002BE10318}
+Provider=%DELL%
+DriverVer=08/06/2013,7.4.0.3999
+CatalogFile=dcdbas32.cat
+
+; ================= Class section =====================
+
+[DestinationDirs]
+DefaultDestDir = 12
+
+;*****************************************
+; dcdbas Device  Install Section
+;*****************************************
+
+[Manufacturer]
+%DELL%=Standard
+
+[Standard]
+; DisplayName       	     Section DeviceId
+; -----------       	     ------- --------
+%dcdbasDevice.DeviceDesc% = dcdbas, root\dcdbas
+
+[dcdbas.NT]
+CopyFiles= dcdbas.NT.Copy
+
+[dcdbas.NT.Copy]
+dcdbas32.sys
+
+[dcdbas.NT.HW]
+AddReg=dcdbas.Security
+
+[dcdbas.Security]
+HKR,,DeviceCharacteristics,0x10001,0x100
+HKR,,Security,,"D:P(A;;GA;;;SY)(A;;GRGWGX;;;BA)(A;;GRGX;;;WD)"
+
+;-------------- Service installation----------------------------------
+
+[dcdbas.NT.Services]
+AddService = dcdbas, 0x00000002, dcdbas_Service_Inst
+
+; -------------- dcdbas Driver install sections----------------------
+
+[dcdbas_Service_Inst]
+DisplayName    = %dcdbas.SVCDESC%
+ServiceType    = 1               ; SERVICE_KERNEL_DRIVER
+StartType      = 3               ; SERVICE_DEMAND_START
+ErrorControl   = 1               ; SERVICE_ERROR_NORMAL
+ServiceBinary  = %12%\dcdbas32.sys
+
+[SourceDisksNames]
+1 = %DiskId1%,,,""
+
+[SourceDisksFiles]
+dcdbas32.sys  = 1,,
+
+[Strings]
+DELL = "DELL INC"
+StdMfg = "(Standard system devices)"
+ClassName = "System"
+dcdbasDevice.DeviceDesc = "System Management Device"
+dcdbas.SVCDESC = "System Management Driver"
+DiskId1 = "Disk 1"

projects/MDT/Scripts/BIOSConfig/Dell/HAPI/dcdbas64.inf

@@ -0,0 +1,78 @@
+;/*++
+;
+;Copyright (c) 2002-2004 Dell Inc.. All Rights Reserved.
+;
+;Module Name:
+;
+;    dcdbas64.inf
+;
+;Abstract:
+;
+;
+;--*/
+
+[Version]
+Signature="$WINDOWS NT$"
+Class=SYSTEM
+ClassGuid={4D36E97D-E325-11CE-BFC1-08002BE10318}
+Provider=%DELL%
+DriverVer=08/13/2013,7.4.0.453
+CatalogFile=dcdbas64.cat
+
+; ================= Class section =====================
+
+[DestinationDirs]
+DefaultDestDir = 12
+
+;*****************************************
+; dcdbas Device  Install Section
+;*****************************************
+
+[Manufacturer]
+%DELL%=Standard,ntamd64
+
+[Standard.ntamd64]
+; DisplayName       	     Section DeviceId
+; -----------       	     ------- --------
+%dcdbasDevice.DeviceDesc% = dcdbas, root\dcdbas
+
+[dcdbas.ntamd64]
+CopyFiles= dcdbas.ntamd64.Copy
+
+[dcdbas.ntamd64.Copy]
+dcdbas64.sys
+
+[dcdbas.ntamd64.HW]
+AddReg=dcdbas.ntamd64.Security
+
+[dcdbas.ntamd64.Security]
+HKR,,DeviceCharacteristics,0x10001,0x100
+HKR,,Security,,"D:P(A;;GA;;;SY)(A;;GRGWGX;;;BA)(A;;GRGX;;;WD)"
+
+;-------------- Service installation----------------------------------
+
+[dcdbas.ntamd64.Services]
+AddService = dcdbas, 0x00000002, dcdbas_Service_Inst
+
+; -------------- dcdbas Driver install sections----------------------
+
+[dcdbas_Service_Inst]
+DisplayName    = %dcdbas.SVCDESC%
+ServiceType    = 1               ; SERVICE_KERNEL_DRIVER
+StartType      = 3               ; SERVICE_DEMAND_START
+ErrorControl   = 1               ; SERVICE_ERROR_NORMAL
+ServiceBinary  = %12%\dcdbas64.sys
+
+[SourceDisksNames]
+1 = %DiskId1%,,,""
+
+[SourceDisksFiles]
+dcdbas64.sys  = 1,,
+
+[Strings]
+DELL = "DELL INC"
+StdMfg = "(Standard system devices)"
+ClassName = "System"
+dcdbasDevice.DeviceDesc = "System Management Device"
+dcdbas.SVCDESC = "System Management Driver"
+DiskId1 = "Disk 1"

projects/MDT/Scripts/BIOSConfig/Dell/HAPI/dcdipm64.sys

@@ -0,0 +1 @@
+"place holder" 

projects/MDT/Scripts/BIOSConfig/Dell/OptiplexConfBiosLegacyWOL.cctk

@@ -0,0 +1,3 @@
+[cctk]
+bootorder=legacytype,+hdd,+embnic,+usbdev
+wakeonlan=enable

projects/MDT/Scripts/BIOSConfig/Dell/OptiplexSecBootPXE.cctk

@@ -0,0 +1,6 @@
+[cctk]
+bootorder=legacytype,+embnic,+hdd,+usbdev
+legacyorom=disable
+secureboot=enable
+uefinwstack=enable
+wakeonlan=enable

projects/MDT/Scripts/BIOSConfig/Dell/multiplatform__new_password.cctk

@@ -0,0 +1,3 @@
+[cctk]
+setuppwd=CRHDF2020
+syspwd=CRHDF2020

projects/MDT/Scripts/BIOSConfig/Dell/multiplatform_wol_activate.cctk

@@ -0,0 +1,6 @@
+[cctk]
+wakeonlan=enable
+deepsleepctrl=disable
+blocks3=disable
+aspm=disable
+wakeonlanbootovrd=enable

projects/MDT/Scripts/BIOSConfig/HP/Clear-HPPwd.ps1

@@ -0,0 +1,38 @@
+<#
+.DESCRIPTION
+Clear HP Password Bios
+    
+.NOTES
+
+Author: Aurelien HAMEZ & Patrick Pattyn
+Version: 1.0
+Date: 2021-07-22
+
+    
+.EXAMPLE
+.\Clear-HPPwd.ps1
+
+#>
+
+Begin {
+	$MDPs = "password1.bin", "password2.bin", "password3.bin", "password4.bin", "password5.bin", "password6.bin"
+}
+Process {	
+	#On configure le mot de passe si vide
+    $process = Start-Process -FilePath "$PSScriptRoot\BiosConfigUtility64.exe" -ArgumentList "`"/nspwdfile:`"", "/log" -Wait -PassThru
+	
+	#Si le mot de passe est configuré, le code erreur 10 est retourné, on test différent mot de passe
+	if($process.ExitCode -eq 10)
+	{
+		Foreach($MDP in $MDPs)
+		{
+			$process = Start-Process -FilePath "$PSScriptRootBiosConfigUtility64.exe" -ArgumentList "`"/nspwdfile:`"", "`"/cpwdfile:$MDP`"", "/log" -wait -PassThru
+				if($process.ExitCode -ne 10)
+				{
+				break
+				}
+		}
+    }
+}
+End {
+} 

projects/MDT/Scripts/BIOSConfig/HP/Config_Bios_6005_Pro_MT.txt

@@ -0,0 +1,357 @@
+BIOSConfig 1.0
+;
+;     Originally created by BIOS Configuration Utility
+;     Version: 4.0.30.1
+;     Date="2021/06/14" Time="13:46:06" UTC="2"
+;
+;     Found 104 settings
+;
+Product Name
+	HP Compaq 6005 Pro MT PC                
+SKU Number
+	AT493AV                                         
+Processor Type
+	AMD Athlon(tm) II X2 B22 Processor
+Processor Speed
+	2800/200 MHz
+Processor Stepping
+	00100F62
+Cache Size (L1/L2/L3)
+	128KBx2 / 1024KBx2 
+Memory Size
+	8192 MB
+System BIOS
+	786G6 v01.03
+Chassis Serial Number
+	CZC0331T19
+Asset Tracking Number
+	CZC0331T19
+Family Name
+	103C_53307F                                     
+Management Mode
+	DASH
+Removable Media Boot
+	*Enable
+	Disable
+eSATA Port
+	*None
+	SATA3
+Max eSATA Speed
+	3.0 Gbps
+	*1.5 Gbps
+SATA Emulation
+	Legacy Mode IDE
+	Native Mode IDE
+	RAID
+	*AHCI
+Diskette A:
+	*Not Installed
+	--
+	5.25" 1.2 MB
+	--
+	3.5" 1.44 MB
+Diskette B:
+	*Not Installed
+	--
+	5.25" 1.2 MB
+	--
+	3.5" 1.44 MB
+Boot Order
+	ATAPI CD-ROM Drive
+	USB device
+	Hard Drive
+	Network Controller
+	Diskette Drive
+	PnP Device #2
+	PnP Device #3
+	PnP Device #4
+	PnP Device #5
+	PnP Device #6
+	PnP Device #7
+	PnP Device #8
+	PnP Device #9
+	PnP Device #10
+	PnP Device #11
+Controller Order
+	Integrated SATA
+	Integrated SATA RAID
+	Boot Device #2
+	Boot Device #3
+	Boot Device #4
+	Boot Device #5
+	Boot Device #6
+	Boot Device #7
+	Boot Device #8
+	Boot Device #9
+	Boot Device #10
+	Boot Device #11
+	Boot Device #12
+	Boot Device #13
+	Boot Device #14
+Network Server Mode
+	*Disable
+	Enable
+Password Prompt on Warm Boot
+	*Disable
+	Enable
+Setup Browse Mode
+	Disable
+	*Enable
+Stringent Password
+	*Disable
+	Enable
+Front USB Ports
+	*Enable
+	Disable
+USB Port 12
+	*Enable
+	Disable
+USB Port 11
+	*Enable
+	Disable
+USB Port 4
+	*Enable
+	Disable
+USB Port 3
+	*Enable
+	Disable
+USB Port 8
+	*Enable
+	Disable
+USB Port 7
+	*Enable
+	Disable
+Rear USB Ports
+	*Enable
+	Disable
+USB Port 6
+	*Enable
+	Disable
+USB Port 5
+	*Enable
+	Disable
+USB Port 10
+	*Enable
+	Disable
+USB Port 9
+	*Enable
+	Disable
+USB Port 2
+	*Enable
+	Disable
+USB Port 1
+	*Enable
+	Disable
+Internal USB Ports
+	*Enable
+	Disable
+USB Port 14
+	*Enable
+	Disable
+PCI Express x16 Slot
+	Disable
+	*Enable
+PCI Express x1 Slot 1
+	Disable
+	*Enable
+PCI Express x1 Slot 2
+	Disable
+	*Enable
+PCI Slot 1
+	Disable
+	*Enable
+Serial Port A
+	Device hidden
+	*Device available
+Parallel Port
+	Device hidden
+	*Device available
+System Audio
+	Device hidden
+	*Device available
+Network Controller
+	Device hidden
+	*Device available
+SATA0
+	Device hidden
+	*Device available
+SATA1
+	Device hidden
+	*Device available
+SATA2
+	Device hidden
+	*Device available
+SATA3
+	Device hidden
+	*Device available
+Network Service Boot
+	Disable
+	*Enable
+Enter Ownership Tag
+	                                                                                
+Enter UUID
+	C1C9C5875AABDF11BBD8DE5CA56E1CC1
+Data Execution Prevention
+	Disable
+	*Enable
+OS management of Embedded Security Device
+	*Enable
+	Disable
+Reset of Embedded Security Device through OS
+	*Disable
+	Enable
+Master Boot Record Security
+	*Disable
+	Enable
+Idle Power Savings
+	Normal
+	*Extended
+ACPI S3 Hard Disk Reset
+	*Disable
+	Enable
+ACPI S3 PS2 Mouse Wake Up
+	Disable
+	*Enable
+USB Wake on Device Insertion
+	*Disable
+	Enable
+Unique Sleep State Blink Rates
+	*Disable
+	Enable
+Fan Idle Mode
+	*+------
+	++-----
+	+++----
+	++++---
+	+++++--
+	++++++-
+	+++++++
+POST Mode
+	FullBoot
+	FullBoot Every 07 Days
+	FullBoot Every 14 Days
+	FullBoot Every 21 Days
+	FullBoot Every 28 Days
+	Clear Memory
+	*QuickBoot
+POST Messages
+	Enable
+	*Disable
+F9 Prompt
+	*Displayed
+	Hidden
+F10 Prompt
+	*Displayed
+	Hidden
+F11 Prompt
+	*Displayed
+	Hidden
+F12 Prompt
+	*Displayed
+	Hidden
+Factory Recovery Boot Support
+	Disable
+	*Enable
+Option ROM Prompt
+	*Enable
+	Disable
+Remote Wakeup Boot Source
+	Remote Server
+	*Local Hard Drive
+After Power Loss
+	*Off
+	On
+	Previous State
+POST Delay (in seconds)
+	*None
+	5
+	10
+	15
+	20
+I/O APIC Mode
+	Disable
+	*Enable
+Bypass F1 Prompt on Configuration Changes
+	*Disable
+	Enable
+Sunday
+	*Disable
+	Enable
+Monday
+	*Disable
+	Enable
+Tuesday
+	*Disable
+	Enable
+Wednesday
+	*Disable
+	Enable
+Thursday
+	*Disable
+	Enable
+Friday
+	*Disable
+	Enable
+Saturday
+	*Disable
+	Enable
+BIOS Power-On Time (hh:mm)
+	00:00
+PCI SERR# Generation
+	Disable
+	*Enable
+PCI VGA Palette Snooping
+	*Disable
+	Enable
+Printer Mode
+	Bi-Directional
+	*EPP+ECP
+	Output-Only
+Num Lock State at Power-On
+	*Off
+	On
+S5 Wake on LAN
+	*Enable
+	Disable
+Processor Cache
+	*Enable
+	Disable
+Multi-Processor
+	*Enable
+	Disable
+Integrated Graphics Memory Size
+	*Automatic
+	32 MB
+	64 MB
+	128 MB
+	256 MB
+Surround View
+	*Disable
+	Enable
+Internal Speaker
+	Disable
+	*Enable
+NIC PXE Option ROM Download
+	*Enable
+	Disable
+HPET
+	Disable
+	*Enable
+PCI Express x16
+	*x8+DisplayPort
+	x16
+DASH Support
+	*Enable
+	Disable
+SOL Character Echo
+	*Disable
+	Enable
+SOL Terminal Emulation Mode
+	*VT100
+	ANSI
+SOL Local Keyboard
+	Disable
+	*Enable
+Manufacturing Programming Mode
+	Unlock
+	*Lock

projects/MDT/Scripts/BIOSConfig/HP/Config_Bios_600G1.txt

@@ -0,0 +1,501 @@
+BIOSConfig 1.0
+;
+;     Originally created by BIOS Configuration Utility
+;     Version: 4.0.30.1
+;     Date="2021/06/14" Time="12:39:41" UTC="2"
+;
+;     Found 143 settings
+;
+Product Name
+	HP ProDesk 600 G1 SFF
+Manufacturer
+	Hewlett-Packard
+SKU Number
+	G8V66EP#ABF
+Processor Type
+	Intel(R) Celeron(R) CPU G1820 @ 2.70GHz
+Processor Speed
+	2700 MHz
+Processor Stepping
+	000306C3 0000001A
+Memory Size
+	4096 MB DDR3 / 1333 MHz 
+BIOS Version & Date
+	L01 v02.33  07/15/2014
+Born On Date
+	00000000
+Chassis Serial Number
+	CZC4490RF0
+Asset Tracking Number
+	CZC4490RF0
+System Board CT Number
+	
+System Board ID
+	18E7
+Family Name
+	103C_53307F G=D
+ME Firmware Version
+	9.0.31.1487
+SATA Emulation
+	IDE
+	--
+	RAID
+	*AHCI
+Ctrl-I Suppression
+	Enable
+	*Disable
+Removable Media Boot
+	Disable
+	*Enable
+	Disable USB
+Hard Drive Boot Order
+	*No Change
+	SATA
+	USB
+EFI Boot Order
+	USB Floppy/CD
+	USB Hard Drive
+	ATAPI CD-ROM Drive
+	Network Controller IPv4
+	Network Controller IPv6
+	Other
+Legacy Boot Order
+	ATAPI CD-ROM Drive
+	USB Floppy/CD
+	Hard Drive
+	Network Controller
+	PnP Device #1
+	PnP Device #2
+	PnP Device #3
+	PnP Device #4
+	PnP Device #5
+	PnP Device #6
+	PnP Device #7
+	PnP Device #8
+	PnP Device #9
+	PnP Device #10
+	PnP Device #11
+Network Server Mode
+	*Disable
+	Enable
+Setup Browse Mode
+	Disable
+	*Enable
+Password prompt on F9 F11 & F12
+	*Enable
+	Disable
+Stringent Password
+	*Disable
+	Enable
+Cover Lock
+	*Unlock
+	Lock
+Cover Removal Sensor
+	*Disable
+	Notify User
+	--
+	Setup Password
+Front USB Ports
+	*Enable
+	Disable
+Front USB3 Port 1
+	Disable
+	*Enable
+Front USB3 Port 2
+	Disable
+	*Enable
+Front USB Port 1
+	Disable
+	*Enable
+Front USB Port 2
+	Disable
+	*Enable
+Rear USB Ports
+	*Enable
+	Disable
+Rear USB3 Port 1
+	Disable
+	*Enable
+Rear USB3 Port 2
+	Disable
+	*Enable
+Rear USB Port 1
+	Disable
+	*Enable
+Rear USB Port 2
+	Disable
+	*Enable
+Rear USB Port 3
+	Disable
+	*Enable
+Rear USB Port 4
+	Disable
+	*Enable
+Accessory USB Ports
+	*Enable
+	Disable
+Accessory USB Port 1
+	Disable
+	*Enable
+Accessory USB Port 2
+	Disable
+	*Enable
+PCI Express x16 Slot 1
+	Disable
+	*Enable
+PCI Express x1 Slot 1
+	Disable
+	*Enable
+PCI Express x1 Slot 2
+	Disable
+	*Enable
+PCI Express x1 Slot 3
+	Disable
+	*Enable
+System Audio
+	Device hidden
+	*Device available
+Network Controller
+	Device hidden
+	*Device available
+Embedded Security Device
+	Device hidden
+	*Device available
+SATA0
+	Device hidden
+	*Device available
+SATA1
+	Device hidden
+	*Device available
+SATA2
+	Device hidden
+	*Device available
+SATA3
+	Device hidden
+	*Device available
+SATA4
+	Device hidden
+	*Device available
+SATA5
+	Device hidden
+	*Device available
+NB RevID
+	0006
+SB RevID
+	0005
+Network Service Boot
+	Disable
+	*Enable
+Enter Ownership Tag
+	
+Enter UUID
+	DD69FA00-71CA-11E4-A06D-C4346B6C7660
+Enter Feature Byte
+	2U3E3X47676J6S6b7H7M7Q7T7W7a7j7maQagapaqb3ced4.tg
+Enter Build ID
+	13WWCDIW602#SABF#DABF
+MS Digital Marker
+	010000000000000001000000000000001D0000004236514E442D34375137592D48594333482D444A5938362D3638324243
+Data Execution Prevention
+	Disable
+	*Enable
+Virtualization Technology (VTx)
+	*Disable
+	Enable
+Virtualization Technology Directed I/O (VTd)
+	*Disable
+	Enable
+Intel TXT(LT) Support
+	*Disable
+	Enable
+Button Retask Password Protection
+	*Disable
+	Enable
+Activate Embedded Security On Next Boot
+	*Disable
+	Enable
+Embedded Security Activation Policy
+	F1 to Boot
+	*Allow user to reject
+	No prompts
+OS management of Embedded Security Device
+	*Enable
+	Disable
+Reset of Embedded Security Device through OS
+	*Disable
+	Enable
+Master Boot Record Security
+	*Disable
+	Enable
+Tpm PPI policy changed by OS allowed
+	*Disable
+	Enable
+Tpm measure boot variables/devices to PCR1
+	*Disable
+	Enable
+Tpm No PPI provisioning
+	*Disable
+	Enable
+Tpm No PPI maintenance
+	*Disable
+	Enable
+Legacy Support
+	Disable
+	*Enable
+Secure Boot
+	*Disable
+	Enable
+Clear Secure Boot Keys
+	*Don't Clear
+	Clear
+Key Ownership
+	*HP Keys
+	Custom Keys
+Fast Boot
+	*Disable
+	Enable
+Runtime Power Management
+	Disable
+	*Enable
+Idle Power Savings
+	Normal
+	*Extended
+Unique Sleep State Blink Rates
+	*Disable
+	Enable
+S5 Maximum Power Savings
+	*Disable
+	Enable
+PCI Express Power Management
+	Disable
+	*Enable
+SATA Power Management
+	Disable
+	*Enable
+Fan Idle Mode
+	*------
+	+-----
+	++----
+	+++---
+	++++--
+	+++++-
+	++++++
+POST Mode
+	FullBoot
+	FullBoot Every 07 Days
+	FullBoot Every 14 Days
+	FullBoot Every 21 Days
+	FullBoot Every 28 Days
+	Clear Memory
+	*QuickBoot
+POST Messages
+	Enable
+	*Disable
+Press ESC for Startup Menu Prompt
+	*Enable
+	Disable
+System Recovery Boot Support
+	Disable
+	*Enable
+Option ROM Prompt
+	*Enable
+	Disable
+Remote Wakeup Boot Source
+	Remote Server
+	*Local Hard Drive
+After Power Loss
+	*Off
+	On
+	Previous State
+POST Delay (in seconds)
+	*None
+	5
+	10
+	15
+	20
+Legacy Boot Vector Re-entry
+	*Disable
+	Enable
+POST Memory Manager Runtime Allocation
+	*Disable
+	Enable
+Bypass F1 Prompt on Configuration Changes
+	*Disable
+	Enable
+Sunday
+	*Disable
+	Enable
+Monday
+	*Disable
+	Enable
+Tuesday
+	*Disable
+	Enable
+Wednesday
+	*Disable
+	Enable
+Thursday
+	*Disable
+	Enable
+Friday
+	*Disable
+	Enable
+Saturday
+	*Disable
+	Enable
+BIOS Power-On Time (hh:mm)
+	00:00
+PCI SERR# Generation
+	Disable
+	*Enable
+PCI VGA Palette Snooping
+	*Disable
+	Enable
+Turbo Mode
+	Disable
+	*Enable
+Num Lock State at Power-On
+	*Off
+	On
+Integrated Video
+	Disable
+	*Enable
+Internal Speaker
+	Disable
+	*Enable
+NFC Device
+	Disable
+	--
+	--
+	--
+	--
+	*Enable
+USB Charging Port
+	Disable
+	*Enable
+USB EHCI Port Debug
+	*Disable
+	Enable
+USB3.0 BIOS Driver Support
+	*Disable
+	Enable
+Multi-Processor
+	*Enable
+	Disable
+Hyper-Threading
+	Disable
+	*Enable
+Manufacturing Programming Mode
+	Unlock
+	*Lock
+Serial Port A
+	Disabled
+	*IO=3F8; IRQ=4
+	IO=3F8; IRQ=3
+	IO=2F8; IRQ=4
+	IO=2F8; IRQ=3
+	IO=3E8; IRQ=4
+	IO=3E8; IRQ=3
+	IO=2E8; IRQ=4
+	IO=2E8; IRQ=3
+	IO=3F8; IRQ=10
+	IO=3F8; IRQ=5
+	IO=2F8; IRQ=10
+	IO=2F8; IRQ=5
+	IO=3E8; IRQ=10
+	IO=3E8; IRQ=5
+	IO=2E8; IRQ=10
+	IO=2E8; IRQ=5
+Serial Port B
+	*Disabled
+	IO=3F8; IRQ=4
+	IO=3F8; IRQ=3
+	IO=2F8; IRQ=4
+	IO=2F8; IRQ=3
+	IO=3E8; IRQ=4
+	IO=3E8; IRQ=3
+	IO=2E8; IRQ=4
+	IO=2E8; IRQ=3
+	IO=3F8; IRQ=10
+	IO=3F8; IRQ=5
+	IO=2F8; IRQ=10
+	IO=2F8; IRQ=5
+	IO=3E8; IRQ=10
+	IO=3E8; IRQ=5
+	IO=2E8; IRQ=10
+	IO=2E8; IRQ=5
+Parallel Port\Onboard Devices
+	*Disable
+	IO=378; IRQ=7
+	IO=278; IRQ=7
+	IO=3BC; IRQ=7
+	IO=378;
+	IO=278;
+	IO=3BC;
+	IO=378; IRQ=7; DMA=1
+	IO=378; IRQ=7; DMA=3
+	IO=278; IRQ=7; DMA=1
+	IO=278; IRQ=7; DMA=3
+	IO=3BC; IRQ=7; DMA=1
+	IO=3BC; IRQ=7; DMA=3
+Printer Mode
+	Bi-Directional
+	*EPP+ECP
+	Output-Only
+AMT
+	*Enable
+	Disable
+Unconfigure AMT/ME
+	*Disable
+	Enable
+Bypass Unconfigure AMT/ME Prompt
+	*Disable
+	Enable
+WatchDog Timer
+	Disable
+	*Enable
+OS WatchDog Timer
+	5
+BIOS WatchDog Timer
+	5
+PXE Option ROMs
+	Do Not Launch
+	UEFI Only
+	*Legacy Only
+Storage Option ROMs
+	Do Not Launch
+	UEFI Only
+	*Legacy Only
+Video Option ROMs
+	--
+	UEFI Only
+	*Legacy Only
+Connected BIOS
+	Disable
+	*Enable
+Use Proxy
+	*Disable
+	Enable
+Proxy Address
+	
+Update BIOS via Network
+	Disable
+	*Enable
+Update Source
+	Custom
+	*HP
+Update Address
+	
+Automatic BIOS Update Setting
+	*Disable
+	Install all updates automatically
+	Install only important updates automatically
+	Let user decide whether to install updates
+Automatically Check for Updates
+	--
+	Daily
+	Weekly
+	*Monthly
+Force Check on Reboot
+	*Disable
+	Enable

projects/MDT/Scripts/BIOSConfig/HP/Config_Bios_6305_SFF.txt

@@ -0,0 +1,406 @@
+BIOSConfig 1.0
+;
+;     Originally created by BIOS Configuration Utility
+;     Version: 4.0.30.1
+;     Date="2021/06/14" Time="14:32:28" UTC="2"
+;
+;     Found 114 settings
+;
+Product Name
+	HP Compaq Pro 6305 SFF
+SKU Number
+	QZ711AV
+Processor Type
+	AMD A4-5300B APU with Radeon(tm) HD Graphics
+Processor Speed
+	3400 Mhz
+Processor Stepping
+	610F01
+Cache Size (L1/L2/L3)
+	96KB / 1024KB / 0KB
+Memory Size
+	2048 MB DDR3 / 1600 MTs 
+System BIOS
+	K06 v02.44
+Chassis Serial Number
+	CZC32702N5
+Asset Tracking Number
+	CZC32702N5
+Family Name
+	103C_53307F G=D
+Removable Media Boot
+	*Enable
+	Disable
+eSATA Port
+	*Disable
+	Enable
+Max eSATA Speed
+	*Auto
+	1.5 Gbps
+	3.0 Gbps
+SATA Emulation
+	IDE
+	*AHCI
+	RAID
+	Legacy IDE
+EFI Boot Order
+	USB Floppy/CD Disabled
+	USB Hard Drive Disabled
+	ATAPI CD-ROM Drive Disabled
+	Other Disabled
+Legacy Boot Order
+	Network Controller
+	ATAPI CD-ROM Drive
+	USB Floppy/CD
+	Hard Drive
+	PnP Device #1
+	PnP Device #2
+	PnP Device #3
+	PnP Device #4
+	PnP Device #5
+	PnP Device #6
+	PnP Device #7
+	PnP Device #8
+	PnP Device #9
+	PnP Device #10
+	PnP Device #11
+Network Server Mode
+	*Disable
+	Enable
+Setup Browse Mode
+	Disable
+	*Enable
+Stringent Password
+	*Disable
+	Enable
+Password prompt on F9 F11 & F12
+	*Enable
+	Disable
+Cover Lock
+	*Unlock
+	Lock
+Cover Removal Sensor
+	*Disable
+	Notify User
+	--
+	Setup Password
+Front USB Ports
+	*Enable
+	Disable
+Front USB Port 1
+	Disable
+	*Enable
+Front USB Port 2
+	Disable
+	*Enable
+Front USB Port 3
+	Disable
+	*Enable
+Front USB Port 4
+	Disable
+	*Enable
+Rear USB Ports
+	*Enable
+	Disable
+Rear USB3 Port 1
+	Disable
+	*Enable
+Rear USB3 Port 2
+	Disable
+	*Enable
+Rear USB3 Port 3
+	Disable
+	*Enable
+Rear USB3 Port 4
+	Disable
+	*Enable
+Rear USB Port 1
+	Disable
+	*Enable
+Rear USB Port 2
+	Disable
+	*Enable
+Accessory USB Ports
+	*Enable
+	Disable
+Accessory USB Port 1
+	Disable
+	*Enable
+Accessory USB Port 2
+	Disable
+	*Enable
+Accessory USB Port 3
+	Disable
+	*Enable
+Accessory USB Port 4
+	Disable
+	*Enable
+PCI Express x1 Slot 1
+	Disable
+	*Enable
+PCI Express x4 Slot 1
+	Disable
+	*Enable
+PCI Express x16 Slot 1
+	Disable
+	*Enable
+PCI Slot 1
+	Disable
+	*Enable
+System Audio
+	Device hidden
+	*Device available
+Network Controller
+	Device hidden
+	*Device available
+Embedded Security Device
+	Device hidden
+	*Device available
+SATA0
+	*Device available
+	Device hidden
+SATA1
+	*Device available
+	Device hidden
+SATA2
+	*Device available
+	Device hidden
+SATA3
+	*Device available
+	Device hidden
+Network Service Boot
+	Disable
+	*Enable
+Enter Ownership Tag
+	
+Enter UUID
+	A5E3B380-DAE7-11E2-BB71-721563FB5188
+Enter Feature Byte
+	2U3E3V3X47676J6S6a7H7M7Q7T7W7aag.tE
+Enter Build ID
+	12WWKCEW302#SABF#DABF
+MS Digital Marker
+	FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
+Data Execution Prevention
+	Disable
+	*Enable
+SVM CPU Virtualization
+	Disable
+	*Enable
+Activate Embedded Security On Next Boot
+	*Disable
+	Enable
+Embedded Security Activation Policy
+	*F1 to Boot
+	Allow user to reject
+	No prompts
+OS management of Embedded Security Device
+	*Enable
+	Disable
+Reset of Embedded Security Device through OS
+	*Disable
+	Enable
+Master Boot Record Security
+	*Disable
+	Enable
+Legacy Support
+	Disable
+	*Enable
+Secure Boot
+	*Disable
+	Enable
+Clear Secure Boot Keys
+	*Don't Clear
+	Clear
+Key Ownership
+	*HP Keys
+	Custom Keys
+Fast Boot
+	*Disable
+	Enable
+Runtime Power Management
+	Disable
+	*Enable
+Idle Power Savings
+	Normal
+	*Extended
+Unique Sleep State Blink Rates
+	*Disable
+	Enable
+S5 Maximum Power Savings
+	*Disable
+	Enable
+SATA Power Management
+	Disable
+	*Enable
+Fan Idle Mode
+	*+-----
+	++----
+	+++---
+	++++--
+	+++++-
+	++++++
+POST Mode
+	FullBoot
+	FullBoot Every 07 Days
+	FullBoot Every 14 Days
+	FullBoot Every 21 Days
+	FullBoot Every 28 Days
+	Clear Memory
+	*QuickBoot
+POST Messages
+	Enable
+	*Disable
+Press ESC for Startup Menu Prompt
+	*Enable
+	Disable
+System Recovery Boot Support
+	Disable
+	*Enable
+Option ROM Prompt
+	*Enable
+	Disable
+Remote Wakeup Boot Source
+	Remote Server
+	*Local Hard Drive
+After Power Loss
+	*Off
+	On
+	Previous State
+POST Delay (in seconds)
+	*None
+	5
+	10
+	15
+	20
+POST Memory Manager Runtime Allocation
+	*Disable
+	Enable
+Bypass F1 Prompt on Configuration Changes
+	*Disable
+	Enable
+Sunday
+	*Disable
+	Enable
+Monday
+	*Disable
+	Enable
+Tuesday
+	*Disable
+	Enable
+Wednesday
+	*Disable
+	Enable
+Thursday
+	*Disable
+	Enable
+Friday
+	*Disable
+	Enable
+Saturday
+	*Disable
+	Enable
+BIOS Power-On Time (hh:mm)
+	00:00
+PCI SERR# Generation
+	*Disable
+	Enable
+PCI VGA Palette Snooping
+	*Disable
+	Enable
+Printer Mode
+	Bi-Directional
+	*EPP+ECP
+	Output-Only
+Num Lock State at Power-On
+	*Off
+	On
+Integrated Video
+	*Automatic UMA Size
+	Disable
+	Selectable UMA Size
+UMA Size
+	32M
+	64M
+	128M
+	*256M
+	512M
+	1G
+	2G
+Primary Video
+	IGD Video
+	*NB PCIe slot Video
+	SB PCIe slot Video
+Internal Speaker
+	Disable
+	*Enable
+Manufacturing Programming Mode
+	Unlock
+	*Lock
+Serial Port A
+	Disabled
+	*IO=3F8; IRQ=4
+	IO=3F8; IRQ=3
+	IO=2F8; IRQ=4
+	IO=2F8; IRQ=3
+	IO=3E8; IRQ=4
+	IO=3E8; IRQ=3
+	IO=2E8; IRQ=4
+	IO=2E8; IRQ=3
+	IO=3F8; IRQ=6
+	IO=3F8; IRQ=5
+	IO=2F8; IRQ=6
+	IO=2F8; IRQ=5
+	IO=3E8; IRQ=6
+	IO=3E8; IRQ=5
+	IO=2E8; IRQ=6
+	IO=2E8; IRQ=5
+Serial Port B
+	*Disabled
+	IO=3F8; IRQ=4
+	IO=3F8; IRQ=3
+	IO=2F8; IRQ=4
+	IO=2F8; IRQ=3
+	IO=3E8; IRQ=4
+	IO=3E8; IRQ=3
+	IO=2E8; IRQ=4
+	IO=2E8; IRQ=3
+	IO=3F8; IRQ=6
+	IO=3F8; IRQ=5
+	IO=2F8; IRQ=6
+	IO=2F8; IRQ=5
+	IO=3E8; IRQ=6
+	IO=3E8; IRQ=5
+	IO=2E8; IRQ=6
+	IO=2E8; IRQ=5
+DASH Support
+	Disable
+	*Enable
+PXE Option ROMs
+	Do Not Launch
+	UEFI Only
+	*Legacy Only
+Storage Option ROMs
+	Do Not Launch
+	UEFI Only
+	*Legacy Only
+Video Option ROMs
+	--
+	UEFI Only
+	*Legacy Only
+NB RevID
+	0000
+SB RevID
+	0020
+Tpm PPI policy changed by OS allowed
+	*Disable
+	Enable
+Tpm measure boot variables/devices to PCR1
+	*Disable
+	Enable
+Tpm No PPI provisioning
+	*Disable
+	Enable
+Tpm No PPI maintenance
+	*Disable
+	Enable

projects/MDT/Scripts/BIOSConfig/HP/Config_Bios_Pro_6300_SFF.txt

@@ -0,0 +1,434 @@
+BIOSConfig 1.0
+;
+;     Originally created by BIOS Configuration Utility
+;     Version: 4.0.32.1
+;     Date="2021/06/17" Time="09:40:43" UTC="2"
+;
+;     Found 127 settings
+;
+Product Name
+	HP Compaq Pro 6300 SFF
+SKU Number
+	F3W84ES#ABF
+Processor Type
+	Intel(R) Celeron(R) CPU G1610 @ 2.60GHz
+Processor Speed
+	2600 MHz
+Processor Stepping
+	000306A9 00000012
+Cache Size (L1/L2/L3)
+	64KBx2 / 256KBx2 / 2048KBx1
+Memory Size
+	4096 MB DDR3 / 1333 MHz 
+System BIOS
+	K01 v02.90
+Chassis Serial Number
+	CZC33960FR
+Asset Tracking Number
+	CZC33960FR
+Family Name
+	103C_53307F G=D
+ME Firmware Version
+	8.1.31.1351
+ME Management Mode
+	AMT
+Removable Media Boot
+	Disable
+	*Enable
+	Disable USB
+eSATA Port
+	Enable
+	*Disable
+Max eSATA Speed
+	3.0 Gbps
+	*1.5 Gbps
+SATA Emulation
+	IDE
+	--
+	RAID
+	*AHCI
+Hard Drive Boot Order
+	*No Change
+	SATA
+	USB
+EFI Boot Order
+	USB Floppy/CD
+	USB Hard Drive
+	ATAPI CD-ROM Drive
+	Other
+Legacy Boot Order
+	Network Controller
+	Hard Drive
+	ATAPI CD-ROM Drive
+	USB Floppy/CD
+	PnP Device #1
+	PnP Device #2
+	PnP Device #3
+	PnP Device #4
+	PnP Device #5
+	PnP Device #6
+	PnP Device #7
+	PnP Device #8
+	PnP Device #9
+	PnP Device #10
+	PnP Device #11
+Network Server Mode
+	*Disable
+	Enable
+Setup Browse Mode
+	Disable
+	*Enable
+Password prompt on F9 F11 & F12
+	*Enable
+	Disable
+Stringent Password
+	*Disable
+	Enable
+Cover Lock
+	*Unlock
+	Lock
+Cover Removal Sensor
+	*Disable
+	Notify User
+	--
+	Setup Password
+Front USB Ports
+	*Enable
+	Disable
+Front USB Port 1
+	Disable
+	*Enable
+Front USB Port 2
+	Disable
+	*Enable
+Front USB Port 3
+	Disable
+	*Enable
+Front USB Port 4
+	Disable
+	*Enable
+Rear USB Ports
+	*Enable
+	Disable
+Rear USB Port 1
+	Disable
+	*Enable
+Rear USB Port 2
+	Disable
+	*Enable
+Rear USB Port 3
+	Disable
+	*Enable
+Rear USB Port 4
+	Disable
+	*Enable
+Rear USB Port 5
+	Disable
+	*Enable
+Rear USB Port 6
+	Disable
+	*Enable
+Accessory USB Ports
+	*Enable
+	Disable
+Accessory USB Port 1
+	Disable
+	*Enable
+Accessory USB Port 2
+	Disable
+	*Enable
+Accessory USB Port 3
+	Disable
+	*Enable
+Accessory USB Port 4
+	Disable
+	*Enable
+PCI Express x1 Slot 1
+	Disable
+	*Enable
+PCI Express x1 Slot 2
+	Disable
+	*Enable
+PCI Express x16 Slot 1
+	Disable
+	*Enable
+PCI Slot 1
+	Disable
+	*Enable
+System Audio
+	Device hidden
+	*Device available
+Network Controller
+	Device hidden
+	*Device available
+Embedded Security Device
+	Device hidden
+	*Device available
+SATA0
+	Device hidden
+	*Device available
+SATA1
+	Device hidden
+	*Device available
+SATA2
+	Device hidden
+	*Device available
+SATA3
+	Device hidden
+	*Device available
+SATA4
+	Device hidden
+	*Device available
+NB RevID
+	0009
+SB RevID
+	0004
+Network Service Boot
+	Disable
+	*Enable
+Enter Ownership Tag
+	
+Enter UUID
+	09A04000-1F62-11E3-82C2-7446A0C40FB9
+Enter Feature Byte
+	2U2V3E3V3X4766676J6S6b7H7M7Q7T7W7aaQagapaq.tM
+Enter Build ID
+	12WWIDHW610#SABF#DABF
+MS Digital Marker
+	010000000000000001000000000000001D0000004244574A562D584E4332332D57445850342D48484359322D5047563443
+Data Execution Prevention
+	Disable
+	*Enable
+Virtualization Technology (VTx)
+	*Disable
+	Enable
+Virtualization Technology Directed I/O (VTd)
+	*Disable
+	Enable
+Intel TXT(LT) Support
+	*Disable
+	Enable
+Activate Embedded Security On Next Boot
+	*Disable
+	Enable
+Embedded Security Activation Policy
+	F1 to Boot
+	*Allow user to reject
+	No prompts
+OS management of Embedded Security Device
+	*Enable
+	Disable
+Reset of Embedded Security Device through OS
+	*Disable
+	Enable
+Master Boot Record Security
+	*Disable
+	Enable
+Tpm PPI policy changed by OS allowed
+	*Disable
+	Enable
+Tpm measure boot variables/devices to PCR1
+	*Disable
+	Enable
+Tpm No PPI provisioning
+	*Disable
+	Enable
+Tpm No PPI maintenance
+	*Disable
+	Enable
+Legacy Support
+	Disable
+	*Enable
+Secure Boot
+	*Disable
+	Enable
+Clear Secure Boot Keys
+	*Don't Clear
+	Clear
+Key Ownership
+	*HP Keys
+	Custom Keys
+Fast Boot
+	*Disable
+	Enable
+Runtime Power Management
+	Disable
+	*Enable
+Idle Power Savings
+	Normal
+	*Extended
+Unique Sleep State Blink Rates
+	*Disable
+	Enable
+S5 Maximum Power Savings
+	*Disable
+	Enable
+SATA Power Management
+	Disable
+	*Enable
+Fan Idle Mode
+	*+-----
+	++----
+	+++---
+	++++--
+	+++++-
+	++++++
+POST Mode
+	FullBoot
+	FullBoot Every 07 Days
+	FullBoot Every 14 Days
+	FullBoot Every 21 Days
+	FullBoot Every 28 Days
+	Clear Memory
+	*QuickBoot
+POST Messages
+	Enable
+	*Disable
+Press ESC for Startup Menu Prompt
+	*Enable
+	Disable
+System Recovery Boot Support
+	Disable
+	*Enable
+Option ROM Prompt
+	*Enable
+	Disable
+Remote Wakeup Boot Source
+	*Remote Server
+	Local Hard Drive
+After Power Loss
+	*Off
+	On
+	Previous State
+POST Delay (in seconds)
+	*None
+	5
+	10
+	15
+	20
+POST Memory Manager Runtime Allocation
+	*Disable
+	Enable
+Bypass F1 Prompt on Configuration Changes
+	*Disable
+	Enable
+Multi-Processor
+	*Enable
+	Disable
+Hyper-Threading
+	Disable
+	*Enable
+Sunday
+	*Disable
+	Enable
+Monday
+	*Disable
+	Enable
+Tuesday
+	*Disable
+	Enable
+Wednesday
+	*Disable
+	Enable
+Thursday
+	*Disable
+	Enable
+Friday
+	*Disable
+	Enable
+Saturday
+	*Disable
+	Enable
+BIOS Power-On Time (hh:mm)
+	00:00
+PCI SERR# Generation
+	*Disable
+	Enable
+PCI VGA Palette Snooping
+	*Disable
+	Enable
+Printer Mode
+	Bi-Directional
+	*EPP+ECP
+	Output-Only
+Num Lock State at Power-On
+	Off
+	*On
+Integrated Video
+	Disable
+	*Enable
+Internal Speaker
+	Disable
+	*Enable
+SATA RAID Option ROM Download
+	*Enable
+	Disable
+Turbo Mode
+	Disable
+	*Enable
+Manufacturing Programming Mode
+	Unlock
+	*Lock
+Serial Port A
+	Disabled
+	*IO=3F8; IRQ=4
+	IO=3F8; IRQ=3
+	IO=2F8; IRQ=4
+	IO=2F8; IRQ=3
+	IO=3E8; IRQ=4
+	IO=3E8; IRQ=3
+	IO=2E8; IRQ=4
+	IO=2E8; IRQ=3
+	IO=3F8; IRQ=6
+	IO=3F8; IRQ=5
+	IO=2F8; IRQ=6
+	IO=2F8; IRQ=5
+	IO=3E8; IRQ=6
+	IO=3E8; IRQ=5
+	IO=2E8; IRQ=6
+	IO=2E8; IRQ=5
+Serial Port B
+	*Disabled
+	IO=3F8; IRQ=4
+	IO=3F8; IRQ=3
+	IO=2F8; IRQ=4
+	IO=2F8; IRQ=3
+	IO=3E8; IRQ=4
+	IO=3E8; IRQ=3
+	IO=2E8; IRQ=4
+	IO=2E8; IRQ=3
+	IO=3F8; IRQ=6
+	IO=3F8; IRQ=5
+	IO=2F8; IRQ=6
+	IO=2F8; IRQ=5
+	IO=3E8; IRQ=6
+	IO=3E8; IRQ=5
+	IO=2E8; IRQ=6
+	IO=2E8; IRQ=5
+AMT
+	*Enable
+	Disable
+Unconfigure AMT/ME
+	*Disable
+	Enable
+Bypass Unconfigure AMT/ME Prompt
+	*Disable
+	Enable
+WatchDog Timer
+	Disable
+	*Enable
+OS WatchDog Timer
+	5
+BIOS WatchDog Timer
+	5
+PXE Option ROMs
+	*Legacy Only
+	UEFI Only
+	Do Not Launch
+Storage Option ROMs
+	*Legacy Only
+	UEFI Only
+	Do Not Launch
+Video Option ROMs
+	*Legacy Only
+	UEFI Only

projects/MDT/Scripts/BIOSConfig/HP/Config_Bios_Z230.txt

@@ -0,0 +1,492 @@
+BIOSConfig 1.0
+;
+;     Originally created by BIOS Configuration Utility
+;     Version: 4.0.30.1
+;     Date="2021/06/14" Time="12:20:01" UTC="2"
+;
+;     Found 146 settings
+;
+Product Name
+	HP Z230 Tower Workstation
+Manufacturer
+	Hewlett-Packard
+SKU Number
+	D1P34AV
+Processor Type
+	Intel(R) Core(TM) i3-4130 CPU @ 3.40GHz
+Processor Speed
+	3400 MHz
+Processor Stepping
+	000306C3 0000000D
+Memory Size
+	8192 MB DDR3 / 1600 MHz 
+BIOS Version & Date
+	L51 v01.02  06/25/2013
+Born On Date
+	00000000
+Chassis Serial Number
+	CZC3393NHD
+Asset Tracking Number
+	CZC3393NHD
+System Board CT Number
+	
+System Board ID
+	1905
+Family Name
+	103C_53335X G=D
+ME Firmware Version
+	9.0.5.1367
+eSATA Port
+	*Disable
+	Enable
+Max eSATA Speed
+	3.0 Gbps
+	*1.5 Gbps
+SATA Emulation
+	IDE
+	--
+	RAID
+	*AHCI
+Removable Media Boot
+	Disable
+	*Enable
+	Disable USB
+Hard Drive Boot Order
+	*No Change
+	SATA
+	USB
+EFI Boot Order
+	USB Floppy/CD
+	USB Hard Drive
+	ATAPI CD-ROM Drive
+	Network Controller IPv4
+	Network Controller IPv6
+	Other
+Legacy Boot Order
+	ATAPI CD-ROM Drive
+	USB Floppy/CD
+	Hard Drive
+	Network Controller
+	PnP Device #2
+	PnP Device #3
+	PnP Device #4
+	PnP Device #5
+	PnP Device #6
+	PnP Device #7
+	PnP Device #8
+	PnP Device #9
+	PnP Device #10
+	PnP Device #11
+Network Server Mode
+	*Disable
+	Enable
+Setup Browse Mode
+	Disable
+	*Enable
+Password prompt on F9 F11 & F12
+	*Enable
+	Disable
+Stringent Password
+	*Disable
+	Enable
+Cover Lock
+	*Unlock
+	Lock
+Cover Removal Sensor
+	*Disable
+	Notify User
+	--
+	Setup Password
+Front USB Ports
+	*Enable
+	Disable
+Front USB3 Port 1
+	Disable
+	*Enable
+Front USB3 Port 2
+	Disable
+	*Enable
+Front USB Port 3
+	Disable
+	*Enable
+Front USB Port 4
+	Disable
+	*Enable
+Rear USB Ports
+	*Enable
+	Disable
+Rear USB3 Port 1
+	Disable
+	*Enable
+Rear USB3 Port 2
+	Disable
+	*Enable
+Rear USB Port 3
+	Disable
+	*Enable
+Rear USB Port 4
+	Disable
+	*Enable
+Rear USB Port 5
+	Disable
+	*Enable
+Rear USB Port 6
+	Disable
+	*Enable
+Internal USB Ports
+	*Enable
+	Disable
+Accessory USB Port 1
+	Disable
+	*Enable
+Accessory USB Port 2
+	Disable
+	*Enable
+Accessory USB Port 3
+	Disable
+	*Enable
+Accessory USB Port 4
+	Disable
+	*Enable
+Slot 1 - PCI Express x4
+	Disable
+	*Enable
+Slot 2 - PCI Express x16
+	Disable
+	*Enable
+Slot 3 - PCI Express x1
+	Disable
+	*Enable
+Slot 4 - PCI Express x16
+	Disable
+	*Enable
+Slot 5 - PCI
+	Disable
+	*Enable
+System Audio
+	Device hidden
+	*Device available
+Network Controller
+	Device hidden
+	*Device available
+Embedded Security Device
+	Device hidden
+	*Device available
+SATA0
+	Device hidden
+	*Device available
+SATA1
+	Device hidden
+	*Device available
+SATA2
+	Device hidden
+	*Device available
+SATA3
+	Device hidden
+	*Device available
+SATA5
+	Device hidden
+	*Device available
+NB RevID
+	0006
+SB RevID
+	0005
+Network Service Boot
+	Disable
+	*Enable
+Enter Ownership Tag
+	
+Enter UUID
+	EFB21080-1E2E-11E3-B4CE-7446A0B7B8BB
+Enter Feature Byte
+	3Q3X47676J6S6b7N7Q7T7U7W7a8H8haXapaq.fD
+Enter Build ID
+	13WWWDBW602#SABF#DABF
+MS Digital Marker
+	010000000000000001000000000000001D000000594D4842502D4B444E4D582D54323438342D48505148442D4D44544250
+Data Execution Prevention
+	Disable
+	*Enable
+Virtualization Technology (VTx)
+	*Disable
+	Enable
+Virtualization Technology Directed I/O (VTd)
+	*Disable
+	Enable
+Intel TXT(LT) Support
+	*Disable
+	Enable
+Activate Embedded Security On Next Boot
+	*Disable
+	Enable
+Embedded Security Activation Policy
+	F1 to Boot
+	*Allow user to reject
+	No prompts
+OS management of Embedded Security Device
+	*Enable
+	Disable
+Reset of Embedded Security Device through OS
+	*Disable
+	Enable
+Master Boot Record Security
+	*Disable
+	Enable
+Tpm PPI policy changed by OS allowed
+	*Disable
+	Enable
+Tpm measure boot variables/devices to PCR1
+	*Disable
+	Enable
+Tpm No PPI provisioning
+	*Disable
+	Enable
+Tpm No PPI maintenance
+	*Disable
+	Enable
+Legacy Support
+	Disable
+	*Enable
+Secure Boot
+	*Disable
+	Enable
+Clear Secure Boot Keys
+	*Don't Clear
+	Clear
+Key Ownership
+	*HP Keys
+	Custom Keys
+Fast Boot
+	*Disable
+	Enable
+Runtime Power Management
+	Disable
+	*Enable
+Idle Power Savings
+	Normal
+	*Extended
+ACPI S3 PS2 Mouse Wake Up
+	Disable
+	*Enable
+Unique Sleep State Blink Rates
+	*Disable
+	Enable
+S5 Maximum Power Savings
+	*Disable
+	Enable
+SATA Power Management
+	Disable
+	*Enable
+Fan Idle Mode
+	*------
+	+-----
+	++----
+	+++---
+	++++--
+	+++++-
+	++++++
+POST Messages
+	Enable
+	*Disable
+Press ESC for Startup Menu Prompt
+	*Enable
+	Disable
+Factory Recovery Boot Support
+	Disable
+	*Enable
+Option ROM Prompt
+	*Enable
+	Disable
+Remote Wakeup Boot Source
+	Remote Server
+	*Local Hard Drive
+After Power Loss
+	*Off
+	On
+	Previous State
+POST Delay (in seconds)
+	*None
+	5
+	10
+	15
+	20
+POST Memory Manager Runtime Allocation
+	*Disable
+	Enable
+Bypass F1 Prompt on Configuration Changes
+	*Disable
+	Enable
+Sunday
+	*Disable
+	Enable
+Monday
+	*Disable
+	Enable
+Tuesday
+	*Disable
+	Enable
+Wednesday
+	*Disable
+	Enable
+Thursday
+	*Disable
+	Enable
+Friday
+	*Disable
+	Enable
+Saturday
+	*Disable
+	Enable
+BIOS Power-On Time (hh:mm)
+	00:00
+PCI SERR# Generation
+	Disable
+	*Enable
+PCI VGA Palette Snooping
+	*Disable
+	Enable
+Turbo Mode
+	Disable
+	*Enable
+Num Lock State at Power-On
+	*Off
+	On
+S5 Wake on LAN
+	*Enable
+	Disable
+Integrated Video
+	*Disable
+	Enable
+IGD Memory
+	32M
+	*64M
+	128M
+	256M
+	512M
+Internal Speaker
+	Disable
+	*Enable
+USB EHCI Port Debug
+	*Disable
+	Enable
+Multi-Processor
+	*Enable
+	Disable
+Hyper-Threading
+	Disable
+	*Enable
+Slot 1 Option ROM Download
+	Disable
+	*Enable
+Slot 2 Option ROM Download
+	Disable
+	*Enable
+Slot 3 Option ROM Download
+	Disable
+	*Enable
+Slot 4 Option ROM Download
+	Disable
+	*Enable
+Slot 5 Option ROM Download
+	Disable
+	*Enable
+Manufacturing Programming Mode
+	Unlock
+	*Lock
+Serial Port A
+	*Disabled
+	IO=3F8; IRQ=4
+	IO=3F8; IRQ=3
+	IO=2F8; IRQ=4
+	IO=2F8; IRQ=3
+	IO=3E8; IRQ=4
+	IO=3E8; IRQ=3
+	IO=2E8; IRQ=4
+	IO=2E8; IRQ=3
+	IO=3F8; IRQ=6
+	IO=3F8; IRQ=5
+	IO=2F8; IRQ=6
+	IO=2F8; IRQ=5
+	IO=3E8; IRQ=6
+	IO=3E8; IRQ=5
+	IO=2E8; IRQ=6
+	IO=2E8; IRQ=5
+Serial Port B
+	*Disabled
+	IO=3F8; IRQ=4
+	IO=3F8; IRQ=3
+	IO=2F8; IRQ=4
+	IO=2F8; IRQ=3
+	IO=3E8; IRQ=4
+	IO=3E8; IRQ=3
+	IO=2E8; IRQ=4
+	IO=2E8; IRQ=3
+	IO=3F8; IRQ=6
+	IO=3F8; IRQ=5
+	IO=2F8; IRQ=6
+	IO=2F8; IRQ=5
+	IO=3E8; IRQ=6
+	IO=3E8; IRQ=5
+	IO=2E8; IRQ=6
+	IO=2E8; IRQ=5
+Printer Mode
+	Bi-Directional
+	*EPP+ECP
+	Output-Only
+AMT
+	*Enable
+	Disable
+Unconfigure AMT/ME
+	*Disable
+	Enable
+Bypass Unconfigure AMT/ME Prompt
+	*Disable
+	Enable
+WatchDog Timer
+	Disable
+	*Enable
+OS WatchDog Timer
+	5
+BIOS WatchDog Timer
+	5
+PXE Option ROMs
+	Do Not Launch
+	UEFI Only
+	*Legacy Only
+Storage Option ROMs
+	Do Not Launch
+	UEFI Only
+	*Legacy Only
+Video Option ROMs
+	--
+	UEFI Only
+	*Legacy Only
+Connected BIOS
+	Disable
+	*Enable
+Use Proxy
+	*Disable
+	Enable
+Proxy Address
+	
+Update BIOS via Network
+	Disable
+	*Enable
+Update Source
+	Custom
+	*HP
+Update Address
+	
+Automatic BIOS Update Setting
+	*Disable
+	Install all updates automatically
+	Install only important updates automatically
+	Let user decide whether to install updates
+Automatically Check for Updates
+	--
+	Daily
+	Weekly
+	*Monthly
+Force Check on Reboot
+	*Disable
+	Enable

projects/MDT/Scripts/BIOSConfig/HP/Config_Bios_Z240.txt

@@ -0,0 +1,597 @@
+BIOSConfig 1.0
+;
+;     Originally created by BIOS Configuration Utility
+;     Version: 4.0.30.1
+;     Date="2021/06/14" Time="12:30:19" UTC="2"
+;
+;     Found 189 settings
+;
+Product Name
+	HP Z240 Tower Workstation
+Processor 1 Type
+	Intel(R) Core(TM) i7-7700 CPU @ 3.60GHz
+Processor 1 Speed
+	3600 MHz
+Processor 1 Cache Size (L1/L2/L3)
+	256 KB / 1 MB / 8 MB
+Processor 1 MicroCode Revision
+	8E
+Processor 1 Stepping
+	B-0/S-0
+Processor 1 DIMM1
+	16 GB Micron
+Processor 1 DIMM2
+	Empty
+Processor 1 DIMM3
+	Empty
+Processor 1 DIMM4
+	Empty
+SBRevID
+	0001
+Serial Number
+	CZC8428740
+SKU Number
+	L8T12AV
+Universally Unique Identifier (UUID)
+	72F2DA3B16D4E8119C43BC0000F60000
+Memory Size
+	16384 MB DDR4 @ 2400 MHz
+System Board CT Number
+	PESRHAACYB43G8
+Product Family
+	103C_53335X G=D
+MS Digital Marker
+	010000000000000001000000000000001D00000047423759332D394E4746472D433338574B2D50514837522D5954444750
+System BIOS Version
+	N51 Ver. 01.72  07/19/2018
+BIOS Build Version
+	0000
+ME Firmware Version
+	11.8.55.3510
+Primary Video BIOS Version
+	nVidia 86.06.77.00.03 
+Super I/O Firmware Version
+	4.13.27
+System Board ID
+	802F
+Integrated MAC Address 1
+	10-E7-C6-2A-E7-54
+Asset Tracking Number
+	CZC842873V
+Ownership Tag
+	
+Feature Byte
+	3Q3X476H6J6S6b7N7Q7T7U7W7a8H8jaUaXapaqaubhdUdpdqfKhZ.fE
+Build ID
+	15WWABPT601#SABF#DABF
+BIOS Rollback Policy
+	*Unrestricted Rollback to older BIOS
+	Restricted Rollback to older BIOS
+Minimum BIOS Version
+	00.00
+Manufacturing Programming Mode
+	Unlock
+	*Lock
+Password Minimum Length
+	8
+At least one symbol is required in Administrator and User passwords
+	*No
+	Yes
+At least one number is required in Administrator and User passwords
+	*No
+	Yes
+At least one upper case character is required in Administrator and User passwords
+	*No
+	Yes
+At least one lower case character is required in Administrator and User passwords
+	*No
+	Yes
+Are spaces allowed in Administrator and User passwords?
+	*No
+	Yes
+Clear password jumper
+	Ignore
+	*Honor
+Prompt for Admin password on F9 (Boot Menu)
+	*Disable
+	Enable
+Prompt for Admin password on F11 (System Recovery)
+	*Disable
+	Enable
+Prompt for Admin password on F12 (Network Boot)
+	*Disable
+	Enable
+Wake on LAN Power-on Password Policy
+	Bypass Password
+	*Require Password
+TPM Specification Version
+	1.2
+TPM Device
+	Hidden
+	*Available
+TPM State
+	Disable
+	*Enable
+Clear TPM
+	*No
+	On next boot
+TPM Activation Policy
+	F1 to Boot
+	*Allow user to reject
+	No prompts
+Verify Boot Block on every boot
+	*Disable
+	Enable
+BIOS Data Recovery Policy
+	*Automatic
+	Manual
+Prompt on Network Controller Configuration Change
+	*Disable
+	Enable
+Lock BIOS Version
+	*Disable
+	Enable
+Dynamic Runtime Scanning of Boot Block
+	Disable
+	*Enable
+Physical Presence Interface
+	Disable
+	*Enable
+Drivelock Password on restart
+	Disable
+	*Enable
+Save/Restore MBR of System Hard Drive
+	*Disabled
+	Enabled
+Secure Erase Hard Disk Serial Number
+	
+Secure Erase Hard Disk Model Number
+	
+Secure Erase Completion Date
+	
+Secure Erase Completion Status
+	
+Permanent Disable Absolute Persistence Module Set Once
+	*No
+	Yes
+Absolute Persistence Module Current State
+	*Inactive
+	Active
+System Management Command
+	Disable
+	*Enable
+SureStart Production Mode
+	Disable
+	*Enable
+Select Language
+	*English
+	Deutsch
+	Espanol
+	Italiano
+	Francais
+	Japanese
+	Portugues
+	Dansk
+	Svenska
+	Nederlands
+	Norsk
+	Suomi
+	Simplified Chinese
+	Traditional Chinese
+Select Keyboard Layout
+	*English
+	Deutsch
+	Espanol
+	Italiano
+	Francais
+	Japanese
+	Portugues
+	Dansk
+	Svenska
+	Nederlands
+	Norsk
+	Suomi
+	Simplified Chinese
+	Traditional Chinese
+Sunday
+	*Disable
+	Enable
+Monday
+	*Disable
+	Enable
+Tuesday
+	*Disable
+	Enable
+Wednesday
+	*Disable
+	Enable
+Thursday
+	*Disable
+	Enable
+Friday
+	*Disable
+	Enable
+Saturday
+	*Disable
+	Enable
+BIOS Power-On Hour
+	0
+BIOS Power-On Minute
+	0
+Startup Menu Delay (sec.)
+	*0
+	5
+	10
+	15
+	20
+	25
+	30
+	35
+	40
+	45
+	50
+	55
+	60
+Fast Boot
+	Disable
+	*Enable
+Audio Alerts During Boot
+	Disable
+	*Enable
+After Power Loss
+	*Power Off
+	Power On
+	Previous State
+NumLock on at boot
+	Disable
+	*Enable
+CD-ROM Boot
+	Disable
+	*Enable
+Prompt on Memory Size Change
+	Disabled
+	*Enabled
+USB Storage Boot
+	*Disable
+	Enable
+Network (PXE) Boot
+	Disable
+	*Enable
+Prompt on Fixed Storage Change
+	Disabled
+	*Enabled
+Legacy Boot Options
+	Disable
+	*Enable
+Legacy Boot Order
+	HDD:USB:1
+	CDROM:SATA:1
+	HDD:SATA:1
+	HDD:SATA:2
+	NETWORK:EMBEDDED:1
+UEFI Boot Options
+	*Disable
+	Enable
+UEFI Boot Order
+	HDD:USB:1
+	CDROM:SATA:1
+Configure Legacy Support and Secure Boot
+	*Legacy Support Enable and Secure Boot Disable
+	Legacy Support Disable and Secure Boot Enable
+	Legacy Support Disable and Secure Boot Disable
+Import Custom Secure Boot keys
+	*Do Nothing
+	On next boot
+Clear Secure Boot keys
+	*Disable
+	Enable
+Reset Secure Boot keys to factory defaults
+	*Disable
+	Enable
+Enable MS UEFI CA key
+	*No
+	Yes
+Ready to disable MS UEFI CA Key
+	Not Ready
+	*Ready
+Custom Keys Image Verification State
+	*No Custom Keys
+	Fail
+	Success
+Configure Storage Controller for RAID
+	*Disable
+	Enable
+NVMe Write Endurance Masking
+	*Disable
+	Enable
+Early PCIe Delay
+	*Disable
+	Enable
+Accelerate USB Enumeration
+	*Disable
+	Enable
+Audio Device
+	Disable
+	*Enable
+Embedded LAN controller
+	Disable
+	*Enable
+Wake On LAN
+	Disabled
+	*Boot to Network
+	Boot to Hard Drive
+	Boot to Normal Boot Order
+Internal Speakers
+	Disable
+	*Enable
+Runtime Power Management
+	Disable
+	*Enable
+Extended Idle Power States
+	Disable
+	*Enable
+S4/S5 Maximum Power Savings
+	*Disable
+	Enable
+SATA Power Management
+	Disable
+	*Enable
+Dust Filter
+	*Disable
+	Enable
+Dust Filter Reminder (Days)
+	15
+	30
+	*60
+	90
+	120
+	180
+Integrated Video
+	*Disable
+	Enable
+SATA0
+	Device hidden
+	*Device available
+SATA1
+	Device hidden
+	*Device available
+SATA2
+	Device hidden
+	*Device available
+SATA3
+	Device hidden
+	*Device available
+M.2
+	Device hidden
+	*Device available
+eSATA Port
+	*Disable
+	Enable
+Front USB Ports
+	Disable
+	*Enable
+Rear USB Ports
+	Disable
+	*Enable
+Restrict USB Devices
+	*Allow all USB Devices
+	Allow only keyboard and mouse
+	Allow all but storage devices and hubs
+USB Charging Ports
+	Disable
+	*Enable
+Power Button Override
+	Disable
+	*4 sec
+	15 sec
+Front USB Port 1
+	Disable
+	*Enable
+Front USB Port 2
+	Disable
+	*Enable
+Front USB Port 3
+	Disable
+	*Enable
+Front USB Port 4
+	Disable
+	*Enable
+Rear USB Port 1
+	Disable
+	*Enable
+Rear USB Port 2
+	Disable
+	*Enable
+Rear USB Port 3
+	Disable
+	*Enable
+Rear USB Port 4
+	Disable
+	*Enable
+Rear USB Port 5
+	Disable
+	*Enable
+Rear USB Port 6
+	Disable
+	*Enable
+Accessory USB Port 1
+	Disable
+	*Enable
+Accessory USB Port 2
+	Disable
+	*Enable
+Configure Option ROM Launch Policy
+	*All Legacy
+	All UEFI
+	All UEFI Except Video
+Intel Software Guard Extensions (SGX)
+	Disable
+	Enable
+	*Software Controlled
+Turbo-boost
+	Disable
+	*Enable
+Hyperthreading
+	Disable
+	*Enable
+Multi-processor
+	Disable
+	*Enable
+POST Prompt for RAID Configuration
+	Disable
+	*Enable
+Virtualization Technology (VTx)
+	Disable
+	*Enable
+Virtualization Technology for Directed I/O (VTd)
+	Disable
+	*Enable
+Trusted Execution Technology (TXT)
+	*Disable
+	Enable
+Increase Idle Fan Speed(%)
+	0
+Unique Sleep State Blink Rates
+	*Disable
+	Enable
+Active Management (AMT)
+	Disable
+	*Enable
+USB Key Provisioning Support
+	*Disable
+	Enable
+Unconfigure AMT on next boot
+	*Do Not Apply
+	Apply
+SOL Terminal Emulation Mode
+	*ANSI
+	VT100
+Verbose Boot Messages
+	*Disable
+	Enable
+Watchdog Timer
+	*Disable
+	Enable
+OS Watchdog Timer (min.)
+	*5
+	10
+	15
+	20
+	25
+BIOS Watchdog Timer (min.)
+	*5
+	10
+	15
+	20
+	25
+USB Redirection Support
+	Disable
+	*Enable
+Show Unconfigure ME Confirmation Prompt
+	Disable
+	*Enable
+CIRA Timeout (min.)
+	*1 min
+	2 mins
+	3 mins
+	4 mins
+	Never
+Slot 1 Option ROM Download
+	Disable
+	*Enable
+Slot 2 Option ROM Download
+	Disable
+	*Enable
+Slot 3 Option ROM Download
+	Disable
+	*Enable
+Slot 4 Option ROM Download
+	Disable
+	*Enable
+Slot 1 Speed
+	*Gen3
+	Gen1
+	Gen2
+Slot 2 Speed
+	*Gen3
+	Gen1
+	Gen2
+Slot 3 Speed
+	*Gen3
+	Gen1
+	Gen2
+Slot 4 Speed
+	*Gen3
+	Gen1
+	Gen2
+PCI Express x1 Slot 1
+	Disable
+	*Enable
+PCI Express x16 Slot 2
+	Disable
+	*Enable
+PCI Express x4 Slot 3
+	Disable
+	*Enable
+PCI Express x4 Slot 4
+	Disable
+	*Enable
+Allow PCIe/PCI SERR# Interrupt
+	Disable
+	*Enable
+BIOS Source
+	*HP
+	Custom
+Automatically Check for Updates
+	Daily
+	Weekly
+	*Monthly
+Automatic BIOS Update Setting
+	*Disable
+	Let user decide whether to install updates
+	Install all updates automatically
+	Install only important updates automatically
+Update Address
+	
+Check for Update on Next Reboot
+	*Disable
+	Enable
+Update BIOS via Network
+	Disable
+	*Enable
+Use Proxy
+	*Disable
+	Enable
+Proxy Address
+	
+DNS Configuration
+	*Automatic
+	Manual
+DNS Addresses
+	
+Data transfer timeout
+	30
+IPv4 Address
+	
+IPv4 Configuration
+	*Automatic
+	Manual
+IPv4 Gateway
+	
+IPv4 Subnet Mask
+	
+Connected BIOS
+	Disable
+	*Enable
+Force HTTP no-cache
+	*Disable
+	Enable
+Save Custom Defaults
+	*Do not Save
+	Save
+Apply Custom Defaults and Exit
+	*No
+	Yes
+Apply Factory Defaults and Exit
+	*No
+	Yes

projects/MDT/Scripts/BIOSConfig/HP/Configure_OptionWOL.txt

@@ -0,0 +1,14 @@
+BIOSConfig 1.0
+;
+;
+Remote Wake up Boot Source
+	Remote Server
+	*Local Hard Drive
+Wake On LAN
+	Disabled
+	Boot to Network
+	*Boot to Hard Drive
+	Boot to Normal Boot Order
+Remote Wakeup Boot Source
+	Remote Server
+	*Local Hard Drive

projects/MDT/Scripts/BIOSConfig/HP/Configure_VideoMemory.txt

@@ -0,0 +1,7 @@
+BIOSConfig 1.0
+Video Memory Size
+	32 MB
+	64 MB
+	*128 MB
+	256 MB
+	512 MB

projects/MDT/Scripts/BIOSConfig/HP/Disable_OptionWOL.txt

@@ -0,0 +1,12 @@
+BIOSConfig 1.0
+;
+;
+Fast Boot
+	*Disable
+	Enable
+S5 Maximum Power Savings
+	*Disable
+	Enable
+S4/S5 Maximum Power Savings
+	*Disable
+	Enable

projects/MDT/Scripts/BIOSConfig/HP/Enable_OptionWOL.txt

@@ -0,0 +1,6 @@
+BIOSConfig 1.0
+;
+;
+S5 Wake on LAN
+	*Enable
+	Disable

projects/MDT/Scripts/BIOSConfig/HP/Enable_SecureBoot.txt

@@ -0,0 +1,7 @@
+BIOSConfig 1.0
+;
+;
+Configure Legacy Support and Secure Boot
+	Legacy Support Enable and Secure Boot Disable
+	*Legacy Support Disable and Secure Boot Enable
+	Legacy Support Disable and Secure Boot Disable

projects/MDT/Scripts/BIOSConfig/HP/Enable_TPM.txt

@@ -0,0 +1,21 @@
+BIOSConfig 1.0
+;
+;
+TPM Specification Version
+	1.2
+TPM Device
+	Hidden
+	*Available
+TPM State
+	Disable
+	*Enable
+Activate TPM On Next Boot
+	Disable
+	*Enable
+Clear TPM
+	*No
+	On next boot
+TPM Activation Policy
+	F1 to Boot
+	Allow user to reject
+	*No prompts

projects/MDT/Scripts/BIOSConfig/HP/Enable_Virtualization.txt

@@ -0,0 +1,7 @@
+BIOSConfig 1.0
+Virtualization Technology for Directed I/O (VTd)
+	Disable
+	*Enable
+Virtualization Technology (VTx)
+	Disable
+	*Enable

projects/MDT/Scripts/BIOSConfig/HP/Enable_WLANSwitching.txt

@@ -0,0 +1,4 @@
+BIOSConfig 1.0
+LAN / WLAN Auto Switching
+	Disable
+	*Enable

projects/MDT/Scripts/BIOSConfig/HP/HP6300SFF.txt

@@ -0,0 +1,437 @@
+BIOSConfig 1.0
+;
+;     Originally created by BIOS Configuration Utility
+;     Version: 4.0.32.1
+;     Date="2021/07/22" Time="13:59:26" UTC="2"
+;
+;     Found 128 settings
+;
+Product Name
+	HP Compaq Pro 6300 SFF
+SKU Number
+	F3W84ES#ABF
+Processor Type
+	Intel(R) Pentium(R) CPU G645 @ 2.90GHz
+Processor Speed
+	2900 MHz
+Processor Stepping
+	000206A7 00000028
+Cache Size (L1/L2/L3)
+	64KBx2 / 256KBx2 / 3072KBx1
+Memory Size
+	8192 MB DDR3 / 1333 MHz 
+System BIOS
+	K01 v02.90
+Chassis Serial Number
+	CZC3396FWQ
+Asset Tracking Number
+	CZC3396FWQ
+Family Name
+	103C_53307F G=D
+ME Firmware Version
+	8.1.31.1351
+ME Management Mode
+	AMT
+Removable Media Boot
+	Disable
+	*Enable
+	Disable USB
+eSATA Port
+	Enable
+	*Disable
+Max eSATA Speed
+	3.0 Gbps
+	*1.5 Gbps
+SATA Emulation
+	IDE
+	--
+	RAID
+	*AHCI
+Hard Drive Boot Order
+	*No Change
+	SATA
+	USB
+EFI Boot Order
+	USB Floppy/CD
+	USB Hard Drive
+	ATAPI CD-ROM Drive
+	Other
+Legacy Boot Order
+	USB Floppy/CD
+	Hard Drive
+	Network Controller
+	ATAPI CD-ROM Drive
+	PnP Device #1
+	PnP Device #2
+	PnP Device #3
+	PnP Device #4
+	PnP Device #5
+	PnP Device #6
+	PnP Device #7
+	PnP Device #8
+	PnP Device #9
+	PnP Device #10
+	PnP Device #11
+Network Server Mode
+	*Disable
+	Enable
+Setup Browse Mode
+	Disable
+	*Enable
+Password prompt on F9 F11 & F12
+	*Enable
+	Disable
+Stringent Password
+	*Disable
+	Enable
+Cover Lock
+	*Unlock
+	Lock
+Cover Removal Sensor
+	*Disable
+	Notify User
+	--
+	Setup Password
+Front USB Ports
+	*Enable
+	Disable
+Front USB Port 1
+	Disable
+	*Enable
+Front USB Port 2
+	Disable
+	*Enable
+Front USB Port 3
+	Disable
+	*Enable
+Front USB Port 4
+	Disable
+	*Enable
+Rear USB Ports
+	*Enable
+	Disable
+Rear USB Port 1
+	Disable
+	*Enable
+Rear USB Port 2
+	Disable
+	*Enable
+Rear USB Port 3
+	Disable
+	*Enable
+Rear USB Port 4
+	Disable
+	*Enable
+Rear USB Port 5
+	Disable
+	*Enable
+Rear USB Port 5
+	Disable
+	*Enable
+Rear USB Port 6
+	Disable
+	*Enable
+Accessory USB Ports
+	*Enable
+	Disable
+Accessory USB Port 2
+	Disable
+	*Enable
+Accessory USB Port 3
+	Disable
+	*Enable
+Accessory USB Port 4
+	Disable
+	*Enable
+PCI Express x1 Slot 1
+	Disable
+	*Enable
+PCI Express x1 Slot 2
+	Disable
+	*Enable
+PCI Express x16 Slot 1
+	Disable
+	*Enable
+PCI Slot 1
+	Disable
+	*Enable
+System Audio
+	Device hidden
+	*Device available
+Network Controller
+	Device hidden
+	*Device available
+Embedded Security Device
+	Device hidden
+	*Device available
+SATA0
+	Device hidden
+	*Device available
+SATA1
+	Device hidden
+	*Device available
+SATA2
+	Device hidden
+	*Device available
+SATA3
+	Device hidden
+	*Device available
+SATA4
+	Device hidden
+	*Device available
+NB RevID
+	0009
+SB RevID
+	0004
+Network Service Boot
+	Disable
+	*Enable
+Enter Ownership Tag
+	
+Enter UUID
+	BF13C900-1F4B-11E3-A46C-7446A0C31AE3
+Enter Feature Byte
+	2U2V3E3V3X4766676J6S6b7H7M7Q7T7W7aaQagapaq.tM
+Enter Build ID
+	12WWIDHW610#SABF#DABF
+MS Digital Marker
+	010000000000000001000000000000001D00000054593257502D4E515843362D57475156462D34343336542D5850373443
+Data Execution Prevention
+	Disable
+	*Enable
+Virtualization Technology (VTx)
+	*Disable
+	Enable
+Virtualization Technology Directed I/O (VTd)
+	*Disable
+	Enable
+Intel TXT(LT) Support
+	*Disable
+	Enable
+Activate Embedded Security On Next Boot
+	*Disable
+	Enable
+Embedded Security Activation Policy
+	F1 to Boot
+	*Allow user to reject
+	No prompts
+OS management of Embedded Security Device
+	*Enable
+	Disable
+OS management of Embedded Security Device
+	*Enable
+	Disable
+Reset of Embedded Security Device through OS
+	*Disable
+	Enable
+Master Boot Record Security
+	*Disable
+	Enable
+Tpm PPI policy changed by OS allowed
+	*Disable
+	Enable
+Tpm measure boot variables/devices to PCR1
+	*Disable
+	Enable
+Tpm No PPI provisioning
+	*Disable
+	Enable
+Tpm No PPI maintenance
+	*Disable
+	Enable
+Secure Boot
+	*Disable
+	Enable
+Clear Secure Boot Keys
+	*Don't Clear
+	Clear
+Key Ownership
+	*HP Keys
+	Custom Keys
+Fast Boot
+	*Disable
+	Enable
+Runtime Power Management
+	Disable
+	*Enable
+Idle Power Savings
+	Normal
+	*Extended
+Unique Sleep State Blink Rates
+	*Disable
+	Enable
+S5 Maximum Power Savings
+	Disable
+	*Enable
+SATA Power Management
+	Disable
+	*Enable
+Fan Idle Mode
+	*+-----
+	++----
+	+++---
+	++++--
+	+++++-
+	++++++
+POST Mode
+	FullBoot
+	FullBoot Every 07 Days
+	FullBoot Every 14 Days
+	FullBoot Every 21 Days
+	FullBoot Every 28 Days
+	Clear Memory
+	*QuickBoot
+POST Messages
+	Enable
+	*Disable
+Press ESC for Startup Menu Prompt
+	*Enable
+	Disable
+System Recovery Boot Support
+	*Disable
+	Enable
+Option ROM Prompt
+	*Enable
+	Disable
+Remote Wakeup Boot Source
+	Remote Server
+	*Local Hard Drive
+After Power Loss
+	*Off
+	On
+	Previous State
+POST Delay (in seconds)
+	*None
+	5
+	10
+	15
+	20
+POST Memory Manager Runtime Allocation
+	*Disable
+	Enable
+Bypass F1 Prompt on Configuration Changes
+	*Disable
+	Enable
+Multi-Processor
+	*Enable
+	Disable
+Hyper-Threading
+	Disable
+	*Enable
+Sunday
+	*Disable
+	Enable
+Sunday
+	*Disable
+	Enable
+Monday
+	*Disable
+	Enable
+Tuesday
+	*Disable
+	Enable
+Wednesday
+	*Disable
+	Enable
+Thursday
+	*Disable
+	Enable
+Friday
+	*Disable
+	Enable
+Saturday
+	*Disable
+	Enable
+BIOS Power-On Time (hh:mm)
+	00:00
+PCI SERR# Generation
+	Disable
+	*Enable
+PCI VGA Palette Snooping
+	*Disable
+	Enable
+Printer Mode
+	Bi-Directional
+	*EPP+ECP
+	Output-Only
+Num Lock State at Power-On
+	*Off
+	On
+Integrated Video
+	Disable
+	*Enable
+Internal Speaker
+	Disable
+	*Enable
+SATA RAID Option ROM Download
+	*Enable
+	Disable
+Turbo Mode
+	Disable
+	*Enable
+Manufacturing Programming Mode
+	Unlock
+	*Lock
+Serial Port A
+	Disabled
+	*IO=3F8; IRQ=4
+	IO=3F8; IRQ=3
+	IO=2F8; IRQ=4
+	IO=2F8; IRQ=3
+	IO=3E8; IRQ=4
+	IO=3E8; IRQ=3
+	IO=2E8; IRQ=4
+	IO=2E8; IRQ=3
+	IO=3F8; IRQ=6
+	IO=3F8; IRQ=5
+	IO=2F8; IRQ=6
+	IO=2F8; IRQ=5
+	IO=3E8; IRQ=6
+	IO=3E8; IRQ=5
+	IO=2E8; IRQ=6
+	IO=2E8; IRQ=5
+Serial Port B
+	Disabled
+	IO=3F8; IRQ=4
+	IO=3F8; IRQ=3
+	IO=2F8; IRQ=4
+	*IO=2F8; IRQ=3
+	IO=3E8; IRQ=4
+	IO=3E8; IRQ=3
+	IO=2E8; IRQ=4
+	IO=2E8; IRQ=3
+	IO=3F8; IRQ=6
+	IO=3F8; IRQ=5
+	IO=2F8; IRQ=6
+	IO=2F8; IRQ=5
+	IO=3E8; IRQ=6
+	IO=3E8; IRQ=5
+	IO=2E8; IRQ=6
+	IO=2E8; IRQ=5
+AMT
+	*Enable
+	Disable
+Unconfigure AMT/ME
+	*Disable
+	Enable
+Bypass Unconfigure AMT/ME Prompt
+	*Disable
+	Enable
+WatchDog Timer
+	Disable
+	*Enable
+OS WatchDog Timer
+	5
+BIOS WatchDog Timer
+	5
+PXE Option ROMs
+	*Legacy Only
+	UEFI Only
+	Do Not Launch
+Storage Option ROMs
+	*Legacy Only
+	UEFI Only
+	Do Not Launch
+Video Option ROMs
+	*Legacy Only
+	UEFI Only

projects/MDT/Scripts/BIOSConfig/HP/HP_Bios_Config_OK_6300-5_SFF.csv

@@ -0,0 +1,172 @@
+#TYPE Selected.System.Management.Automation.PSCustomObject
+"Setting","Value"
+"Setup Language","English"
+"Removable Media Boot","Enable"
+"eSATA Port","Disable"
+"Max eSATA Speed","Auto"
+"SATA Emulation","AHCI"
+"Lock Legacy Resources","Disable"
+"Network Server Mode","Disable"
+"Setup Browse Mode","Enable"
+"Stringent Password","Disable"
+"Password prompt on F9 F11 & F12","Enable"
+"Cover Lock","Unlock"
+"Cover Removal Sensor","Disable"
+"Front USB Ports","Enable"
+"Front USB Port 1","Enable"
+"Front USB Port 2","Enable"
+"Front USB Port 3","Enable"
+"Front USB Port 4","Enable"
+"Rear USB Ports","Enable"
+"Rear USB3 Port 1","Enable"
+"Rear USB3 Port 2","Enable"
+"Rear USB3 Port 3","Enable"
+"Rear USB3 Port 4","Enable"
+"Rear USB Port 1","Enable"
+"Rear USB Port 2","Enable"
+"Accessory USB Ports","Enable"
+"Accessory USB Port 1","Enable"
+"Accessory USB Port 2","Enable"
+"Accessory USB Port 3","Enable"
+"Accessory USB Port 4","Enable"
+"PCI Express x1 Slot 1","Enable"
+"PCI Express x4 Slot 1","Enable"
+"PCI Express x16 Slot 1","Enable"
+"PCI Slot 1","Enable"
+" "," "
+" "," "
+" "," "
+" "," "
+"System Audio","Device available"
+"Network Controller","Device available"
+"Embedded Security Device","Device available"
+"SATA0","Device available"
+"SATA1","Device available"
+"SATA2","Device available"
+"SATA3","Device available"
+"Network Service Boot","Enable"
+"Data Execution Prevention","Enable"
+"SVM CPU Virtualization","Enable"
+"Activate Embedded Security On Next Boot","Disable"
+"Embedded Security Activation Policy","F1 to Boot"
+"OS management of Embedded Security Device","Enable"
+"Reset of Embedded Security Device through OS","Disable"
+"Master Boot Record Security","Disable"
+"Legacy Support","Enable"
+"Secure Boot","Disable"
+"Clear Secure Boot Keys","Don't Clear"
+"Key Ownership","HP Keys"
+"Fast Boot","Disable"
+"Runtime Power Management","Enable"
+"Idle Power Savings","Extended"
+"Unique Sleep State Blink Rates","Disable"
+"S5 Maximum Power Savings","Disable"
+"SATA Power Management","Enable"
+"Fan Idle Mode","+-----"
+"POST Mode","QuickBoot"
+"POST Messages","Disable"
+"Press ESC for Startup Menu Prompt","Enable"
+"System Recovery Boot Support","Enable"
+"Option ROM Prompt","Enable"
+"Remote Wakeup Boot Source","Remote Server"
+"After Power Loss","Off"
+"POST Delay (in seconds)","None"
+"POST Memory Manager Runtime Allocation","Disable"
+" "," "
+"Bypass F1 Prompt on Configuration Changes","Disable"
+"Sunday","Disable"
+"Monday","Disable"
+"Tuesday","Disable"
+"Wednesday","Disable"
+"Thursday","Disable"
+"Friday","Disable"
+"Saturday","Disable"
+"PCI SERR# Generation","Disable"
+"PCI VGA Palette Snooping","Disable"
+"Printer Mode","EPP+ECP"
+"Num Lock State at Power-On","On"
+"Integrated Video","Automatic UMA Size"
+"UMA Size","256M"
+"Primary Video","NB PCIe slot Video"
+"Internal Speaker","Enable"
+" "," "
+" "," "
+" "," "
+"Manufacturing Programming Mode","Lock"
+"Serial Port A","IO=3F8; IRQ=4"
+"Serial Port B","Disabled"
+"DASH Support","Disable"
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+"PXE Option ROMs","Legacy Only"
+"Storage Option ROMs","Legacy Only"
+"Video Option ROMs","Legacy Only"
+"Tpm PPI policy changed by OS allowed","Disable"
+"Tpm measure boot variables/devices to PCR1","Disable"
+"Tpm No PPI provisioning","Disable"
+"Tpm No PPI maintenance","Disable"
+"Default Setup","Leave Defaults As Is (No Update)"
+"Apply Defaults and Exit","Do Not Apply"
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+"Parallel Port\Onboard Devices","Disable"
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "
+" "," "

projects/MDT/Scripts/BIOSConfig/HP/HP_Bios_Config_WOL_6300-5_SFF.csv

@@ -0,0 +1,4 @@
+#TYPE Selected.System.Management.Automation.PSCustomObject
+"Fast Boot","Disable"
+"S5 Maximum Power Savings","Disable"
+"S5 Wake on LAN","Enable"

projects/MDT/Scripts/BIOSConfig/HP/Key_Config_S5_Wol.ps1

@@ -0,0 +1,36 @@
+<#
+        .SYNOPSIS
+            Déactivation du démarrage rapide
+        
+        .DESCRIPTION
+            0 pour désactiver
+            1 pour activer
+
+        .PARAMETER 
+            
+        
+        .EXAMPLE
+            
+
+        .NOTES
+            Auteurs :
+            Aurélien Hamez - Service Exploitation - Secteur Roubaix-Tourcoing
+            Région Hauts de France
+#>
+
+$PathKey = "HKLM:\SYSTEM\CurrentControlSet\Services\NDIS\Parameters\"
+$Key = "AllowWakeFromS5"
+
+$Value = Get-ItemProperty $PathKey -Name $Key -ErrorAction SilentlyContinue
+if ($Value){
+    $ValueKey = Get-ItemPropertyValue -Path $PathKey -Name $Key    
+    If ($ValueKey -ne 1)
+	    {
+		    Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\NDIS\Parameters" -Name AllowWakeFromS5 -Type DWORD -Value 00000001
+	    }
+}
+else{
+		New-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\NDIS\Parameters\" -Name AllowWakeFromS5 -Type DWORD -Value 00000001
+}
+
+

projects/MDT/Scripts/BIOSConfig/HP/Set-HPConfiguration.ps1

@@ -0,0 +1,59 @@
+<#
+.DESCRIPTION
+Sets HP WOL configuration
+    
+.NOTES
+
+Author: Daniel Classon
+Adpater par: Aurelien HAMEZ
+Version: 1.0
+Date: 2021-06-22
+
+    
+.EXAMPLE
+.\Set-HPConfiguration.ps1 -Enable TPM
+
+#>
+
+Param(
+    [Parameter(Mandatory=$False)]
+    [string]$Enable,
+    [Parameter(Mandatory=$False)]
+    [string]$Disable,
+    [Parameter(Mandatory=$False)]
+	[string]$Configure,
+	[Parameter(Mandatory=$False)]
+    [string]$New_PasswordFile = "new_password.bin"
+)
+
+Begin {
+
+    switch ($Configure)
+    {
+        'VideoMemory' {$ConfigFile="$PSScriptRoot\Configure_VideoMemory.txt"}
+		'OptionWOL' {$ConfigFile="$PSScriptRoot\Configure_OptionWOL.txt"}
+        Default {}
+    }
+
+    switch ($Enable)
+    {
+        'SecureBoot' {$ConfigFile="$PSScriptRoot\Enable_SecureBoot.txt"}
+        'TPM' {$ConfigFile="$PSScriptRoot\Enable_TPM.txt"}
+        'Virtualization' {$ConfigFile="$PSScriptRoot\Enable_Virtualization.txt"}
+        'WLANSwitching' {$ConfigFile="$PSScriptRoot\Enable_WLANSwitching.txt"}
+		'EnableWOL' {$ConfigFile="$PSScriptRoot\Enable_OptionWOL.txt"}
+        Default {}
+    }
+	switch ($Disable)
+    {
+        'Virtualization' {$ConfigFile="$PSScriptRootDisable_Virtualization.txt"}
+		'DisableWOL' {$ConfigFile="$PSScriptRoot\Disable_OptionWOL.txt"}
+        Default {}
+	}
+}
+Process {
+	#On configure le mot de passe si vide
+    $process = Start-Process -FilePath "$PSScriptRoot\BiosConfigUtility64.exe" -ArgumentList "`"/cpwdfile:$PSScriptRoot\$New_PasswordFile`"", "`"/set:$ConfigFile`"", "/log" -Wait -PassThru
+}
+End {
+}           

projects/MDT/Scripts/BIOSConfig/HP/Set-HPPwd.ps1

@@ -0,0 +1,58 @@
+<#
+.DESCRIPTION
+Set HP Password Bios
+    
+.NOTES
+
+Author: Aurelien HAMEZ & Patrick Pattyn
+Version: 1.0
+Date: 2021-07-22
+
+    
+.EXAMPLE
+.\Set-HPPwd.ps1
+
+#>
+
+Param(
+	[Parameter(Mandatory=$False)]
+    [string]$New_PasswordFile = "new_password.bin",
+	[Parameter(Mandatory=$False)]
+    [string]$PasswordFile1 = "password1.bin",
+	[Parameter(Mandatory=$False)]
+	[string]$PasswordFile2 = "password2.bin",
+	[Parameter(Mandatory=$False)]
+	[string]$PasswordFile3 = "password3.bin",
+	[Parameter(Mandatory=$False)]
+	[string]$PasswordFile4 = "password4.bin",
+	[Parameter(Mandatory=$False)]
+	[string]$PasswordFile5 = "password5.bin",
+	[Parameter(Mandatory=$False)]
+	[string]$PasswordFile6 = "password6.bin",
+	[Parameter(Mandatory=$False)]
+	[string]$PasswordFile7 = "password7.bin"
+)
+
+Begin {
+	#On initialise les différents mots de passe
+	$MDPs = $PasswordFile1, $PasswordFile2, $PasswordFile3, $PasswordFile4, $PasswordFile5, $PasswordFile6, $PasswordFile7
+}
+Process {	
+	#On configure le mot de passe si vide
+    $process = Start-Process -FilePath "$PSScriptRoot\BiosConfigUtility64.exe" -ArgumentList "`"/nspwdfile:$PSScriptRoot\$New_PasswordFile`"", "/log" -Wait -PassThru
+	
+	#Si le mot de passe est configuré, le code erreur 10 est retourné, on test différent mot de passe, lorsqu'il est modifié, l'ExitCode 0 = Success est retourné. On sort.
+	if($process.ExitCode -eq 10)
+	{
+		Foreach($MDP in $MDPs)
+		{
+			$process = Start-Process -FilePath "$PSScriptRoot\BiosConfigUtility64.exe" -ArgumentList "`"/nspwdfile:$PSScriptRoot\$New_PasswordFile`"", "`"/cpwdfile:$PSScriptRoot\$MDP`"", "/log" -wait -PassThru
+				if($process.ExitCode -eq 0)
+				{
+				break
+				}
+		}
+    }
+}
+End {
+}           

projects/MDT/Scripts/BIOSConfig/Lenovo/Lenovo_BIOS_Config_Legacy.csv

@@ -0,0 +1,87 @@
+#TYPE Selected.System.Management.Automation.PSCustomObject
+"Setting","Value"
+"Serial Port1 Address","3F8/IRQ4"
+"USB Support","Enabled"
+"USB Legacy Support","Enabled"
+"USB Enumeration Delay","Disabled"
+"Front USB Ports","Enabled"
+"Rear USB Ports","Enabled"
+"USB Port 1","Enabled"
+"USB Port 2","Enabled"
+"USB Port 3","Enabled"
+"USB Port 4","Enabled"
+"USB Port 5","Enabled"
+"USB Port 6","Enabled"
+"USB Port 7","Enabled"
+"USB Port 8","Enabled"
+"USB Port 9","Enabled"
+"SATA Controller","Enabled"
+"SATA Drive 1","Enabled"
+"SATA Drive 2","Enabled"
+"SATA Drive 3","Enabled"
+"Configure SATA as","AHCI"
+"Hard Disk Pre-delay","Disabled"
+"Select Active Video","Auto"
+"Onboard Audio Controller","Enabled"
+"Internal Speaker","Enabled"
+"Onboard Ethernet Controller","Enabled"
+"PXE Option ROM","Enabled"
+"PXE IPV4 Network Stack","Enabled"
+"PXE IPV6 Network Stack","Disabled"
+"ASPM Support","Auto"
+"PCIe 16x Slot Speed","Auto"
+"PCIe 1x Slot 1 Speed","Auto"
+"PCIe 1x Slot 2 Speed","Auto"
+"EIST Support","Enabled"
+"Core Multi-Processing","Enabled"
+"Intel(R) Virtualization Technology","Enabled"
+"VT-d","Enabled"
+"C1E Support","Enabled"
+"C State Support","C1C3C6C7C8"
+"Intel(R) SGX Control","Software Controlled"
+"Intel(R) SIPP Support","Enabled"
+"Dust Shield Alert","Disabled"
+"After Power Loss","Last State"
+"Enhanced Power Saving Mode","Disabled"
+"Smart Power On","Enabled"
+"ICE Performance Modes","Better Acoustic Performance"
+"ICE Thermal Alert","Enabled"
+"Wake on LAN","Automatic"
+"Wake from Serial Port Ring","Primary"
+"Wake Up on Alarm","Disabled"
+"Startup Sequence","Primary"
+"Alarm Time(HH:MM:SS)",""
+"Alarm Date(MM/DD/YYYY)",""
+"Alarm Day of Week","Sunday"
+"Sunday","Disabled"
+"Monday","Disabled"
+"Tuesday","Disabled"
+"Wednesday","Disabled"
+"Thursday","Disabled"
+"Friday","Disabled"
+"Saturday","Disabled"
+"User Defined Alarm Time",""
+"Allow Flashing BIOS to a Previous Version","Yes"
+"Require Admin. Pass. when Flashing","No"
+"Windows UEFI Firmware Update","Enabled"
+"Require POP on System Boot","Yes"
+"Require POP on Restart","No"
+"Require Admin. Pass. For F12 Boot","No"
+"Smart USB Protection","Disabled"
+"Require HDP on System Boot","Auto"
+"TCG Security Device","Discrete TPM"
+"Security Chip 2.0","Enabled"
+"Secure Boot","Disabled"
+"Network Offline Locker","Disabled"
+"Computrace Module Activation Setting","Enabled"
+"Device Guard","Disabled"
+"Chassis Intrusion Detection","Disabled"
+"Configuration Change Detection","Disabled"
+"Password Count Exceeded Error","Enabled"
+"CSM","Enabled"
+"Boot Mode","Legacy Only"
+"Boot Up Num-Lock Status","On"
+"OS Optimized Defaults","Enabled"
+"Primary Boot Sequence","SATA 1:SATA 2:SATA 3:Network 1"
+"Error Boot Sequence","Network 1:M.2 Drive 1:PCIe4X_1 Drive:PCIe16X_1 Drive:SATA 1:SATA 2:SATA 3:Other Device"
+"Automatic Boot Sequence","M.2 Drive 1:PCIe4X_1 Drive:PCIe16X_1 Drive:SATA 1:Network 1:SATA 2:SATA 3:Other Device"

projects/MDT/Scripts/BIOSConfig/Lenovo/M720tConfig.ini

@@ -0,0 +1,94 @@
+qQd8bbzDvJ2n7mc1dSZC2utCpdw=
+KEy Encryption 4pzwCVD6gNj5mtut
+Serial Port1 Address,3F8/IRQ4
+USB Support,Enabled
+USB Legacy Support,Enabled
+USB Enumeration Delay,Enabled
+Front USB Ports,Enabled
+Rear USB Ports,Enabled
+USB Port 1,Enabled
+USB Port 2,Enabled
+USB Port 3,Enabled
+USB Port 4,Enabled
+USB Port 5,Enabled
+USB Port 6,Enabled
+USB Port 7,Enabled
+USB Port 8,Enabled
+USB Port 9,Enabled
+Card Reader,Enabled
+SATA Controller,Enabled
+SATA Drive 1,Enabled
+SATA Drive 2,Enabled
+SATA Drive 3,Enabled
+Configure SATA as,AHCI
+Hard Disk Pre-delay,Disabled
+Select Active Video,Auto
+Onboard Audio Controller,Enabled
+Internal Speaker,Enabled
+Onboard Ethernet Controller,Enabled
+PXE Option ROM,Enabled
+PXE IPV4 Network Stack,Enabled
+PXE IPV6 Network Stack,Enabled
+ASPM Support,Auto
+PCIe 16x Slot Speed,Auto
+PCIe 1x Slot 1 Speed,Auto
+PCIe 1x Slot 2 Speed,Auto
+EIST Support,Enabled
+Intel(R) Hyper-Threading Technology,Enabled
+Core Multi-Processing,Enabled
+Intel(R) Virtualization Technology,Enabled
+VT-d,Enabled
+TxT,Disabled
+C1E Support,Enabled
+C State Support,C1C3C6C7C8
+Turbo Mode,Enabled
+Intel(R) SGX Control,Software Controlled
+Intel(R) SIPP Support,Enabled
+Dust Shield Alert,Disabled
+After Power Loss,Last State
+Enhanced Power Saving Mode,Disabled
+Smart Power On,Enabled
+ICE Performance Modes,Better Acoustic Performance
+ICE Thermal Alert,Enabled
+Wake on LAN,Automatic
+Wake from Serial Port Ring,Primary
+Wake Up on Alarm,Disabled
+Startup Sequence,Primary
+Alarm Time(HH:MM:SS),[00:00:00][Status:ShowOnly]
+Alarm Date(MM/DD/YYYY),[01/01/2017][Status:ShowOnly]
+Alarm Day of Week,Sunday
+Sunday,Disabled
+Monday,Disabled
+Tuesday,Disabled
+Wednesday,Disabled
+Thursday,Disabled
+Friday,Disabled
+Saturday,Disabled
+User Defined Alarm Time,[00:00:00][Status:ShowOnly]
+Allow Flashing BIOS to a Previous Version,Yes
+Require Admin. Pass. when Flashing,No
+Windows UEFI Firmware Update,Enabled
+Require POP on System Boot,Yes
+Require POP on Restart,No
+POP Changeable by User,Yes
+Require Admin. Pass. For F12 Boot,No
+Smart USB Protection,Disabled
+Require HDP on System Boot,Auto
+TCG Security Device,Discrete TPM
+Security Chip 2.0,Enabled
+Secure Boot,Disabled
+Network Offline Locker,Disabled
+Computrace Module Activation Setting,Enabled
+Device Guard,Disabled
+Chassis Intrusion Detection,Disabled
+Configuration Change Detection,Disabled
+Password Count Exceeded Error,Enabled
+Block SID Authentication,Enabled
+CSM,Enabled
+Boot Mode,Auto
+Boot Priority,Legacy First
+Boot Up Num-Lock Status,On
+OS Optimized Defaults,Enabled
+Primary Boot Sequence,USB HDD:SATA 1:SATA 2:SATA 3:Network 1
+Error Boot Sequence,USB HDD:USB CDROM:Network 1:M.2 Drive 1:PCIe4X_1 Drive:PCIe16X_1 Drive:SATA 1:SATA 2:SATA 3:Other Device
+Automatic Boot Sequence,USB HDD:USB CDROM:Other Device:Network 1:M.2 Drive 1:PCIe4X_1 Drive:PCIe16X_1 Drive:SATA 1:SATA 2:SATA 3

projects/MDT/Scripts/BIOSConfig/Lenovo/M75sGen2Config.ini

@@ -0,0 +1,85 @@
+SerialPort1Address,3F8/IRQ4
+USBPortAccess,Enabled
+USBEnumerationDelay,Disabled
+FrontUSBPorts,Enabled
+USBPort1,Enabled
+USBPort2,Enabled
+USBPort3,Enabled
+USBPort4,Enabled
+USBPort5,Enabled
+RearUSBPorts,Enabled
+USBPort7,Enabled
+USBPort8,Enabled
+USBPort9,Enabled
+USBPort10,Enabled
+SATAController,Enabled
+SATADrive1,Enabled
+SATADrive2,Enabled
+SATADrive3,Enabled
+ConfigureSATAas,AHCI
+HardDiskPre-delay,Disabled
+UMAFrameBufferSize,Auto
+PrimaryVideoController,Auto
+OnboardAudioController,Enabled
+InternalSpeaker,Enabled
+OnboardEthernetController,Enabled
+WirelessLANAccess,Enabled
+PXEIPV4NetworkStack,Enabled
+PXEIPV6NetworkStack,Disabled
+ASPMSupport,Disabled
+PCIe16xSlotSpeed,Auto
+CardReader,Enabled
+Bluetooth,Enabled
+AMDSecureVirtualMachine,Enabled
+IOMMU,Enabled
+CPBMode,Enabled
+CStateSupport,Enabled
+DASHSupport,Disabled
+ConsoleRedirectionTerminalType,VT100+
+DustShieldAlert,Disabled
+AfterPowerLoss,Last State
+EnhancedPowerSavingMode,Disabled
+SmartPowerOn,Enabled
+IntelligentCoolingPerformanceMode,Best Performance
+WakeonLAN,Automatic
+WakeUponAlarm,Disabled
+StartupSequence,Primary
+AlarmTime(HH:MM:SS),[00:00:00][Status:ShowOnly]
+AlarmDate(MM/DD/YYYY),[01/01/2021][Status:ShowOnly]
+AlarmDayofWeek,Sunday
+UserDefinedAlarmSunday,Disabled
+UserDefinedAlarmMonday,Disabled
+UserDefinedAlarmTuesday,Disabled
+UserDefinedAlarmWednesday,Disabled
+UserDefinedAlarmThursday,Disabled
+UserDefinedAlarmFriday,Disabled
+UserDefinedAlarmSaturday,Disabled
+UserDefinedAlarmTime,[00:00:00][Status:ShowOnly]
+AccessSecuritySettings,Disabled
+RemoteSetSMP,Disabled
+SetMinimumLength,Disabled
+SetStrongPassword,Disabled
+KeyboardLayout,English
+AllowJumperClearSVP,Yes
+SecureRollBackPrevention,Yes
+RequireSVPwhenFlashing,No
+WindowsUEFIFirmwareUpdate,Enabled
+BIOSPasswordAtSystemBoot,Yes
+BIOSPasswordAtReboot,No
+BIOSPasswordAtBootDeviceList,No
+SmartUSBProtection,Disabled
+PhysicalPresenceforClear,Enabled
+RequireHDPonSystemBoot,Auto
+SecureBoot,Enabled
+AbsolutePersistenceModule,Enabled
+DeviceGuard,Disabled
+ElectronicLock,Unlock
+CoverTamperDetected,Disabled
+ConfigurationChangeDetection,Disabled
+PasswordCountExceededError,Enabled
+BootUpNumLockStatus,On
+OptionKeysDisplay,Disabled
+FastBoot,Enabled
+PrimaryBootSequence,M.2 Drive 1:SATA 1:SATA 2:SATA 3:Network 1:USB HDD:USB CDROM:Other Device
+ErrorBootSequence,Network 1:M.2 Drive 1:SATA 1:SATA 2:SATA 3:Other Device
+AutomaticBootSequence,Network 1:M.2 Drive 1:SATA 1:SATA 2:SATA 3:Other Device

projects/MDT/Scripts/BIOSConfig/Lenovo/Manage-LenovoBiosPasswords.ps1

@@ -0,0 +1,706 @@
+<#
+	.DESCRIPTION
+		Automatically configure Lenovo BIOS passwords and prompt the user if manual intervention is required.
+
+		PASSWORD STATUS CODES
+		0 - No password set
+		1 - Power on password set
+		2 - Supervisor password set
+		3 - Power on and supervisor passwords set
+		4 - Hard drive password set
+		5 - Power on and hard drive passwords set
+		6 - Supervisor and hard drive passwords set
+		7 - Supervisor, power on, and hard drive passwords set
+
+	.PARAMETER SupervisorSet
+		Specify this switch to change an existing supervisor password. Must also specify the SupervisorPassword and OldSupervisorPassword parameters.
+
+	.PARAMETER SupervisorClear
+		Specify this swtich to clear an existing supervisor password. Must also specify the OldSupervisorPassword parameter.
+
+	.PARAMETER PowerOnSet
+		Specify this switch to change an existing power on password. Must also specify the PowerOnPassword and OldPowerOnPassword parameters.
+
+	.PARAMETER PowerOnClear
+		Specify this switch to clear an existing power on password. Must also specify the OldPowerOnPassword parameter.
+
+	.PARAMETER HDDPasswordClear
+		Specify this swtich to clear an existing master and/or user hard drive password. Must also specify the HDDMasterPassword and/or HDDUserPassword parameters.
+
+	.PARAMETER SupervisorPassword
+		Specify the new supervisor password to set.
+
+	.PARAMETER OldSupervisorPassword
+		Specify the old supervisor password(s) to be changed. Multiple passwords can be specified as a comma seperated list.
+
+	.PARAMETER PowerOnPassword
+		Specify the new power on password to set.
+
+	.PARAMETER OldPowerOnPassword
+		Specify the old power on password(s) to be changed. Multiple passwords can be specified as a comma seperated list.
+
+	.PARAMETER HDDUserPassword
+		Specify the current user hard drive password to clear.
+
+	.PARAMETER HDDMasterPassword
+		Specify the current master hard drive password to clear.
+	
+	.PARAMETER NoUserPrompt
+		The script will run silently and will not prompt the user with a message box.
+
+	.PARAMETER ContinueOnError
+		The script will ignore any errors caused by changing or clearing the passwords. This will not suppress errors caused by parameter validation.
+
+	.PARAMETER SMSTSPasswordRetry
+		For use in a task sequence. If specified, the script will assume the script needs to run at least one more time. This will ignore password errors and suppress user prompts.
+
+	.EXAMPLE
+		Change an existing supervisor password
+		Manage-LenovoBiosPasswords.ps1 -SupervisorSet -SupervisorPassword <String> -OldSupervisorPassword <String1>,<String2>
+
+		Change an existing supervisor password and clear a power on password
+		Manage-LenovoBiosPasswords.ps1 -SupervisorSet -SupervisorPassword <String> -OldSupervisorPassword <String1>,<String2> -PowerOnClear -OldPowerOnPassword <String1>,<String2>
+
+		Clear existing supervisor and power on passwords
+		Manage-LenovoBiosPasswords.ps1 -SupervisorClear -OldSupervisorPassword <String1>,<String2> -PowerOnClear -OldPowerOnPassword <String1>,<String2>
+
+		Clear existing user and master hard drive passwords
+		Manage-LenovoBiosPasswords.ps1 -HDDPasswordClear -HDDUserPassword <String> -HDDMasterPassword <String>
+
+		Clear an existing power on password, suppress any user prompts, and continue on error
+		Manage-LenovoBiosPasswords.ps1 -PowerOnClear -OldPowerOnPassword <String1>,<String2> -NoUserPrompt -ContinueOnError
+
+	.NOTES
+		Created by: Jon Anderson (@ConfigJon)
+		Reference: https://www.configjon.com/lenovo-bios-password-management
+		Modifed: 02/10/2020
+
+	.CHANGELOG
+		07/17/2019 - Updated the script name to Manage-LenovoBiosPasswords. Updated the log directory name to LenovoBiosScripts. Updated the log file name to Manage-LenovoBiosPasswords
+		07/27/2019 - Formatting changes. Changed the NewSupervisorPassword parameter to SupervisorPassword. Changed the NewPowerOnPassword parameter to PowerOnPassword.
+					 Changed the SMSTSPasswordRetry parameter to be a switch instead of an integer value. Changed the SMSTSChangeSup TS variable to LenovoChangeSupervisor.
+					 Changed the SMSTSClearSup TS variable to LenovoClearSupervisor. Changed the SMSTSChangePo TS variable to LenovoChangePowerOn. Changed the SMSTSClearPo TS variable to LenovoClearPowerOn
+		11/04/2019 - Added additional logging. Changed the default log path to $ENV:ProgramData\BiosScripts\Lenovo. Modifed the parameter validation logic.
+		01/30/2020 - Changed the SupervisorChange and PowerOnChange parameters to SupervisorSet and PowerOnSet. Changed the LenovoChangeSupervisor task sequence variable to LenovoSetSupervisor.
+					 Changed the LenovoChangePowerOn task sequence variable to LenovoSetPowerOn. Updated the parameter validation checks.
+		02/10/2020 - Added better logic for error handling when no Supervisor or Power On Passwords are set.
+		06/09/2020 - Updated some Write-LogEntry lines to include missing -Severity parameters
+#>
+
+#Parameters ===================================================================================================================
+
+param (
+	[Parameter(Mandatory=$false)][Switch]$SupervisorSet,
+	[Parameter(Mandatory=$false)][Switch]$SupervisorClear,
+	[Parameter(Mandatory=$false)][Switch]$PowerOnSet,
+	[Parameter(Mandatory=$false)][Switch]$PowerOnClear,
+	[Parameter(Mandatory=$false)][Switch]$HDDPasswordClear,
+	[Parameter(Mandatory=$false)][ValidateNotNullOrEmpty()][String]$SupervisorPassword,
+	[Parameter(Mandatory=$false)][ValidateNotNullOrEmpty()][String[]]$OldSupervisorPassword,
+	[Parameter(Mandatory=$false)][ValidateNotNullOrEmpty()][String]$PowerOnPassword,
+	[Parameter(Mandatory=$false)][ValidateNotNullOrEmpty()][String[]]$OldPowerOnPassword,
+	[Parameter(Mandatory=$false)][ValidateNotNullOrEmpty()][String]$HDDUserPassword,
+	[Parameter(Mandatory=$false)][ValidateNotNullOrEmpty()][String]$HDDMasterPassword,
+	[Parameter(Mandatory=$false)][Switch]$NoUserPrompt,
+	[Parameter(Mandatory=$false)][Switch]$ContinueOnError,
+	[Parameter(Mandatory=$false)][Switch]$SMSTSPasswordRetry
+)
+
+#Functions ====================================================================================================================
+
+#Determine if a task sequence is currently running
+Function Get-TaskSequenceStatus
+{
+	try
+	{
+		$TSEnv = New-Object -ComObject Microsoft.SMS.TSEnvironment
+	}
+	catch{}
+
+	if ($NULL -eq $TSEnv)
+	{
+		return $False
+	}
+	else
+	{
+		try
+		{
+			$SMSTSType = $TSEnv.Value("_SMSTSType")
+		}
+		catch{}
+
+		if ($NULL -eq $SMSTSType)
+		{
+			return $False
+		}
+		else
+		{
+			return $True
+		}
+	}
+}
+
+#Create a user prompt with custom body and title text if the NoUserPrompt variable is not set
+Function Start-UserPrompt
+{
+    [CmdletBinding()]
+    param (
+        [Parameter(Mandatory=$True)][ValidateNotNullOrEmpty()][String[]]$BodyText,
+        [Parameter(Mandatory=$True)][ValidateNotNullOrEmpty()][String[]]$TitleText
+    )
+	
+    if (!($NoUserPrompt))
+	{
+		(New-Object -ComObject Wscript.Shell).Popup("$BodyText",0,"$TitleText",0x0 + 0x30) | Out-Null
+	}
+}
+
+#Write data to a CMTrace compatible log file. (Credit to SCConfigMgr - https://www.scconfigmgr.com/)
+Function Write-LogEntry
+{
+	param (
+		[parameter(Mandatory = $true, HelpMessage = "Value added to the log file.")]
+		[ValidateNotNullOrEmpty()]
+		[string]$Value,
+		[parameter(Mandatory = $true, HelpMessage = "Severity for the log entry. 1 for Informational, 2 for Warning and 3 for Error.")]
+		[ValidateNotNullOrEmpty()]
+		[ValidateSet("1", "2", "3")]
+		[string]$Severity,
+		[parameter(Mandatory = $false, HelpMessage = "Name of the log file that the entry will written to.")]
+		[ValidateNotNullOrEmpty()]
+		[string]$FileName = "Manage-LenovoBiosPasswords.log"
+	)
+	# Determine log file location
+	$LogFilePath = Join-Path -Path $LogsDirectory -ChildPath $FileName
+		
+	# Construct time stamp for log entry
+	if (-not(Test-Path -Path 'variable:global:TimezoneBias'))
+	{
+		[string]$global:TimezoneBias = [System.TimeZoneInfo]::Local.GetUtcOffset((Get-Date)).TotalMinutes
+		if ($TimezoneBias -match "^-")
+		{
+			$TimezoneBias = $TimezoneBias.Replace('-', '+')
+		}
+		else
+		{
+			$TimezoneBias = '-' + $TimezoneBias
+		}
+	}
+	$Time = -join @((Get-Date -Format "HH:mm:ss.fff"), $TimezoneBias)
+		
+	# Construct date for log entry
+	$Date = (Get-Date -Format "MM-dd-yyyy")
+		
+	# Construct context for log entry
+	$Context = $([System.Security.Principal.WindowsIdentity]::GetCurrent().Name)
+		
+	# Construct final log entry
+	$LogText = "<![LOG[$($Value)]LOG]!><time=""$($Time)"" date=""$($Date)"" component=""Manage-LenovoBiosPasswords"" context=""$($Context)"" type=""$($Severity)"" thread=""$($PID)"" file="""">"
+		
+	# Add value to log file
+	try
+	{
+		Out-File -InputObject $LogText -Append -NoClobber -Encoding Default -FilePath $LogFilePath -ErrorAction Stop
+	}
+	catch [System.Exception]
+	{
+		Write-Warning -Message "Unable to append log entry to $FileName file. Error message at line $($_.InvocationInfo.ScriptLineNumber): $($_.Exception.Message)"
+	}
+}
+
+#Main program =================================================================================================================
+
+#Configure Logging and task sequence variables
+if (Get-TaskSequenceStatus)
+{
+	$TSEnv = New-Object -COMObject Microsoft.SMS.TSEnvironment
+	$TSProgress = New-Object -ComObject Microsoft.SMS.TsProgressUI
+	$LogsDirectory = $TSEnv.Value("_SMSTSLogPath")
+}
+else
+{
+	$LogsDirectory = "$ENV:ProgramData\BiosScripts\Lenovo"
+	if (!(Test-Path -PathType Container $LogsDirectory))
+	{
+		New-Item -Path $LogsDirectory -ItemType "Directory" -Force | Out-Null
+	}
+}
+Write-Output "Log path set to $LogsDirectory\Manage-LenovoBiosPasswords.log"
+Write-LogEntry -Value "START - Lenovo BIOS password management script" -Severity 1
+
+#Connect to the Lenovo_BiosPasswordSettings WMI class
+$Error.Clear()
+try
+{
+	Write-LogEntry -Value "Connect to the Lenovo_BiosPasswordSettings WMI class" -Severity 1
+	$PasswordSettings = Get-WmiObject -Namespace root\wmi -Class Lenovo_BiosPasswordSettings
+}
+catch
+{
+	Write-LogEntry -Value "Unable to connect to the Lenovo_BiosPasswordSettings WMI class" -Severity 3
+	throw "Unable to connect to the Lenovo_BiosPasswordSettings WMI class"
+}
+if (!($Error))
+{
+	Write-LogEntry -Value "Successfully connected to the Lenovo_BiosPasswordSettings WMI class" -Severity 1
+}	
+
+#Connect to the Lenovo_SetBiosPassword WMI class
+$Error.Clear()
+try
+{
+	Write-LogEntry -Value "Connect to the Lenovo_SetBiosPassword WMI class" -Severity 1
+	$PasswordSet = Get-WmiObject -Namespace root\wmi -Class Lenovo_SetBiosPassword
+}
+catch
+{
+	Write-LogEntry -Value "Unable to connect to the Lenovo_SetBiosPassword WMI class" -Severity 3
+	throw "Unable to connect to the Lenovo_BiosPasswordSettings WMI class"
+}
+if (!($Error))
+{
+	Write-LogEntry -Value "Successfully connected to the Lenovo_SetBiosPassword WMI class" -Severity 1
+}	
+
+#Get the current password status
+Write-LogEntry -Value "Get the current password state and validate the specified password is not blank" -Severity 1
+$PasswordStatus = $PasswordSettings.PasswordState
+if ((($PasswordStatus -eq 0) -or ($PasswordStatus -eq 1) -or ($PasswordStatus -eq 4) -or ($PasswordStatus -eq 5)))
+{
+	Write-LogEntry -Value "The supervisor password is not currently set" -Severity 1
+}
+else
+{
+	Write-LogEntry -Value "The supervisor password is currently set" -Severity 1
+}
+if ((($PasswordStatus -eq 0) -or ($PasswordStatus -eq 2) -or ($PasswordStatus -eq 4) -or ($PasswordStatus -eq 6)))
+{
+	Write-LogEntry -Value "The power on password is not currently set" -Severity 1
+}
+else
+{
+	Write-LogEntry -Value "The power on password is currently set" -Severity 1
+}
+
+#Parameter validation
+Write-LogEntry -Value "Begin parameter validation" -Severity 1
+
+if (($SupervisorSet) -and !($SupervisorPassword -and $OldSupervisorPassword))
+{
+	$ErrorMsg = "When using the SupervisorSet switch, the SupervisorPassword and OldSupervisorPassword parameters must also be specified"
+	Write-LogEntry -Value $ErrorMsg -Severity 3
+	throw $ErrorMsg
+}
+if (($SupervisorClear) -and !($OldSupervisorPassword))
+{
+	$ErrorMsg = "When using the SupervisorClear switch, the OldSupervisorPassword parameter must also be specified"
+	Write-LogEntry -Value $ErrorMsg -Severity 3
+	throw $ErrorMsg
+}
+if (($PowerOnSet) -and !($PowerOnPassword -and $OldPowerOnPassword))
+{
+	$ErrorMsg = "When using the PowerOnSet switch, the PowerOnPassword and OldPowerOnPassword parameters must also be specified"
+	Write-LogEntry -Value $ErrorMsg -Severity 3
+	throw $ErrorMsg
+}
+if (($PowerOnClear) -and !($OldPowerOnPassword))
+{
+	$ErrorMsg = "When using the PowerOnClear switch, the OldPowerOnPassword parameter must also be specified"
+	Write-LogEntry -Value $ErrorMsg -Severity 3
+	throw $ErrorMsg
+}
+if (($SupervisorSet) -and ($SupervisorClear))
+{
+	$ErrorMsg = "Cannot specify the SupervisorSet and SupervisorClear parameters simultaneously"
+	Write-LogEntry -Value $ErrorMsg -Severity 3
+	throw $ErrorMsg
+}
+if (($PowerOnSet) -and ($PowerOnClear))
+{
+	$ErrorMsg = "Cannot specify the PowerOnSet and PowerOnClear parameters simultaneously"
+	Write-LogEntry -Value $ErrorMsg -Severity 3
+	throw $ErrorMsg
+}
+if (($HDDPasswordClear) -and !($HDDUserPassword))
+{
+	$ErrorMsg = "When using the HDDPasswordClear switch, the HDDUserPassword parameter must also be specified"
+	Write-LogEntry -Value $ErrorMsg -Severity 3
+	throw $ErrorMsg
+}
+if (($HDDMasterPassword) -and !($HDDUserPassword))
+{
+	$ErrorMsg = "When specifying a master hard drive password, a user hard drive password must also be specified"
+	Write-LogEntry -Value $ErrorMsg -Severity 3
+	throw $ErrorMsg
+}
+if (($HDDMasterPassword -or $HDDUserPassword) -and !($HDDPasswordClear))
+{
+	$ErrorMsg = "When using the HDDMasterPassword or HDDUserPassword parameters, the HDDPasswordClear parameter must also be specified"
+	Write-LogEntry -Value $ErrorMsg -Severity 3
+	throw $ErrorMsg
+}
+if (($OldSupervisorPassword -or $SupervisorPassword) -and !($SupervisorSet -or $SupervisorClear))
+{
+	$ErrorMsg = "When using the OldSupervisorPassword or SupervisorPassword parameters, one of the SupervisorSet or SupervisorClear parameters must also be specified"
+	Write-LogEntry -Value $ErrorMsg -Severity 3
+	throw $ErrorMsg
+}
+if (($OldPowerOnPassword -or $PowerOnPassword) -and !($PowerOnSet -or $PowerOnClear))
+{
+	$ErrorMsg = "When using the OldPowerOnPassword or PowerOnPassword parameters, one of the PowerOnSet or PowerOnClear parameters must also be specified"
+	Write-LogEntry -Value $ErrorMsg -Severity 3
+	throw $ErrorMsg
+}
+if ($OldSupervisorPassword.Count -gt 2) #Prevents entering more than 2 old supervisor passwords
+{
+	$ErrorMsg = "Please specify 2 or fewer old supervisor passwords"
+	Write-LogEntry -Value $ErrorMsg -Severity 3
+	throw $ErrorMsg
+}
+if ($OldPowerOnPassword.Count -gt 2) #Prevents entering more than 2 old power on passwords
+{
+	$ErrorMsg = "Please specify 2 or fewer old power on passwords"
+	Write-LogEntry -Value $ErrorMsg -Severity 3
+	throw $ErrorMsg
+}
+if (($SMSTSPasswordRetry) -and !(Get-TaskSequenceStatus))
+{
+	Write-LogEntry -Value "The SMSTSPasswordRetry parameter was specifed while not running in a task sequence. Setting SMSTSPasswordRetry to false." -Severity 2
+	$SMSTSPasswordRetry = 0
+}
+Write-LogEntry -Value "Parameter validation completed" -Severity 1
+
+#Set variables from a previous script session
+if (Get-TaskSequenceStatus)
+{
+	Write-LogEntry -Value "Check for existing task sequence variables" -Severity 1
+	$LenovoSetSupervisor = $TSEnv.Value("LenovoSetSupervisor")
+	if ($LenovoSetSupervisor -eq "Failed")
+	{
+		Write-LogEntry -Value "Previous unsuccessful supervisor password set attempt detected" -Severity 1
+	}
+	$LenovoClearSupervisor = $TSEnv.Value("LenovoClearSupervisor")
+	if ($LenovoClearSupervisor -eq "Failed")
+	{
+		Write-LogEntry -Value "Previous unsuccessful supervisor password clear attempt detected" -Severity 1
+	}
+	$LenovoSetPowerOn = $TSEnv.Value("LenovoSetPowerOn")
+	if ($LenovoSetPowerOn -eq "Failed")
+	{
+		Write-LogEntry -Value "Previous unsuccessful power on password set attempt detected" -Severity 1
+	}
+	$LenovoClearPowerOn = $TSEnv.Value("LenovoClearPowerOn")
+	if ($LenovoClearPowerOn -eq "Failed")
+	{
+		Write-LogEntry -Value "Previous unsuccessful power on password clear attempt detected" -Severity 1
+	}
+}
+
+#Attempting to set or clear a supervisor password when no supervisor password currently exists
+if ((($PasswordStatus -eq 0) -or ($PasswordStatus -eq 1) -or ($PasswordStatus -eq 4) -or ($PasswordStatus -eq 5)))
+{
+	if ($SupervisorSet)
+	{
+		$SupervisorPWExists = "Failed"
+		Write-LogEntry -Value "No supervisor password currently set. Unable to set the supervisor password" -Severity 3
+	}
+	if ($SupervisorClear)
+	{
+		Write-LogEntry -Value "No supervisor password currently set. No need to clear the supervisor password" -Severity 2
+		Clear-Variable SupervisorClear
+	}
+}
+
+#Attempting to set or clear a power on password when no power on password currently exists
+if ((($PasswordStatus -eq 0) -or ($PasswordStatus -eq 2) -or ($PasswordStatus -eq 4) -or ($PasswordStatus -eq 6)))
+{
+	if ($PowerOnSet)
+	{
+		$PowerOnPWExists = "Failed"
+		Write-LogEntry -Value "No power on password currently set. Unable to set the power on password" -Severity 3
+	}
+	if ($PowerOnClear)
+	{
+		Write-LogEntry -Value "No power on password currently set. No need to clear the power on password" -Severity 2
+		Clear-Variable PowerOnClear
+	}
+}
+
+#If a supervisor password is set, attempt to clear or change it
+if (($PasswordStatus -eq 2) -or ($PasswordStatus -eq 3) -or($PasswordStatus -eq 6) -or($PasswordStatus -eq 7))
+{
+	#Change the existing supervisor password
+	if (($SupervisorSet) -and ($LenovoSetSupervisor -ne "Success"))
+	{
+		Write-LogEntry -Value "Attempt to change the existing supervisor password" -Severity 1
+		$SupervisorPWSet = "Failed"
+		if (Get-TaskSequenceStatus)
+		{
+			$TSEnv.Value("LenovoSetSupervisor") = "Failed"
+		}
+    
+		if ($PasswordSet.SetBiosPassword("pap,$SupervisorPassword,$SupervisorPassword,ascii,us").Return -eq "Success")
+		{
+			#Password already correct
+			$SupervisorPWSet = "Success"
+			if (Get-TaskSequenceStatus)
+			{
+				$TSEnv.Value("LenovoSetSupervisor") = "Success"
+			}
+			Write-LogEntry -Value "The supervisor password is already set correctly" -Severity 1
+		}
+		else
+		{
+			$Counter = 0
+			While($Counter -lt $OldSupervisorPassword.Count){
+				if ($PasswordSet.SetBiosPassword("pap,$($OldSupervisorPassword[$Counter]),$SupervisorPassword,ascii,us").Return -eq "Success")
+				{
+					#Successfully changed the password
+					$SupervisorPWSet = "Success"
+					if (Get-TaskSequenceStatus)
+					{
+						$TSEnv.Value("LenovoSetSupervisor") = "Success"
+					}
+					Write-LogEntry -Value "The supervisor password has been successfully changed" -Severity 1
+					break
+				}
+				else
+				{
+					#Failed to change the password
+					$Counter++
+				}
+			}
+			if ($SupervisorPWSet -eq "Failed")
+			{
+				Write-LogEntry -Value "Failed to change the supervisor password" -Severity 3
+			}
+		}
+	}
+	
+	#Clear the existing supervisor password
+	if (($SupervisorClear) -and ($LenovoClearSupervisor -ne "Success"))
+	{
+		Write-LogEntry -Value "Attempt to clear the existing supervisor password" -Severity 1
+		$SupervisorPWClear = "Failed"
+		if (Get-TaskSequenceStatus)
+		{
+			$TSEnv.Value("LenovoClearSupervisor") = "Failed"
+		}
+
+		$Counter = 0
+		While($Counter -lt $OldSupervisorPassword.Count){
+			if ($PasswordSet.SetBiosPassword("pap,$($OldSupervisorPassword[$Counter]),,ascii,us").Return -eq "Success")
+			{
+				#Successfully cleared the password
+				$SupervisorPWClear = "Success"
+				if (Get-TaskSequenceStatus)
+				{
+					$TSEnv.Value("LenovoClearSupervisor") = "Success"
+				}
+				Write-LogEntry -Value "The supervisor password has been successfully cleared" -Severity 1
+				break
+			}
+			else
+			{
+				#Failed to clear the password
+				$Counter++
+			}
+		}
+		if ($SupervisorPWClear -eq "Failed")
+		{
+			Write-LogEntry -Value "Failed to clear the supervisor password" -Severity 3
+		}
+	}
+}
+
+#If a power on password is set, attempt to clear or change it
+if (($PasswordStatus -eq 1) -or ($PasswordStatus -eq 3) -or($PasswordStatus -eq 5) -or($PasswordStatus -eq 7))
+{
+	#Change the existing supervisor password
+	if (($PowerOnSet) -and ($LenovoSetPowerOn -ne "Success"))
+	{
+		Write-LogEntry -Value "Attempt to change the existing power on password" -Severity 1
+		$PowerOnPWSet = "Failed"
+		if (Get-TaskSequenceStatus)
+		{
+			$TSEnv.Value("LenovoSetPowerOn") = "Failed"
+		}
+    
+		if ($PasswordSet.SetBiosPassword("pop,$PowerOnPassword,$PowerOnPassword,ascii,us").Return -eq "Success")
+		{
+			#Password already correct
+			$PowerOnPWSet = "Success"
+			if (Get-TaskSequenceStatus)
+			{
+				$TSEnv.Value("LenovoSetPowerOn") = "Success"
+			}
+			Write-LogEntry -Value "The power on password is already set correctly" -Severity 1
+		}
+		else
+		{
+			$Counter = 0
+			While($Counter -lt $OldPowerOnPassword.Count){
+				if ($PasswordSet.SetBiosPassword("pop,$($OldPowerOnPassword[$Counter]),$PowerOnPassword,ascii,us").Return -eq "Success")
+				{
+					#Successfully changed the password
+					$PowerOnPWSet = "Success"
+					if (Get-TaskSequenceStatus)
+					{
+						$TSEnv.Value("LenovoSetPowerOn") = "Success"
+					}
+					Write-LogEntry -Value "The power on password has been successfully changed" -Severity 1
+					break
+				}
+				else
+				{
+					#Failed to change the password
+					$Counter++
+				}
+			}
+			if ($PowerOnPWSet -eq "Failed")
+			{
+				Write-LogEntry -Value "Failed to change the power on password" -Severity 3
+			}
+		}
+	}
+	
+	#Clear the existing power on password
+	if (($PowerOnClear) -and ($LenovoClearPowerOn -ne "Success"))
+	{
+		Write-LogEntry -Value "Attempt to clear the existing power on password" -Severity 1
+		$PowerOnPWClear = "Failed"
+		if (Get-TaskSequenceStatus)
+		{
+			$TSEnv.Value("LenovoClearPowerOn") = "Failed"
+		}
+
+		$Counter = 0
+		While($Counter -lt $OldPowerOnPassword.Count){
+			if ($PasswordSet.SetBiosPassword("pop,$($OldPowerOnPassword[$Counter]),,ascii,us").Return -eq "Success")
+			{
+				#Successfully cleared the password
+				$PowerOnPWClear = "Success"
+				if (Get-TaskSequenceStatus)
+				{
+					$TSEnv.Value("LenovoClearPowerOn") = "Success"
+				}
+				Write-LogEntry -Value "The power on password has been successfully cleared" -Severity 1
+				break
+			}
+			else
+			{
+				#Failed to clear the password
+				$Counter++
+			}
+		}
+		if ($PowerOnPWClear -eq "Failed")
+		{
+			Write-LogEntry -Value "Failed to clear the power on password" -Severity 3
+		}
+	}
+}
+
+#Attempt to clear the hard drive password(s)
+if ($HDDPasswordClear)
+{
+	if (($HDDUserPassword) -and ($HDDMasterPassword))
+	{
+		Write-LogEntry -Value "Attempt to clear the existing user and master hard drive passwords" -Severity 1
+		$PasswordSet.SetBiosPassword("mhdp1,$HDDMasterPassword,,ascii,us")
+		$PasswordSet.SetBiosPassword("uhdp1,$HDDUserPassword,,ascii,us")
+	}
+	elseif (($HDDUserPassword) -and !($HDDMasterPassword))
+	{
+		Write-LogEntry -Value "Attempt to clear the existing user hard drive password" -Severity 1
+		$PasswordSet.SetBiosPassword("uhdp1,$HDDUserPassword,,ascii,us")
+	}
+}
+
+#Prompt the user about any password set failures
+if (($SupervisorPWExists -eq "Failed") -or ($PowerOnPWExists -eq "Failed"))
+{
+	if (!($NoUserPrompt))
+	{
+		Write-LogEntry -Value "Failures detected, display on-screen prompts for any required manual actions" -Severity 2
+		#Close the task sequence progress dialog
+		if (Get-TaskSequenceStatus)
+		{
+			$TSProgress.CloseProgressDialog()
+		}
+		#Display prompts
+		if ($SupervisorPWExists -eq "Failed")
+		{
+			Start-UserPrompt -BodyText "No supervisor password is set. Please reboot the computer and manually set a supervisor password" -TitleText "Lenovo Password Management Script"
+		}
+		if ($PowerOnPWExists -eq "Failed")
+		{
+			Start-UserPrompt -BodyText "No power on password is set. Please reboot the computer and manually set a power on password." -TitleText "Lenovo Password Management Script"
+		}
+	}
+	#Exit the script with an error
+	if (!($ContinueOnError))
+	{
+		Write-LogEntry -Value "Failures detected, exiting the script" -Severity 3
+		Write-Output "Password management tasks failed. Check the log file for more information"
+		Write-LogEntry -Value "END - Lenovo BIOS password management script" -Severity 1
+		Exit 1
+	}
+	else
+	{
+		Write-LogEntry -Value "Failures detected, but the ContinueOnError parameter was set. Script execution will continue" -Severity 3
+		Write-Output "Failures detected, but the ContinueOnError parameter was set. Script execution will continue"
+	}
+}
+
+#Prompt the user about any password change or clear failures
+if ((($SupervisorPWSet -eq "Failed") -or ($SupervisorPWClear -eq "Failed") -or ($PowerOnPWSet -eq "Failed") -or ($PowerOnPWClear -eq "Failed")) -and (!($SMSTSPasswordRetry)))
+{
+	if (!($NoUserPrompt))
+	{
+		Write-LogEntry -Value "Failures detected, display on-screen prompts for any required manual actions" -Severity 2
+		#Close the task sequence progress dialog
+		if (Get-TaskSequenceStatus)
+		{
+			$TSProgress.CloseProgressDialog()
+		}
+		if ($SupervisorPWSet -eq "Failed")
+		{
+			Start-UserPrompt -BodyText "The supervisor password is set, but cannot be automatically changed. Please reboot the computer and manually change the supervisor password." -TitleText "Lenovo Password Management Script"
+		}
+		if ($SupervisorPWClear -eq "Failed")
+		{
+			Start-UserPrompt -BodyText "The supervisor password is set, but cannot be automatically cleared. Please reboot the computer and manually clear the supervisor password." -TitleText "Lenovo Password Management Script"
+		}
+		if ($PowerOnPWSet -eq "Failed")
+		{
+			Start-UserPrompt -BodyText "The power on password is set, but cannot be automatically changed. Please reboot the computer and manually change the power on password." -TitleText "Lenovo Password Management Script"
+		}
+		if ($PowerOnPWClear -eq "Failed")
+		{
+			Start-UserPrompt -BodyText "The power on password is set, but cannot be automatically cleared. Please reboot the computer and manually clear the power on password." -TitleText "Lenovo Password Management Script"
+		}
+	}
+	#Exit the script with an error
+	if (!($ContinueOnError))
+	{
+		Write-LogEntry -Value "Failures detected, exiting the script" -Severity 3
+		Write-Output "Password management tasks failed. Check the log file for more information"
+		Write-LogEntry -Value "END - Lenovo BIOS password management script" -Severity 1
+		Exit 1
+	}
+	else
+	{
+		Write-LogEntry -Value "Failures detected, but the ContinueOnError parameter was set. Script execution will continue" -Severity 3
+		Write-Output "Failures detected, but the ContinueOnError parameter was set. Script execution will continue"
+	}
+}
+elseif ((($SupervisorPWExists -eq "Failed") -or ($SupervisorPWSet -eq "Failed") -or ($SupervisorPWClear -eq "Failed") -or ($PowerOnPWExists -eq "Failed") -or ($PowerOnPWSet -eq "Failed") -or ($PowerOnPWClear -eq "Failed")) -and ($SMSTSPasswordRetry))
+{
+	Write-LogEntry -Value "Failures detected, but the SMSTSPasswordRetry parameter was set. No user prompts will be displayed" -Severity 3
+	Write-Output "Failures detected, but the SMSTSPasswordRetry parameter was set. No user prompts will be displayed"
+}
+else
+{
+	Write-Output "Password management tasks succeeded. Check the log file for more information"
+}
+Write-LogEntry -Value "END - Lenovo BIOS password management script" -Severity 1

projects/MDT/Scripts/BIOSConfig/Lenovo/ThinkCentreBiosConfigLegacyAll.ini

@@ -0,0 +1,87 @@
+Serial Port1 Address,3F8/IRQ4
+USB Support,Enabled
+USB Legacy Support,Enabled
+USB Debug Support,Disabled
+USB Enumeration Delay,Disabled
+USB Virtual KBC Support,Disabled
+Front USB Ports,Enabled
+USB Port 1,Enabled
+USB Port 2,Enabled
+USB Port 3,Enabled
+USB Port 4,Enabled
+Rear USB Ports,Enabled
+USB Port 5,Enabled
+USB Port 6,Enabled
+USB Port 7,Enabled
+USB Port 8,Enabled
+SATA Controller,Enabled
+SATA Drive 1,Enabled
+SATA Drive 2,Enabled
+SATA Drive 3,Enabled
+Configure SATA as,AHCI
+Hard Disk Pre-delay,Disabled
+Select Active Video,Auto
+Pre-Allocated Memory Size,32MB
+Total Graphics Memory,Maximum
+Onboard Audio Controller,Enabled
+Internal Speaker,Enabled
+Onboard Ethernet Controller,Enabled
+Boot Agent,PXE
+PXE IPV4 network stack,Enabled
+PXE IPV6 network stack,Disabled
+PCIe 16x Slot Speed,Auto
+PCIe 1x Slot 1 Speed,Auto
+PCIe 1x Slot 2 Speed,Auto
+EIST Support,Enabled
+Intel(R) Hyper-Threading Technology,Enabled
+Core Multi-Processing,Enabled
+Intel(R) Virtualization Technology,Enabled
+VT-d,Enabled
+C1E Support,Enabled
+C State Support,C1C3C6C7C8
+Turbo Mode,Enabled
+Intel(R) SGX Control,Software Controlled
+Current State,Disabled
+Dust Shield Alert,Disabled
+After Power Loss,Last State
+Enhanced Power Saving Mode,Disabled
+Wake on LAN,Automatic
+Wake from PCI Device,Primary
+Wake from Serial Port Ring,Primary
+Wake Up on Alarm,Disabled
+Startup Sequence,Primary
+Alarm Time(HH:MM:SS),00:00:00][Status:ShowOnly
+Alarm Date(MM/DD/YYYY),01/01/2016][Status:ShowOnly
+Alarm Day of Week,Sunday
+Sunday,Disabled
+Monday,Disabled
+Tuesday,Disabled
+Wednesday,Disabled
+Thursday,Disabled
+Friday,Disabled
+Saturday,Disabled
+User Defined Alarm Time,00:00:00][Status:ShowOnly
+Allow Flashing BIOS to a Previous Version,Yes
+Require Admin. Pass. when Flashing,No
+Windows UEFI Firmware Update,Enabled
+Require POP on System Boot,Yes
+Require POP on Restart,No
+Require Admin. Pass. For F12 Boot,No
+Smart USB Protection,Disabled
+Require HDP on System Boot,Auto
+TCG Security Device,Discrete TPM
+Security Chip 2.0,Enabled
+Secure Boot,Disabled
+Network Offline Locker Setup,Disabled
+Credential Guard,Disabled
+Chassis Intrusion Detection,Disabled
+Configuration Change Detection,Disabled
+Password Count Exceeded Error,Enabled
+CSM,Enabled
+Boot Mode,Legacy Only
+Boot Up Num-Lock Status,On
+Startup Device Menu Prompt,Enabled
+OS Optimized Defaults,Enabled
+Primary Boot Sequence,USB FDD:USB KEY:M.2 Drive:SATA 1:SATA 2:SATA 3:Network 1:USB HDD:USB CDROM:Other Device;[Excluded from boot order:Network 2:Network 3:Network 4]
+Error Boot Sequence,Network 1:M.2 Drive:SATA 1:SATA 2:SATA 3:Other Device;[Excluded from boot order:Network 2:Network 3:Network 4:USB FDD:USB HDD:USB CDROM:USB KEY]
+Automatic Boot Sequence,SATA 1:M.2 Drive:Network 1:SATA 2:SATA 3:Other Device;[Excluded from boot order:Network 2:Network 3:Network 4:USB FDD:USB HDD:USB CDROM:USB KEY]

projects/MDT/Scripts/BIOSConfig/Lenovo/ThinkCentreConfig.ini

@@ -0,0 +1,3 @@
+Wake on LAN,Automatic
+Primary Boot Sequence,SATA 1:SATA 2:SATA 3:Network 1
+Automatic Boot Sequence,Network1:SATA 1:M.2 Drive:SATA 3:Other device

projects/MDT/Scripts/BIOSConfig/Lenovo/ThinkCentreConfigWOL.ini

@@ -0,0 +1,4 @@
+qQd8bbzDvJ2n7mc1dSZC2utCpdw=
+Wake on LAN,Automatic
+Primary Boot Sequence,SATA 1:SATA 2:SATA 3:Network 1
+Automatic Boot Sequence,Network1:SATA 1:M.2 Drive:SATA 3:Other device