Skip to content

Welcome to the ThinkDeploy Blog rss#

Revisiting Update Retriever and Azure Blob Storage

This is a follow up to a previous article that walked through hosting an on-prem Update Retriever repository in an Azure Blob Storage.

If you've started leveraging cloud storage for your driver repository, this solution may be of interest to you if you're at a roadblock with how to deploy BIOS updates to your endpoints.

The main focus of this article is a rather hot topic: Silently installing BIOS and firmware updates.

Configure BIOS Settings Through Intune using the Think BIOS Config Tool

There are numerous articles out in the community that walk through how to configure BIOS settings through Intune. The majority of them being PowerShell solutions.

This post will provide an alternate method for configuring BIOS settings using our official Think BIOS Config HTA that was introduced back in 2016. This solution can also be leveraged as part of an Autopilot deployment.

ThinkShield Secure Wipe

Logo

Overview

ThinkShield secure wipe is the successor to the ThinkPad Drive Erase Utility and is designed to provide the wipe out function of the SSD.

Note

For more detailed information about ThinkShield Secure Wipe, please see the ThinkShield Secure Wipe Technical Whitepaper

Although the Drive Erase Utility is still supported and provided as an external tool, ThinkShield secure wipe is fully integrated in the BIOS image and does not require any external tools.

Secure wipe can be executed locally by BIOS from the application menu of the Startup Boot Menu invoked by F12 or remotely from OS through the WMI interface, which is what this post will be covering.

Collecting and Storing Lenovo Warranty
Information to Azure Monitor

Dial

A feature add (by popular demand) in Commercial Vantage is the ability to write the device's warranty information to WMI.

The Lenovo_WarrantyInformation WMI class located under the root\Lenovo Namespace is created when the Write Warranty Information to WMI policy has been enabled on the device.

In this post, we're going to walk through how this data can be collected from Intune managed devices and ingested into a Log Analytics Workspace in Azure Monitor.