question

TalhaAhmed-8531 avatar image
0 Votes"
TalhaAhmed-8531 asked LuDaiMSFT-0289 answered

Intune device restriction on Bios level

Hi
Can we use Microsoft intune to avoid PC being wiped out by end user, like restricting it on bios level or if we have to lock Bios through local admin option?
thanks

mem-intune-device-configurations
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

LuDaiMSFT-0289 avatar image
0 Votes"
LuDaiMSFT-0289 answered

@TalhaAhmed-8531 Thanks for posting in our Q&A.

For this issue, I have done some research. Currently, we can only prevent end users wiping device via Company Portal.
https://docs.microsoft.com/en-us/mem/intune/apps/company-portal-app#customizing-user-self-service-actions-for-the-company-portal
And there is no method can be used to restrict it on bios level via intune. We can post our detailed request in intune uservoice. This is a place to collect customers' requirements and problems. With your efforts, we are committed to improving our products. Here is the link:
https://microsoftintune.uservoice.com/forums/291681-ideas

If you only care about disabling the setting "Reset this PC" in the device, I found that someone used the command "reagentc.exe /disable" to disable reset. However, it seems to disable reset this PC via disabling recovery and not disable the reset setting directly.
https://www.reddit.com/r/sysadmin/comments/420fho/prevent_win10_reset/
Note: Non-Microsoft link, just for the reference.

Thanks for understanding.


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.