Securing BIOS Passwords in Unattended Deployments

My Dell, HP, and Lenovo BIOS password and settings scripts all accept the BIOS password as a plain-text parameter. This keeps the scripts simple and broadly compatible, but it means that how you deliver the password to the script is also how you secure the password. This post covers how to do that safely under Configuration Manager and task sequences, and how the built-in CMS support added in version 2.3.0 makes it easier. ...

May 24, 2026 · 9 min

HP BIOS Password Management (HPCMSL)

This post covers script version 2.3.0. This is the HP Client Management Script Library (HPCMSL) variant of my HP BIOS password management script. It performs the same task as the WMI-based variant - automatically setting, changing, or clearing the Setup and Power-On passwords with logging and optional user prompts - but it uses the HPCMSL cmdlets instead of talking to the HP WMI interface directly. If you would rather avoid the module dependency, see the WMI variant. ...

May 22, 2026 · 8 min

HP BIOS Settings Management (HPCMSL)

This post covers script version 2.3.0. This is the HP Client Management Script Library (HPCMSL) variant of my HP BIOS settings management script. It performs the same task as the WMI-based variant - getting a list of current BIOS settings and setting BIOS settings from either the body of the script or a CSV file - but it uses the HPCMSL cmdlets instead of talking to the HP WMI interface directly. If you would rather avoid the module dependency, see the WMI variant. ...

May 22, 2026 · 8 min

Dell BIOS Password Management - WMI

This post was updated on May 25th, 2026 and covers script version 2.3.0. Earlier this year, I wrote about how to manage Dell BIOS passwords using PowerShell. The method described in that post uses the DellBIOSProvider PowerShell module. This method works, but I was not completely satisfied with it, as the PowerShell module needs to be downloaded and installed on every system the script runs on. Thankfully, Dell recently released a technical whitepaper documenting WMI classes that can be used to directly modify BIOS settings without needing an outside program or PowerShell module. This allowed me to create a new version of the Dell BIOS Settings Management script that does not require any additional content to function. ...

September 11, 2020 · 10 min

Dell BIOS Settings Management - WMI

This post was updated on May 25th, 2026 and covers script version 2.3.0. Earlier this year, I wrote about how to manage Dell BIOS settings using PowerShell. The method described in that post uses the DellBIOSProvider PowerShell module. This method works, but I was not completely satisfied with it, as the PowerShell module needs to be downloaded and installed on every system the script runs on. Thankfully, Dell recently released a technical whitepaper documenting WMI classes that can be used to directly modify BIOS settings without needing an outside program or PowerShell module. This allowed me to create a new version of the Dell BIOS Settings Management script that does not require any additional content to function. ...

September 11, 2020 · 11 min

Always On VPN - Troubleshooting

This post was updated on February 13th, 2021. There are many issues that can happen while configuring and using an Always On VPN solution. In this post I’ll be covering the common errors I’ve encountered while setting up Always On VPN. In addition, I’ll share some useful commands and show to how monitor VPN connections. Also, make sure to check out the troubleshooting section of the official Microsoft Documentation. Links to each individual post in this series can be found below. ...

July 6, 2020 · 9 min

Always On VPN - Basic Deployment Guide

With all the increased focus on working from home and remote access lately, I figured now would be a good time to share my notes on configuring Always On VPN. This first post will cover the basics of the Always On VPN technology. This guide will be split into multiple parts. Links to each individual post in this series can be found below. Always On VPN - Certificates and Active Directory Always On VPN - VPN and NPS Server Configuration Always On VPN - User Tunnel Always On VPN - Device Tunnel Always On VPN - Troubleshooting ...

June 4, 2020 · 5 min

Always On VPN - Certificates and Active Directory

This is the second post in my series on setting up a basic Always On VPN deployment. In this post I will be covering the requirements for the Always On VPN certificates. I will also talk about how Active Directory groups can be utilized. Links to each individual post in this series can be found below. Always On VPN - Basic Deployment Guide Always On VPN - VPN and NPS Server Configuration Always On VPN - User Tunnel Always On VPN - Device Tunnel Always On VPN - Troubleshooting ...

June 4, 2020 · 9 min

Always On VPN - Device Tunnel

This post was updated on August 17th, 2020. This is the fifth post in my series on setting up a basic Always On VPN deployment. In this post I will be covering the configuration of the device tunnel. Links to each individual post in this series can be found below. Always On VPN - Basic Deployment Guide Always On VPN - Certificates and Active Directory Always On VPN - VPN and NPS Server Configuration Always On VPN - User Tunnel Always On VPN - Troubleshooting ...

June 4, 2020 · 5 min

Always On VPN - User Tunnel

This post was updated on August 17th, 2020. This is the fourth post in my series on setting up a basic Always On VPN deployment. In this post I will be covering the configuration of the user tunnel. Links to each individual post in this series can be found below. Always On VPN - Basic Deployment Guide Always On VPN - Certificates and Active Directory Always On VPN - VPN and NPS Server Configuration Always On VPN - Device Tunnel Always On VPN - Troubleshooting ...

June 4, 2020 · 7 min