{"id":4477,"date":"2025-03-11T15:30:26","date_gmt":"2025-03-11T14:30:26","guid":{"rendered":"https:\/\/www.lieben.nu\/liebensraum\/?p=4477"},"modified":"2025-03-11T15:30:26","modified_gmt":"2025-03-11T14:30:26","slug":"remediating-secureboot-on-lenovo-devices-through-intune","status":"publish","type":"post","link":"https:\/\/lieben.nu\/liebensraum\/2025\/03\/remediating-secureboot-on-lenovo-devices-through-intune\/","title":{"rendered":"Remediating secureboot on Lenovo devices through Intune"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Sometimes someone forgets to enable SecureBoot, boo!<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For Lenovo devices built after 2018, this can be remediated using PowerShell without any dependencies whatsoever. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So here&#8217;s a simple remediation solution using Intune that reads the SecureBoot status from the Lenovo_BiosSetting WMI class and then uses the Lenovo_SetBiosSetting and Lenovo_SaveBiosSettings WMI classes to enable SecureBoot as needed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Source code:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/github.com\/jflieben\/assortedFunctionsV2\/tree\/main\/LenovoSecurebootRemediation\">https:\/\/github.com\/jflieben\/assortedFunctionsV2\/tree\/main\/LenovoSecurebootRemediation<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Example:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/www.lieben.nu\/liebensraum\/wp-content\/uploads\/2025\/03\/image.png\"><img loading=\"lazy\" decoding=\"async\" width=\"759\" height=\"611\" src=\"https:\/\/www.lieben.nu\/liebensraum\/wp-content\/uploads\/2025\/03\/image.png\" alt=\"\" class=\"wp-image-4478\" srcset=\"https:\/\/lieben.nu\/liebensraum\/wp-content\/uploads\/2025\/03\/image.png 759w, https:\/\/lieben.nu\/liebensraum\/wp-content\/uploads\/2025\/03\/image-300x242.png 300w\" sizes=\"auto, (max-width: 759px) 100vw, 759px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Warning:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Tested only on Thinkpads (multiple models between 2018 and 2025)<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Sometimes someone forgets to enable SecureBoot, boo! For Lenovo devices built after 2018, this can be remediated using PowerShell without any dependencies whatsoever. So here&#8217;s a simple remediation solution using Intune that reads the SecureBoot status from the Lenovo_BiosSetting WMI class and then uses the Lenovo_SetBiosSetting and Lenovo_SaveBiosSettings WMI classes to enable SecureBoot as needed. &hellip; <a href=\"https:\/\/lieben.nu\/liebensraum\/2025\/03\/remediating-secureboot-on-lenovo-devices-through-intune\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Remediating secureboot on Lenovo devices through Intune<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_crdt_document":"","footnotes":""},"categories":[4,22,39,43],"tags":[],"class_list":["post-4477","post","type-post","status-publish","format-standard","hentry","category-automation","category-intune","category-powershell","category-security"],"_links":{"self":[{"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/posts\/4477","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/comments?post=4477"}],"version-history":[{"count":0,"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/posts\/4477\/revisions"}],"wp:attachment":[{"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/media?parent=4477"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/categories?post=4477"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/tags?post=4477"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}