All content from Blogger has been moved or is in the process of being moved to https://blog.lenovocdrt.com Please reference the new site for future articles.  Articles in Blogger will remain published and will have a link to the new location at the top once they've been moved. Please post any questions related to this article in our Enterprise Client Management Forum. Comments for this blog have been disabled ..read more

This post will serve as a reference for all available Dock Manager policies that can be configured in Intune. Refer to the Dock Manager blog on how to create the Win32 app and for steps on how to ingest the Dock Manager ADMX in Intune, the same process can be found in the Manage Commercial Vantage with Intune blog. Below is a list of all possible settings, constructed as OMA-URIs General Name: Ask Before Firmware Update Description: This setting will configure to enable/disable a prompt to the user before executing the firmware update. If this setting is enabled, prompt will ..read more

Lenovo Deployment Assistant (LDA) is a new offering targeted at Microsoft Endpoint Configuration Manager (CM) administrators. This solution automates the tedious tasks of creating Application packages, Configuration Items, and Inventory Extensions for our various utilities used to patch and manage Lenovo PC's. With just a few clicks, you can direct LDA to accomplish in minutes what would normally take hours. And by running LDA on a regular basis, it will let you know when any of the Lenovo tools have been updated.  The applications that are covered by LDA include: Commercial Vantage L ..read more

A recent feature add (by popular demand) in Commercial Vantage is the ability to write the device's warranty information to WMI.   The Lenovo_WarrantyInformation WMI class located under the root\Lenovo Namespace is created when the "Write Warranty Information to WMI" policy has been enabled on the device. In this post, we're going to walk through how this data can be collected from Intune managed devices and ingested into a Log Analytics Workspace in Azure Monitor. The solution is derived from an excellent Microsoft blog post, which provides an example of collecti ..read more

There's already several great articles out in the community that walk through how to configure BIOS settings through Intune.  The majority of them being PowerShell solutions.   This post will provide an alternate method for configuring BIOS settings using our official Think BIOS Config HTA that was introduced back in 2016.  This solution can also be leveraged as part of an Autopilot deployment. Before proceeding, make sure you have an exported .ini file that contains the desired BIOS settings you want applied to your target systems.   Refer to the documentation pr ..read more

  OVERVIEW ThinkShield secure wipe is the successor to the ThinkPad Drive Erase Utility and is designed to provide the wipe out function of the SSD. Although the Drive Erase Utility is still supported and provided as an external tool, ThinkShield secure wipe is fully integrated in the BIOS image and does not require any external tools. Secure wipe can be executed locally by BIOS from the application menu of the Startup Boot Menu invoked by [F12] or remotely from OS through the WMI interface, which is what this post will be covering.  Supported Systems All Comet Lake (2020) ThinkPa ..read more

  Overview As the technology to serve those working from anywhere grows more sophisticated, so do the techniques to exploit it. Within the supply chain—after devices leave the manufacturer and before they reach the end user—there exists an opening for criminals to tamper with PCs, removing or replacing components, resulting in anything from malfunctioning devices to compromised systems with counterfeit parts.   Lenovo ThinkShield secures your critical data and business technologies with comprehensive, end-to-end protection. Now, two new services keep your devices even safer ..read more

  Introducing Lenovo Odometer In some previous articles we have highlighted how you can collect Lenovo Updates History from a new WMI class in the root\Lenovo namespace. See https://thinkdeploy.blogspot.com/2018/10/tracking-thininstaller-update-history.html We are now adding a new class under this namespace for the new "Odometer" feature found in the latest ThinkPads that were recently launched.  This feature keeps track of several metrics that can provide an indication of how a system has been used.  The metrics collected are:     CPU Uptime - amount of time CPU ..read more

Updated 2/1/21 - Added Intune deployment steps Introduction Lenovo Dock Manager is a new solution that reduces the effort that IT administrators spend on the large scale deployment of Lenovo dock firmware updates.  This solution runs on your PCs and maintains a cache of the current firmware versions for supported Lenovo docks.  When a dock is attached that has down-level firmware, it is automatically updated by Dock Manager.   Dock Manager can be found here: Lenovo Tools for Administrators  It can automatically download firmware updates from Lenovo Support dire ..read more

Updated 2/1/21: Added OMA-URI's for EULA and custom Repository Following up on the intro to Commercial Vantage post, this one will walk through managing a few of the policies with Intune.  This will be very similar to Managing System Update with Intune so some of the content will transfer here. Before you begin, you will need: Commercial Vantage .admx/.adml files - Found in the App/Deployment Guide zip which can be downloaded from the landing page here. A Windows 10 device connected to Azure Active Directory and managed by Intune Commercial Vantage installed on the device. I ..read more