Is everyone now using UEFI instead of BIOS?

[Zourous]

I haven't read or heard a lot about it on here and just wondered where everyone is with it. Were there any issues you've come across?

[Chrisbf1]

UEFI if it is supported. if the laptop has a TPM 2.0 chip then it will not function in legacy.

[CHiLL]

I believe all of our devices are now UEFI, as they all have the options for Secure Boot, which I don't think BIOS can support? On our off-site devices like laptops, secure boot is enabled along with BitLocker, though on on-site devices, Secure Boot is disabled and we're using Legacy Boot (though I'm planning to switch them to Secure Boot at some point).

[Jcx500]

Uefi on all devices and servers

[chazzy2501]

I've been switching devices over to UEFI and updating the BIOSes of those that don't, to support it. I'm doing this with the move to Windows 10. Really its so you can have the little manufacture logo whilst it's booting. I don't use TPM features, I don't encrypt the local drives but the option is there if I change my mind.

 

It is possible to switch from legacy to uefi without reinstalling Windows. There is a script you run before shutting down Windows and switching in the BIOS.

[Arthur]

UEFI on all devices and servers

Same here, although we still have a very small number of PCs that don't include UEFI support or only half-support* UEFI so we have to boot these in BIOS mode.

 

* These PCs are missing an option to enable UEFI network boot for some reason.

 

Really it's so you can have the little manufacture logo whilst it's booting.

There are lots of useful security features in Windows 10 Enterprise/Education that require UEFI. e.g. Secure Boot, Early Launch Anti-Malware, Device Guard, Credential Guard, Virtualization-based Security etc.

 

https://twitter.com/GossiTheDog/status/880331916897120260

 

 

www.microsoft.com/security/blog/2017/06/29/windows-10-platform-resilience-against-the-petya-ransomware-attack/

 

Edited July 11, 2019 by Arthur

[mavhc]

UEFI is great, except when you boot WDS with it and it weirdly adds a deny permission to the computer object.