Dell BIOS Issue - Password Changes setting unlocked by default

[RobFuller]

Hi,

 

We started to have reports of workstation with the system password set, our initial though was they had reset the Admin BIOS password or similar.

But on closer inspection we found even though we had set the Admin BIOS password they can still add a system password!!

 

This is because the default setting from the factory is to allow a system password to be set even if locked by the BIOS Admin password. Found under

(Security, Password Changes) What’s worse is we can't even adjust this setting to locked using the Dell Client Configuration Utility!!!

I currently have Dell looking into this for me, has anyone else come across this problem? I don't fancy change our 700+ machines BIOS's!

 

Currently effecting our Optiplex 755, 745 and GX620 machines. Worth checking your BIOS Settings!!

[timbo343]

Buggar!!! Your right. A phone call to Dell i think!!

[tech_guy]

Yeah, we found out this little gem with our last batch of Dells - glad it was only 32 and not 700 like you!!!

[timbo343]

I have contacted DELL regarding this issue, but i have just looked at the latest BIOS updates for the OP755. We are running version A09 here are the fixes for A09:

1. Improved LOM/Network Stability

2. Updated recovery mode logic

3. Disabled all PCI SERR sources if user select SERR off in SETUP

4. Improved USB handoff in Linux

5. Improved hard drive password support

6. Improved TxT support

7. Improved PXE GBit connection capabilities

 

A10 fixes:

1. Updated Computrace OptionROM

2. Updated Imageserver OptionROM

a. Added "Client DHCP", "Client IP", "Client SubnetMask" and "Client Gateway" in BIOS Setup

b. Added popup warning message if user change Client DHCP setting from DHCP to Static IP.

c. Improved IP Address/Port Number algorithm

3. Improved PCI resource allocation algorithm

4. Added support for new CPU

5. Improved the BIOS interface with DCM/DCCU for diskette drive

6. Added new eSATA Token interface

 

and A11 (current BIOS download) fixes:

1. Added support for new Intel CPUs

2. Improved the HDD password algorithm

3. Improved the BIOS interface with DCM/OMCI for USB controller

 

Notice that there is nothing to do with the System Password.

 

Will post on here once i find something out.

 

Tim

[DrPerceptron]

Not one of our Dell PC's has come with this option in the correct state. I've bugged engineers about it and every call representative that has even phoned me asking what I think of Dell, but we've just made it part of the parcel when we set them up now.

[timbo343]

Update...

 

Installed BIOS A11, problem still not fixed

 

Have just contacted DELL support.... not helpful at all.. they said that the only way to solve this problem is to enter a system password. I asked to speak to a manager, but was on hold for 10 mins,, so i hung up..

 

Am now going to contact my account manager to see what he can do.

 

Tim

[timbo343]

Buggar.. Don't i look stupid now....

 

In the menu... go down to security -> password Changes -> and change to locked... press esc and save the settings.. now you cannot input a system password.

 

 

Tim (goes and sits in the corner)

[AngryTechnician]

Yep, we noticed this too. Like DrPerceptron, we've made it part of our setup routine. It's retarded, but by design AFAIK.

 

There is a suggestion to alter this default on the Dell IdeaStorm website. I would suggest that if you agree, please go and promote it (Dell Ideastorm works a bit like Digg in that users can vote an idea up or down).

[RobFuller]

I'm glad where not the only ones, I will keep the pressure on Dell to sort this stupidity. I'm surprised this hasn't been flagged before now!

[AngryTechnician]

I have to confess when we spotted it about a year ago (before I began posting here, which is why I've never mentioned it), I just banged my head into the desk and chalked it up to Dell being as bit retarded again without really pressing the point to our account manager.

[RobFuller]

Update: Dell have got back in contact with me, the guy was very amazed that this wasn't included in the Dell Client Configuration Utility as an option to control.

So as a result he is now passing this onto the development team of the utility to see if these features can be put into the next release!

So I will keep you posted when/if I have any updates.

[Antp]

Yeah ive also had this problem.

we just re-imaged the systems to gain control again and changed the admin password.

[RobFuller]

Where talking about the BIOS system password not the OS password Antp

[Antp]

Yes i understand that,

when the pupils at our school started changing the bios password we just re-imaged the machine and it also reset the bios password.

[AngryTechnician]

Out of curiosity, which imaging system are you using that resets the BIOS password? The ones we've used only touch the HD.

[Antp]

We use norton ghost and i was also suprized that it worked it was one of the other techies that just tried it and it worked.