How do i change BIOS password remotely?

[Morse]

I need to change the BIOS password on every machone on my network!!!

 

Is there any way i can do this remotley via sccm or something to save me going around every machine and doing it manually?

 

Cheers

[Edu-IT]

To my knowledge, you can't, but if you can, I'm also interested to learn more.

[synaesthesia]

Pretty much only possible on some servers and what not with hardware remote addons (ILO etc) - and obviously this isn't the sort of kit you want to change

 

Unfortunately the only advice I can provide is a good pair of walking boots, and warm up your fingers. And a helping hand if you can trust someone else

[pete]

IIRC you can do this on Lenovo and IBM kit provided (yup, there's a catch) you've set the bios up to allow it in the first place.

[Morse]

The kit I'm using are Toshiba Tecra A10's if that helps?

[srochford]

All HP "business" desktops support remote BIOS password changing as do Dell - I'd guess you probably can use SCCM but Dell and HP provide a (very simple!) command line utility to do it so it can just be part of the machine startup script (and you don't need to have set anything previously in the BIOS - that would kind of defeat the purpose!)

 

A quick check shows that the Tecra A10 has an SMBIOS and this is the first thing you need to allow remote management so you might be in luck but I can't find any more info about this.

[plexer]

We've got some Toshiba L300 where if you set a supervisor bios password the only way to remove it is to run a windows tool.

 

Ben

[tommccann]

This is how you do it on a dell OMCI client

 

'*** Declare variables
Dim strNameSpace
Dim strComputerName
Dim strClassName
Dim strKeyValue 
Dim objInstance
Dim strPropName
Dim strPwd

'*** Check that the right executable was used to run the script
'*** and that all parameters were passed
If (LCase(Right(WScript.FullName, 11)) <> "cscript.exe" ) Or _
       (Wscript.Arguments.Count < 2) Then
       Call Usage()
       WScript.Quit
End If


'*** Initialize variables
strNameSpace = "root/Dellomci"
strComputerName = WScript.Arguments(0)
strClassName = "Dell_Configuration"
strKeyValue = "Configuration"
strPropName = "Password"
strPassEncryptPropName = "PasswordEncrypted"
strPwd = WScript.Arguments(1)


'*** Retrieve the instance of Dell_Configuration class (there should
'*** only be 1 instance).
Set objInstance = GetObject("WinMgmts:{impersonationLevel=impersonate}//" &_
       strComputerName & "/" & strNameSpace & ":" & strClassName & "=" & _
       Chr(34) & strKeyValue & Chr(34))


'*** Set the new value for the property and save the instance
objInstance.Properties_.Item(strPropName).Value = strPwd
objInstance.Properties_.Item(strPassEncryptPropName).Value = 0
objInstance.Put_


'*** If any errors occurred, let the user know
If Err.Number <> 0 Then
       WScript.Echo "Setting the BIOS password failed."
End If



'*** Sub used to display the correct usage of the script
Sub Usage()
Dim strMessage
strMessage = "Incorrect syntax. You should run: " & vbCRLF & _
       "cscript.exe //nologo SampleBIOSPwd.vbs  " & Chr(34) & _
       " space " & Chr(34)
WScript.Echo strMessage
End Sub

 

 

Hope this help, got a feeling it wont tho!

[synaesthesia]

Oooh, damned interesting

[timzim]

Is Morse a pupil? You don't have a lot of previous postings feller, nor much of a profile! I know my pupils would love the information you seek!

[srochford]

I know my pupils would love the information you seek!

 

They can get it pretty easily on any of the manufacturer web sites - it's only a security risk if they know the existing BIOS password (and if they know that then your security's gone!)

 

The Dell OMCI stuff has to be installed on the machines first (it's part of Dell's standard build) and only works for people with admin access; again, if users have those rights then all bets are off in security terms :-)