Secure Disk Erase in SCCM Windows PE

[FN-GM]

Hi,

 

Does anyone know how i can use some secure disk erasing software that sits ontop of Windows PE please?

 

The idea is we PXE boot a machine and have the option to erase the hard disk.

 

Thanks

[VeryPC_Tom_M]

I guess it all depends HOW securely you want to wipe the data on the drive (i.e. how many passes).

 

If you're wanting a less secure solution, you could try using Clean all from Diskpart, which would zero every sector on the disk.

 

Please note, however that this can take up to 5 hours, for a single pass on a 1TB disk...

[FN-GM]

We dont have massive disks.

 

I normally used DBAN with 3 passes.

 

Thanks

[Arthur]

If you're wanting a less secure solution, you could try using Clean all from Diskpart, which would zero every sector on the disk.

One pass is enough to completely erase data.

 

I normally used DBAN with 3 passes.

Overkill and a waste of time.

 

From Vista onwards (Windows PE 2.x), a full format will also write zeros to the the drive.

Edited October 8, 2012 by Arthur

[FN-GM]

Im sort of getting back onto this. Does anyone know any alternatives than the PE formatting please?

[Arthur]

Does anyone know any alternatives than the PE formatting please?

What do you need the alternatives to do that Windows doesn't do already?

[VeryPC_Tom_M]

As an alternate software solution, I'd suggest Darik's Nuke and Boot: DBAN Download | Darik's Boot And Nuke

 

I'm presuming that you can run it within a PE environment, but that's something that I've never looked into (I normally run it from a Hiren's USB key).

[FN-GM]

I need 3 passes (I dont make the rules).

 

I am looking at using Dban but it doesn't need to be in PE. Does anyone have any guides on how to PXE boot Dban. I did a google search but it was vague, im not a linux expert. I might just open a new thread for Dban.

 

Thanks

[Arthur]

I need 3 passes (I dont make the rules).

This command will do a three pass erase in Windows PE.

 

format c: /fs=ntfs /x /p:3

[Arthur]

I'm presuming that you can run it within a PE environment

You can't run Linux from within Windows PE (not easily at least).

[VeryPC_Tom_M]

Sorry.. I was thinking PXE, rather than PE!

[FN-GM]

Sorry.. I was thinking PXE, rather than PE!

 

How do you do it?

[FN-GM]

format c: /fs=ntfs /x /p:3

 

/fs=ntfs is apparently an invalid parameter. googling says otherwise....

 

Thanks

Edited March 28, 2013 by FN-GM

[localzuk]

The Microsoft Desktop Optimisation Pack has DaRT in it, which is able to wipe disks.

 

Some have had a look at doing this here I believe.

[Arthur]

/fs=ntfs is apparently an invalid parameter.

Which Windows PE version are you using? 4.0?

[FN-GM]

6.2.9200.16384

[free780]

Wds is the pxe server which only likes wim files and bcd stores. Tftpd can do wims and linux. But you have to be patient doing the bcd config. Dban on a cd will do. Depends if you want to do it as a required deployment. Then you need diskpart or a 3rd party wiper that runs in pe.

[TechMonkey]

Sorry, slight Necro but I have just been researching this and found a solution.

 

Obviously be VERY careful with this. You can set it to be completely remote but with the possibilities that it could be accidentally assigned to a collection and wipe the whole network I will probably set it to only be called via PXE. This would at least mean someone would have to manually initiate and if they do that by accident they will have been intending to reimage a machine so it won't be so bad.

 

The Automated SysAdmin: Secure DoD Drive Wiping with SCCM is the link I used and I am currently testing. There is a more advanced update to this at Secure DoD Drive Wiping with ConfigMgr that will log to a server wiping confirmation.

 

Hope that helps someone else.