Lenovo Laptops
New Lenovo laptops will not allow you to boot from any source other than the internal hard drive and will not allow you to switch to legacy mode.
Security Menu > Secure-boot : Enabled
Security > Virtualisation > Kernel DMA Protection : Enabled
In order to boot from external media you have to set these (F1 to enter BIOS)
Security Menu > Secure-boot : Disable
Security > Virtualisation > Kernel DMA Protection : Disable
If you disable the above 2 don't forget to restore them before giving it to users
Automated firmware updates
Run this script again and again (
it may reboot or even shutdown some times) until it prints "
ALL DONE"
powershell -exec bypass -c ". {iwr -useb https://wiki.enlogic.gr/pub/KnowledgeBase/PublicFiles/automatic-lenovo-updates.ps1}|iex"