How to find company devices with no bios password setup?

Question

Recently, I noticed several laptop devices in my company that have no password setup in BIOS. At this step, I need to know which machine does not have BIOS password, is there any way to find this information in Microsoft Intones?

Answer 1

@Houman Alavehzadeh, Thanks for posting in Q&A.

From your description, I know you are looking for a way to detect whether your company devices have configured bios password.

I have done some research about this, I found we can create a PowerShell script and upload it to Intune to check whether the device has configured bios password, or we can user Proactive Remediations script to detect whether the device has configured bios password.

Here is some information you can refer.

https://msendpointmgr.com/2021/11/19/introducing-intune-bios-control/#intune-bios-control

https://www.configjon.com/dell-bios-password-management-wmi/

https://www.imab.dk/inventory-lenovo-bios-password-states-using-powershell-and-proactive-remediations/

Non-official, just for reference.

Please note that the script is only available for DELL and HP devices.

Hope it will help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hello Houman

Unfortunately, Microsoft Intune does not provide native capabilities to track or manage BIOS settings, including BIOS passwords, for Windows devices. Intune is mainly focused on managing device configuration, security policies, application deployment, and other management tasks related to the operating system and applications on the device.