In the previous tip, we explained how to dump all BIOS settings for Lenovo computers. To change settings, you need to know the supported alternatives for a given setting. Here is a chunk of code that dumps the list of available options for a given BIOS settings (for Lenovo computers):

#requires -RunAsAdministrator

# this is case-sensitive
$Setting = "WakeOnLAN"

$selections = Get-WmiObject -Class Lenovo_GetBiosSelections -Namespace root\wmi
$selections.GetBiosSelections($Setting).Selections.Split(',')

Note that this code requires Administrator privileges. Also, the setting name is case-sensitive. The result may look similar to this:

 
Disable
ACOnly
ACandBattery
Enable 
 

And this would be a complete example showing how to retrieve the current BIOS settings, plus the list of legal settings:

#requires -RunAsAdministrator

$selections = Get-WmiObject -Class Lenovo_GetBiosSelections -Namespace root\wmi

Get-WmiObject -Class Lenovo_BiosSetting -Namespace root\wmi | 
Where-Object CurrentSetting |
ForEach-Object {
    $parts = $_.CurrentSetting.Split(',')
    [PSCustomObject]@{
        CurrentSetting = $parts[0]
        Status = $parts[1]
        Active = $_.Active
        AvailableSettings = $selections.GetBiosSelections($parts[0]).Selections.Split(',')
    }
} | Out-GridView

The result may look similar to this:

 
CurrentSetting                      Status                                Active AvailableSettings                 
--------------                      ------                                ------ -----------------                 
WakeOnLAN                           ACOnly                                  True {Disable, ACOnly, ACandBattery,...
WakeOnLANDock                       Enable                                  True {Disable, Enable}                 
EthernetLANOptionROM                Enable                                  True {Disable, Enable}                 
IPv4NetworkStack                    Enable                                  True {Disable, Enable}                 
IPv6NetworkStack                    Enable                                  True {Disable, Enable}                 
UefiPxeBootPriority                 IPv4First                               True {IPv6First, IPv4First}            
WiGigWake                           Disable                                 True {Disable, Enable}                 
WirelessAutoDisconnection           Disable                                 True {Disable, Enable}                 
MACAddressPassThrough               Disable                                 True {Disable, Enable}                 
USBBIOSSupport                      Disable                                 True {Disable, Enable}                 
AlwaysOnUSB                         Enable                                  True {Disable, Enable}                 
TrackPoint                          Automatic                               True {Disable, Automatic}              
TouchPad                            Automatic                               True {Disable, Automatic}              
FnCtrlKeySwap                       Disable                                 True {Disable, Enable}                 
FnSticky                            Disable                                 True {Disable, Enable}                 
FnKeyAsPrimary                      Disable                                 True {Disable, Enable}                 
BootDisplayDevice                   LCD                                     True {LCD, USBTypeC, HDMI, DockDisplay}
SharedDisplayPriority               DockDisplay                             True {HDMI, DockDisplay}               
TotalGraphicsMemory                 256MB                                   True {256MB, 512MB}                    
BootTimeExtension                   Disable                                 True {Disable, 1, 2, 3...}             
SpeedStep                           Enable                                  True {Disable, Enable}                 
AdaptiveThermalManagementAC         MaximizePerformance                     True {MaximizePerformance, Balanced}   
AdaptiveThermalManagementBattery    Balanced                                True {MaximizePerformance, Balanced}   
CPUPowerManagement                  Automatic                               True {Disable, Automatic}              
OnByAcAttach                        Disable                                 True {Disable, Enable}                 
PasswordBeep                        Disable                                 True {Disable, Enable}                 
KeyboardBeep                        Enable                                  True {Disable, Enable}                 
AMTControl                          Enable                                  True {Disable, Enable, Disable}        
USBKeyProvisioning                  Disable                                 True {Disable, Enable}                 
WakeByThunderbolt                   Enable                                  True {Disable, Enable}                 
ThunderboltSecurityLevel            UserAuthorization                       True {NoSecurity, UserAuthorization,...
PreBootForThunderboltDevice         Disable                                 True {Disable, Enable, Pre-BootACL}    
PreBootForThunderboltUSBDevice      Disable                                 True {Disable, Enable}                 
LockBIOSSetting                     Disable                                 True {Disable, Enable}                 
MinimumPasswordLength               Disable                                 True {Disable, 4, 5, 6...}             
BIOSPasswordAtUnattendedBoot        Enable                                  True {Disable, Enable}                 
BIOSPasswordAtReboot                Disable                                 True {Disable, Enable}                 
BIOSPasswordAtBootDeviceList        Disable                                 True {Disable, Enable}                 
PasswordCountExceededError          Enable                                  True {Disable, Enable}                 
FingerprintPredesktopAuthentication Enable                                  True {Disable, Enable}                 
FingerprintReaderPriority           External                                True {External, InternalOnly}          
FingerprintSecurityMode             Normal                                  True {Normal, High}                    
FingerprintPasswordAuthentication   Enable                                  True {Disable, Enable}                 
SecurityChip                        Enable                                  True {Active, Inactive, Disable, Ena...
TXTFeature                          Disable                                 True {Disable, Enable}                 
PhysicalPresenceForTpmProvision     Disable                                 True {Disable, Enable}                 
PhysicalPresenceForTpmClear         Enable                                  True {Disable, Enable}                 
BIOSUpdateByEndUsers                Enable                                  True {Disable, Enable}                 
SecureRollBackPrevention            Enable                                  True {Disable, Enable}                 
WindowsUEFIFirmwareUpdate           Enable                                  True {Disable, Enable}                 
DataExecutionPrevention             Enable                                  True {Disable, Enable}                 
VirtualizationTechnology            Enable                                  True {Disable, Enable}                 
VTdFeature                          Enable                                  True {Disable, Enable}                 
EthernetLANAccess                   Enable                                  True {Disable, Enable}                 
WirelessLANAccess                   Enable                                  True {Disable, Enable}                 
WirelessWANAccess                   Enable                                  True {Disable, Enable}                 
BluetoothAccess                     Enable                                  True {Disable, Enable}                 
USBPortAccess                       Enable                                  True {Disable, Enable}                 
MemoryCardSlotAccess                Enable                                  True {Disable, Enable}                 
SmartCardSlotAccess                 Enable                                  True {Disable, Enable}                 
IntegratedCameraAccess              Enable                                  True {Disable, Enable}                 
MicrophoneAccess                    Enable                                  True {Disable, Enable}                 
FingerprintReaderAccess             Enable                                  True {Disable, Enable}                 
ThunderboltAccess                   Enable                                  True {Disable, Enable}                 
NfcAccess                           Enable                                  True {Disable, Enable}                 
WiGig                               Enable                                  True {Disable, Enable}                 
BottomCoverTamperDetected           Disable                                 True {Disable, Enable}                 
InternalStorageTamper               Disable                                 True {Disable, Enable}                 
ComputraceModuleActivation          Enable                                  True {Disable, Enable, Disable}        
SecureBoot                          Disable                                 True {Disable, Enable}                 
SGXControl                          SoftwareControl                         True {Disable, Enable, SoftwareControl}
DeviceGuard                         Disable                                 True {Disable, Enable}                 
BootMode                            Quick                                   True {Quick, Diagnostics}              
StartupOptionKeys                   Enable                                  True {Disable, Enable}                 
BootDeviceListF12Option             Enable                                  True {Disable, Enable}                 
BootOrder                           USBCD:USBFDD:NVMe0:HDD0:USBHDD:PCILAN   True {HDD0, HDD1, HDD2, HDD3...}       
NetworkBoot                         USBFDD                                  True {HDD0, HDD1, HDD2, HDD3...}       
BootOrderLock                       Disable                                 True {Disable, Enable} 
 

Twitter This Tip! ReTweet this Tip!

Anonymous