Reporting BIOS Password States on Think Products with ConfigMgr Current Branch

There may be a need to run a report on your Think products to check which BIOS settings are enabled or disabled, or if there is even a BIOS supervisor password set.

This post will walk through creating a simple custom report in ConfigMgr that will display the following:
All Lenovo Think productsModel (Friendly Names)Computer Name BIOS VersionIs TPM Enabled?Is TPM Activated?Secure Boot StatusUEFI Enabled?BIOS Password(s) Set
Extending Hardware Inventory

First, you'll need to extend hardware inventory to collect these two Lenovo WMI classes.

Lenovo_Bios PasswordSettings

To make this a bit easier, there's a zip at the bottom of the page you can download that contains a MOF file you can import into your Default Client Settings that will add these classes.

Preparing a ThinkSmart Hub for Skype Room Systems

Lenovo has recently announced a device designed for Skype Room Systems dubbed ThinkSmart Hub 500.  There is documentation on how to create the Windows 10 installation image for Skype Room Systems consoles, however, the PowerShell script provided by Microsoft is targeted only for Surface devices and Surface drivers.

The build process and links to the required dependencies can be found here.

If you need to prep a Hub 500 as a Skype Room Systems console, I've modified a section of Microsoft's script so that the USB media can be built with the ThinkSmart Hub 500 driver pack.

Before you begin, you'll need to:
Format a USB drive as a Fat32 disk.Windows 10 Enterprise media.Download the MSU for KB4056892.Download the latest SRS deployment kit.Download the modified CreateSrsMedia.ps1 script (to only be used for the Smart Hub).Download the ThinkSmart Hub 500 driver pack. Place the MSU for KB4056892, driver pack, and SRS deployment kit in the same directory as the CreateSrsMedia.ps1 s…