Lenovo Think Deploy Blog

This article has been moved to  https://blog.lenovocdrt.com/#/2021/cv_configmgr_deploy Updated: 12/2021 Previously, Lenovo provided two separate apps (Lenovo Settings and Lenovo Companion) that allowed the user to change hardware settings, run diagnostic scans, and check for software and driver updates.  As of December 2017, all of the features in those two apps (discontinued) were merged into a single app - Commercial Vantage  - This post will walk through deploying Commercial Vantage as a ConfigMgr application. All required components, as well as the Group Policy Admin Template, and sample registry files are included in the zip available for download on the Vantage landing page. ----- Create the App Download/extract the contents from the zip   to a source location. In the console, navigate to Software Library > Application Management > Applications .  Click Create Application and set the following: General: Manually specify the application information   General

This post will walk through how to resolve automatic device encryption issues on Whiskey Lake generation ('90 series) ThinkPads, caused by un-allowed DMA capable bus/device(s). On an affected system, open System Information (as admin) and find the Device Encryption Support item.  The value should match what's shown below. This status, as noted in this  MS doc , " means Windows detected at least one potential external DMA capable bus or device that may expose a DMA threat. " The doc will also walk you through how to add the affected component to the whitelist.  The hard part is tracking down the component(s) to add.  In the Whiskey Lake generation, fortunately only 1 component needs to be added. The following sample script can be used to accomplish this: $regPath = "SYSTEM\CurrentControlSet\Control\DmaSecurity\AllowedBuses" $keys = @ { 'PCI Express Upstream Switch Port' = 'PCI\VEN_8086&DEV_15C0' } if (!(Get-