Title: Disable all UEFI boot options

tblatt 问:

Hello,

system: Latitude E6530

I want to disable all UEFI boot options when system ist booting.

In BIOS setup under Settings --> General --> Boot Sequence, I can configure the boot list options for UEFI. But when I disable all options (NIC, USB, DVD, ...) and apply, they appear anyway at booting system pressing F12. The same, when I delete all boot options. When I go back after booting to BIOS, the options are there again.

With legacy options it's fine, all changings appear at booting.

What I have to do? Is there a additional box which I have to check?

Best Regards

Thomas

Dell 技术服务回答:

Hi,

F12 is a One-Time Boot menu. you can see all the supported boot options which the System has currently . This is mainly for the one time boot mode entry. when you restart the system the system will boot only from by the priority which you specified in the F2 screen settings under -->General --> Boot Sequence.

F2 screen Boot sequence is for setting the priority on which the system should boot at startup.( without using F12 each time )

F2 boot sequence ( Pre- Set boot priorities ) is different from F12 boot ( One time Boot Menus ) .

For more clarification: - Insert USB into system and see in F12 boot. you can see USB boot option.

- Remove the USB from the system and see in F12 boot. you will not find the USB boot option.( inspite of this Option is disabled in F2 or not. )

tblatt 问:

Hi,

thanks for your answer.

You say F12 shows all the boot options, the system has. But for legacy mode, it's working for me. I press F12, select the options I want to have, save, boot, F12, and under Legacy, there are exactly the checked options.

For UEFI, the system doesn't care, which options I check or uncheck, it always shows me usb or cd (when usb or cd is plugged in).

What I want to do is, to prevent, that our users can boot from their own usb stick or cd.

Is there a way to realize this?

Best Regards

Thomas

Dell 技术服务回答:

Hi ,

Try this. these are the options to disable the boot support of USB and CD devices.

Bios Version:  A12 .

System Configuration >> USB configuration >> uncheck Enable Boot Support - ( this will disable USB boot support )

System Configuration >> Miscellaneous Devices >> uncheck Enable Module Bay - ( this will disable the CD/DVD device boot support )

Now press F12 and check.  USB and DVD/CD boot devices will not be shown even if Devices are connected.

Note:- i hope this options will be available in A13 Bios under same category.

U盘启动和光盘启动可以绕过你硬盘上安装的操作系统,转而使用win pe将操作系统加载至内存,从而绕过你硬盘上安装的操作系统和其上的密码、安全设置、摆渡工具等所有安全防范。

后记:win pe启动拷贝文件是否会记入event log等其他相关日志并写入硬盘? 这个有待试验调查。

怎样禁用UEFI boot option中的USB启动,防止U盘WIN PE系统黑入电脑?的更多相关文章

  1. EasyUEFI---EFI/UEFI boot option management

    EasyUEFI owns comprehensive EFI/UEFI boot option management functions, such as create, delete, edit, ...

  2. 禁用 Spring Boot 中引入安全组件 spring-boot-starter-security 的方法

    1.当我们通过 maven 或 gradle 引入了 Spring boot 的安全组件 spring-boot-starter-security,Spring boot 默认开启安全组件,这样我们就 ...

  3. OpenWrt中开启usb存储和samba服务

    在从官网安装的WNDR3800 15.05.1版本OpenWrt中, 不带usb存储支持以及samba, 需要另外安装 1. 启用usb支持 USB Basic Support https://wik ...

  4. UEFI boot: how does that actually work, then?

    原文地址:https://www.happyassassin.net/2014/01/25/uefi-boot-how-does-that-actually-work-then/ 翻译:https:/ ...

  5. 【Spring】关于Boot应用中集成Spring Security你必须了解的那些事

    Spring Security Spring Security是Spring社区的一个顶级项目,也是Spring Boot官方推荐使用的Security框架.除了常规的Authentication和A ...

  6. 02-4设置第一启动项--U盘装系统中bios怎么设置USB启动

    整个U盘启动里最关键的一步就是设置U盘启动了,本教程内只是以特定型号的电脑为例进行演示,鉴于各种电脑不同BIOS设置U盘启动各有差异,所以如果下面的演示不能适用于你的电脑,建议去百度或者谷歌搜索一下你 ...

  7. 关于Boot应用中集成Spring Security你必须了解的那些事

    Spring Security Spring Security是Spring社区的一个顶级项目,也是Spring Boot官方推荐使用的Security框架.除了常规的Authentication和A ...

  8. Spring Boot 2 中的默认日志管理与 Logback 配置详解

    Spring Boot在所有内部日志中使用Commons Logging,但是对底层日志的实现是开放的.在Spring Boot生态中,为Java Util Logging .Log4J2 和Logb ...

  9. echarts中显示效果option中必有的属性

    写一个最简单的效果让option中不可缺少的属性. var option = { xAxis:[ //x轴,数组对象,其下至少有一个对象 {.....} ], yAxis:[//y轴,数组对象,其下可 ...

随机推荐

  1. 巧用HashMap一行代码统计单词出现次数

    简介 JDK是在一直在迭代更新的,很多我们熟悉的类也悄悄的添加了一些新的方法特性.比如我们最常用的HashMap. 今天给大家讲一下HashMap在JDK8中添加的两个新方法compute和merge ...

  2. sourse insight总是代码一写长了,就自动换行

    sourse insight总是代码一写长了,就自动换行. Document Options里面Word Wrap选项不勾选.

  3. <string name="xxx"> 的复杂用法:格式化及使用html标签

    1.官方文档: https://developer.android.com/guide/topics/resources/string-resource 2.格式化字符串 2.1 示例 <res ...

  4. 小花梨判连通 (bfs+思维+map统计数量)

    如果两个集合存储颜色的情况相同,说明这两个在k个图中都是在一个集合的 学到的点:用map,将vector映射一个整数时,只有vector后面的邻接的数据都一样时,才认为两个vector一样 代码: # ...

  5. Activiti7 表介绍

    由于Activiti自生成的表较多,这里先对activiti自生成数据库表进行介绍. 数据库表的创建在后续的demo文章中进行介绍,并且后续会写一篇关于数据库详解的文章,这里先大概知道Activiti ...

  6. python基础五(函数、全局变量和局部变量)

    一.全局变量和局部变量 全局变量,即可以在当前文件所有地方都可使用的变量,一次修改,整个文件都影响.如果函数体内部使用全局变量,要先声明global 局部变量,只能在函数体内部使用,除了函数体就不可使 ...

  7. Effective Objective-C 的读书笔记

    本文主要是摘录了 <Effective Objective-C 2.0>一书中提到的编写高质量iOS 代码的几个方法. 1 熟悉Objective -C 1.1 OC 起源 OC 为C语言 ...

  8. Kubernetes K8S之Pod跨namespace名称空间访问Service服务

    Kubernetes的两个Service(ServiceA.ServiceB)和对应的Pod(PodA.PodB)分别属于不同的namespace名称空间,现需要PodA和PodB跨namespace ...

  9. pytest测试框架 -- setup和teardown等

    一.用例运行级别 1.函数级别(setup.teardown 或 setup_function.teardown_function): 仅对处于同作用域的测试函数有效(该函数定义不在类中,则对非类中测 ...

  10. linux系统漏洞扫描工具lynis

    lynis 是一款运行在 Unix/Linux 平台上的基于主机的.开源的安全审计软件.Lynis是针对Unix/Linux的安全检查工具,可以发现潜在的安全威胁.这个工具覆盖可疑文件监测.漏洞.恶意 ...