Convert from Legacy BIOS to UEFI using one task sequence
You have a current environment where you have deployed Windows 7 x64 OS, or similar, and you have your BIOS configured in Legacy mode.
You would like to be able to take advantage of the new Windows 10 features, such as "Credential Guard" therefore you need to enable Secure Boot and UEFI BIOS.
You would like to do this in one task sequence.
This scenario currently is not possible because SCCM knows if you are running UEFI or not - and has builtin safeguards.
Currently it's possible to create 2 task sequences.
1 Task contains the following:
Script to change the BIOS to Secure Boot
Format and partition the disk to GPT
add computer to collection where "2 Task sequence has been deployed as a required deployment".
2 Task sequence
install operating system
It would be very much appreciated that one could do all of the above changes in one task sequence:
Configure BIOS Settings (Vendor specific scripts is to be used, meaning microsoft should not create a solution for this)
Do USMT migration
Format disk as GPT
apply operating system
install applications and do customizations
Updating status to completed. This is now available in SCCM 1610 release – see here for more details https://docs.microsoft.com/en-us/sccm/osd/deploy-use/task-sequence-steps-to-manage-bios-to-uefi-conversion
Thanks for all your feedback
jay mo commented
Matias can you post or send me.the info for the workaround.
Harjit Dhaliwal commented
Nice to see this being added to ConfigMgr. Adaptiva has been doing it with one task sequence with this tool: http://www.adaptiva.com/blog/2016/adaptiva-speeds-secure-windows-10-migrations-free-microsoft-system-center-configuration-manager-community-solution/
Will use this workaround for now : http://www.1e.com/blogs/2016/07/19/legacy-bios-uefi-solution-community/?utm_content=36888879&utm_medium=social&utm_source=twitter
Matias Hohl commented
I had to solve this with one task sequence and found a good workaround. The only step failing was the step "Apply Operating System Image". This step never worked when the PC was started in Legacy mode and was formatted for UEFI. With my workaround everything works fine, the OS image is successfully applied and during the WinPE phase the BIOS is configured for UEFI boot. After the restart the PCs continue with the task sequence. If anybody is interested in my workaround post your request here.
Chris Thelen commented
This can actually be done as I'm currently doing this as part of my Windows 10 TS. It boots up to WinPE, runs the Dell Command & Configure tools to change BIOS from Legacy to UEFI, then formats the HDD (UEFI formatting is the only option in the TS), then installs the image, drivers, and so on. Its worked beautifully and haven't had any problems.
Morten Leth Hedegaard commented
While you are correct it can be accomplished to configure the BIOS settings using the vendor tools.
Problem is, this take effect after the first reboot, meaning your WinPE is in Legacy Mode, and there you cannot apply the OS unsless you have a MBR formattet disk.
This of course is a problem when you reboot, cause then you have UEFI enabled, and now you need GPT formattet disk, so your machine will not boot. :)
And you cannot apply an OS if you format the disk as GPT because WinPE knows your in legacy BIOS mode, so it will only apply the os on a MBR formattet disk.
Morten Leth Hedegaard
This can be done in one, I believe, if you're using the vendor tools to modify the BIOS (dell command & configure for example).