Microsoft

System Center Configuration Manager Feedback

Suggestion box powered by UserVoice

How can we improve Configuration Manager?

Boot Image Password protection - make "enable command prompt" in boot images more secure

Make it possible to password protect the F8 command prompt during OSD.

the F8 support is very usefull for troubleshhoting but it is alos a security issue. Having two bootmedias (one with and one without) isn't a workaround since you will have to reboot to get the F8 support and the problem may not occur during the second atempt.

Allowing us to password protect the prompt gives a secure function that doesn't require a reboot when you have to troubleshoot.

29 votes
Vote
Sign in
(thinking…)
Sign in with: Facebook Google
Signed in as (Sign out)
You have left! (?) (thinking…)
Mats shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →
Noted  ·  sangeev responded  · 

Updated by bobmn for sangeev/OSD

2 comments

Sign in
(thinking…)
Sign in with: Facebook Google
Signed in as (Sign out)
Submitting...
  • Curt R commented  ·   ·  Flag as inappropriate

    Whenever we have a CM RAAS (healthcheck), Microsoft flags the fact that we have enabled the command prompt in the boot image. Microsoft advises the command prompt/labshell only be enabled in test environments, but in reality it's commonly enabled in production environments. Is it possible to add an additional password prompt so if a user presses F8 during a TS, it will not launch DOS unless specific credentials are entered, and if no credentials are entered any prompt would close (and the TS would continue) after a pre-set timeout is reached.

Feedback and Knowledge Base