Weekly Tip 69

Dell – Disable Booting from All UEFI Devices (expect HDD)

Note: the commands listed here are for Dell models only.

UEFI makes it a little more difficult to prevent  someone from booting to PXE, USB drives, and CD/DVDs. In legacy mode, you can simply turn these off. Due to the dynamic nature of UEFI, you cannot completely disable these options from one screen in the BIOS. With these four commands (there are two for PXE), you can successfully disable everything expect for the hard drive.

To set up, you need to install Dell Command | Configure on a reference machine. Copy the X86_64 folder from the installation directory to the other machines that you manage. This can be done with any desktop management application, such as ConfigMgr. For the purposes of the exercise, I will copy the X86_64 directory to C:\cctk\X86_64. Modify the commands accordingly. If you have a password set on your BIOS, you will need to add “–valsetuppwd=<password>” to the commands.

It may not show up well on the webpage, but there are double dashes:



C:\cctk\X86_64\cctk.exe –embnic1=onnopxe


C:\cctk\X86_64\cctk.exe –uefinwstack=disable

For CD/DVD’s, you must enable secure boot. There’s no other way to disable booting from CD/DVD. Command:

C:\cctk\X86_64\cctk.exe –secureboot=enable

USB Drives:

C:\cctk\X86_64\cctk.exe –usbemunousbboot=enable

One note on the command for USB drives – there’s no way to re-enable booting from USB from a command. This will have to be done manually from the BIOS. The same is true for Secure Boot – it CANNOT be disabled via a command.


All content provided on this blog is for information purposes only. Windows Management Experts, Inc makes no representation as to accuracy or completeness of any information on this site. Windows Management Experts, Inc will not be liable for any errors or omission in this information nor for the availability of this information. It is highly recommended that you consult one of our technical consultants, should you need any further assistance.



Contact Us

On Key

More Posts

Mastering Azure AD Connect - A Comprehensive Guide by WME
Active Directory

Mastering Azure AD Connect – A Comprehensive Guide

Modern businesses are fast moving toward cloud-based infrastructure. In fact, cloud-based business is not just a trend anymore but a strategic necessity. Microsoft’s Azure Active Directory (Azure AD) has become a frontrunner in this domain. It

Read More »
Security Best Practices in SharePoint
Office 365

Security Best Practices in SharePoint

Microsoft SharePoint is an online collaboration platform that integrates with Microsoft Office. You can use it to store, organize, share, and access information online. SharePoint enables collaboration and content management and ultimately allows your teams to

Read More »
The Ultimate Guide to Microsoft Intune - Article by WME
Active Directory

The Ultimate Guide to Microsoft Intune

The corporate world is evolving fast. And with that, mobile devices are spreading everywhere. As we venture into the year 2024, they have already claimed a substantial 55% share of the total corporate device ecosystem. You

Read More »
Protecting Microsoft 365 from on-Premises Attacks
Cloud Security

How to Protect Microsoft 365 from On-Premises Attacks?

Microsoft 365 is diverse enough to enrich the capabilities of many types of private businesses. It complements users, applications, networks, devices, and whatnot. However, Microsoft 365 cybersecurity is often compromised and there are countless ways that

Read More »
Be assured of everything

Get WME Services

Stay ahead of the competition with our Professional IT offerings.